last executing test programs: 6m27.541651494s ago: executing program 32 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 5m56.600113493s ago: executing program 33 (id=282): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) connect$pptp(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0xa70410b) 5m8.752356821s ago: executing program 5 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x8000, 0x0) 5m8.731198581s ago: executing program 6 (id=452): r0 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 5m7.874543204s ago: executing program 5 (id=454): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x77}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="d9a0d5605896", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 5m7.183784234s ago: executing program 5 (id=456): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000780)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020de8ef96b6f08eec511ca0cf737fd0600a2096b5f14a6d8db8acc92b27792da1218207f9d66a832ffc838f7dc77a51e264746", 0x4c, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x0, 0x0, 0x50) 5m6.355141697s ago: executing program 5 (id=461): syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r0 = fsopen(&(0x7f0000000140)='iso9660\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r1, 0x4e, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x89, 0x9, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 5m6.236210828s ago: executing program 6 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000004000000000f6ff00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0xffff1510, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 5m6.217392979s ago: executing program 5 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 5m6.075445731s ago: executing program 6 (id=466): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 5m5.826978425s ago: executing program 6 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(0x0, 0x9) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 5m4.84723809s ago: executing program 5 (id=473): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) 5m4.550214214s ago: executing program 6 (id=477): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "304fc2", 0x0, 0x2, 0x0, @private2, @local}}}}, 0x0) 5m3.48296164s ago: executing program 6 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 5m3.334773723s ago: executing program 34 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 4m49.608124851s ago: executing program 35 (id=473): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) 3m31.076201474s ago: executing program 7 (id=827): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x894}, 0x38) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc77, 0x7fffffff}}]}}]}, 0x48}}, 0x0) 3m29.884480172s ago: executing program 7 (id=833): socket(0x10, 0x803, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x368, 0x98, 0x0, 0x1d0, 0x98, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'lo\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000240)="d429ee52212780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="190000000406000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3m29.674843005s ago: executing program 7 (id=836): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x60a}], 0x1}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x20040080) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x40}, 0x18) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m28.304983426s ago: executing program 8 (id=840): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3m26.320430966s ago: executing program 7 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(0x0, 0x9) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 3m25.906124103s ago: executing program 8 (id=844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 3m25.750821705s ago: executing program 8 (id=847): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) 3m25.672368086s ago: executing program 7 (id=848): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001080)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x7}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m25.055778176s ago: executing program 8 (id=853): syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x490a82, 0x108) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f00000024c0)=ANY=[@ANYBLOB='iocharset=maceceland,umask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=maccroatian,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703433372c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030302c005cfb6cadb737c3b7524172"], 0x1, 0x1527, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/100, 0x64) 3m23.904103823s ago: executing program 7 (id=856): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 3m23.773770945s ago: executing program 36 (id=856): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 3m23.689976046s ago: executing program 8 (id=858): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1050c0, 0xa2) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) shutdown(r1, 0x1) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x5, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0x6, 0x9, 0x7f, 0x401, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x5, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x23, 0x642, 0x7, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffff9, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xa, 0x6, 0x8, 0xfffffff9, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xf, 0xf9, 0x3, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x7695, 0xe4, 0x5, 0x80, 0xe, 0x312, 0x8000, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x401, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x2, 0x5f31, 0x3, 0x0, 0x6, 0x8, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x8, 0x8, 0x1, 0x7, 0xb, 0x9, 0x48c92690, 0x3, 0xff], [0x7, 0x4, 0x4, 0x64e, 0xfffffdfe, 0x80010002, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x0, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x200, 0x200, 0x80, 0x3, 0x0, 0x14, 0x0, 0x60000000, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0x0, 0x200, 0xffffffff, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x800], [0x2, 0xbb2f, 0x0, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x401, 0x5, 0x3, 0x40101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x0, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x100, 0x10000, 0x5, 0x184d99e8, 0x2b91, 0xa1f, 0x7f, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x28, 0xb1c, 0x4c400000, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 3m23.028310936s ago: executing program 8 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00'}, 0x18) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3m22.219288929s ago: executing program 37 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00'}, 0x18) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2m35.702136785s ago: executing program 9 (id=1013): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) 2m35.466053699s ago: executing program 9 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000d"], 0x24}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r2 = gettid() r3 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r2, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x1bdc, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) 2m34.472498504s ago: executing program 9 (id=1021): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 2m30.904310028s ago: executing program 9 (id=1040): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x2000000000000178, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendto(0xffffffffffffffff, &(0x7f00000006c0)="8b80985ec4058dd7d4a5dba00490f80d7406e1ae9726234ecaf2ec68b17e52da3ec8cff8e4f6648e8c832612c5dec41ad97eb53044b2476b509dd30bfe322a81df55423ff349fca326845ad0036edbdf7afde0985ecb8da40f135797cd0e1373edef19e9f9bab17d8bd5ed7a640cc196879ea6dad5287191c3fd6dff83865281f7fb32c6b989d27dfc2ff43719f75c13895f052cc66f3026e01df42a64bec292e68fa0e9414ec7d925", 0xa9, 0x50, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r3, 0x0, 0x2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m28.195554829s ago: executing program 9 (id=1046): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x30, 0x49, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x100003}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) 2m26.716316472s ago: executing program 9 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 2m26.709331721s ago: executing program 38 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 12.225083345s ago: executing program 4 (id=1593): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0xd0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) 12.008472548s ago: executing program 4 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff78c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.085755252s ago: executing program 4 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000040), 0x23, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x728e, 0x7}, &(0x7f00000001c0)=0x8) 10.178282545s ago: executing program 4 (id=1603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x2000000}], 0x1, 0x40002080, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x3, 0x1}, 0x2) 9.172265891s ago: executing program 4 (id=1605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x30, 0x0, 0x0, 0x5}, {0x16, 0x3}]}, 0x10) sendmmsg(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x154, 0x0) 9.150454521s ago: executing program 2 (id=1606): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x82, &(0x7f0000005f80)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x29, 0x365, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvdpJsGtpfcvhB0dPqTRBpKoJ6SigVijloZfHfxcWmWrNrIYsL6SGbvSjFk+JF0JO3HvTYs3gQ8ebBqxakKl7sRQoNjuzu7OxsdqPJYWOLn88hfPN97zvvzcwjMwnJy2vt2Lg4G5du374V8/OlmFk5uxJ3SrEUxyKJvp2Y6P25yXkA4B53J03j97Tvn3t/uDCIPPsB4P7Ve/6/cXKYKB+i+NqJaUwJAJiyA37//9zE7JWpTQsAmKKx5//DI817fsw/k/9OAABw/3rh5VeeXV2LuFCpzEc03mtVW9V4eti+eikuRz3W43Qsxm5E/0Wh/7bQ/fjM+bVzpytdPy9FtVvRqkY02q1q/01hNYnLaT3KsRyLsZTVp3l90q1f7tVXImKn3Rs/GqVWdTYWsvF/WIj1OBOL8f+x+ojza+fOVLIDVBuD+nZEJ+YHJ9GdfxKL8d3rcSXqcTG6tcP5by9XKmfTtZH61vVyrx8AAAAAAAAAAAAAAAAAAAAAAEzDY5XcUr7/Tdpot969MNLhZtY/3x+n2v882x+o098fKC0Pdue5luzdH2h0f55WdSaO/WtnDQAAAAAAAAAAAAAAAAAAAPeW5tZc1Or19c3m1tWNYtAuZN7+5vOvjsegaSYrfSsZVkWWXN9szuZHHnQsHDmJfIg0L0+TkT5ZkEQMOu/Urt/IZ1zsU87HGivvBuWxplI2p1q9fvKhnz6ZVPVnN9jpZZIYuyyjQSkbv9DU+F83MR8Ru/tV7R+UJ9+LPPgjTdP9yrc/Hq+KUsRMHHoaBwi+vvXmA483Tz3Ry3yZbfrwyKOLL/740We/btTq0elfmXp9brO5m04+zoni3enOdbxPUlg/pew6lyashMlBZ5jpbDa3asn3v7304Aff7umcTF4/aTHzzv5jfbE3M9cPShFLg4vwd1OdnbD4u8GTo7fy6kbt1bv56j38jTv16UrtxvbNXw5aVfgiYaMOAAAAAAAAAAAAAAAAAAA4EoU/MD6Ep56f3owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OgN//9/IeiMZQ4S3G3HeFN5fbO57+DHj/RUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/srAAD//xu8baw=") syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 8.003165509s ago: executing program 2 (id=1610): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x688, 0x50b, 0x2, 0xb10}, 0x3fc8, 0x0, 0x1, 0x6, 0x7ff00, 0x4, 0xb, 0x17, 0x1, 0xfffffffe, {0x3, 0x8000, 0xa0, 0x7ff, 0x1, 0x8000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe2}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x20002, 0xfffffffa, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x1019, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x1, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x836, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xcd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0xfffffff1, 0xa, 0xb4, 0x7, 0x4, 0x0, 0x0, 0x8156b2a, 0x2, 0x8, 0x4, 0xa0, 0x4, 0x7, 0x4, 0xe, 0x81, 0xff, 0x2, 0xe6b, 0x80000000, 0xa, 0x8d4c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0xa, 0x44, 0x1, 0x0, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0x13, 0x4, 0x2, 0x2c000, 0x84, 0x1, 0x101, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x5, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xffff8000, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x6, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x7, 0x10, 0x6, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x3, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x10001, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x3, 0x9, 0x5, 0x3, 0x4, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000003, 0xfffffffe, 0xd, 0x66, {0xb, 0x0, 0x202, 0x260a, 0xfffa, 0xbe}, {0xd9, 0x2, 0x8, 0x800, 0xfff}, 0x6, 0x9}}]}]}}]}, 0x478}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.863822776s ago: executing program 2 (id=1612): madvise(&(0x7f00003df000/0x2000)=nil, 0x2000, 0x1a) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x800) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000480)={[&(0x7f00000002c0)='/-&\xf1@/\x00', &(0x7f0000000440)='^)^#@^:\x00']}, &(0x7f00000004c0)={[&(0x7f0000000280)='/-&\xf1@/\x00', &(0x7f00000003c0)='/-&\xf1@/\x00']}, 0x0) 6.726613758s ago: executing program 3 (id=1615): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0xfffffffffffffc86, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 6.559310401s ago: executing program 3 (id=1617): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000009000000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.493939541s ago: executing program 2 (id=1618): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x1, r1, 0x2, r2}, 0x10) socket$inet6(0xa, 0x1, 0x100) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 6.458342602s ago: executing program 1 (id=1620): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80801) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 6.295854305s ago: executing program 2 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) 4.797962397s ago: executing program 3 (id=1622): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=0x0], 0x3c}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4.755736987s ago: executing program 0 (id=1623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 4.528618891s ago: executing program 3 (id=1624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 4.466613162s ago: executing program 2 (id=1625): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.465727102s ago: executing program 1 (id=1626): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.443168042s ago: executing program 4 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xfffffffffffffef8, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 3.402350258s ago: executing program 0 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000016c0)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000f00)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000f40)="e6849fea", 0xfdef}], 0x1}}], 0x2, 0x0) 3.401978418s ago: executing program 3 (id=1629): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40042, 0x6ab858183a7ef6b3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000580)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x1, 0x51f, 0x80, 0x40, {0x5, 0xffff, 0x5, 0xfffffffffffffffc, 0x9, 0x5, 0x3, 0x4, 0x200, 0x8000, 0x6, 0x0, 0xee00, 0xfffffffa, 0xfffffffc}}, {0x0, 0x6}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x3a2020, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) fanotify_init(0x20, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x42, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r3, r3, r3) pwritev2(r1, &(0x7f0000001140)=[{&(0x7f0000000fc0)="ea", 0x1}], 0x1, 0x6, 0xde, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3, 0x4, 0x800000000000065, 0x0, 0x0, [{{}, 0xe9}]}) 3.336351629s ago: executing program 1 (id=1630): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 3.29669862s ago: executing program 1 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3fff}}, 0x14}}, 0x4084854) 3.104081723s ago: executing program 3 (id=1632): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.9539637s ago: executing program 0 (id=1633): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000100)={0x1, 0x1}) 1.421575288s ago: executing program 1 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.27987158s ago: executing program 0 (id=1635): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="dfbbc728e801c3cc0a54630dbe1c8a0904960f98e68961cb6b9a3c32d4d2d7c476819f9b9b815eba43e318e6fa807ad1a3f048a7239c74e33cd51492f1290fefa777dfbebb9b26869ad32f104fc4b857ed0607a28b6672c259d39ca73d5b8c419244182b4322f786812dd2d73c48b2b6a0faa0b5f477c9f6b31ca470b16273d1b54357635bd527c7c8b4577d330a1b2e4d55749e1ff2f97636231f038eb88fc3de9648d5fb8a9b98cd46aeb44740f65e408a7d23f36f2e7ddd1d22f4f77defbff9ac6690d5bb19154f2eae60dcf3fa023284a5271014edf23bc02d0315f4bc372ed26345ad432f4365", 0xe9}, {&(0x7f0000000280)="39d8cd36ba397f9731acb2f36b8f29", 0xf}, {&(0x7f0000000e00)="5a4ce644230e1c53939feb4bd877536a852a278f35c5724cfb6752df1b96d04654f267dc103459187c8a0bd6f6226020d75760558d290c4336ddeae48fee6cb6e6d3f33aac887bf581eaf6ecc026240f512a5cd8eb7e04a6d02b080b88064aaac4e562bf670731d60806c3ddb013cbb84795760e36eabd57e5c4379933ba34d67bf7900a0c9fd444a6ff0402837fa0f885a66f38a236119ac1c1c6df", 0x9c}, {&(0x7f0000000840)="05ce83d64cf8bec0aed03484cd410c5fae8dcc8a7366681fdd56", 0x1a}, {&(0x7f0000000ec0)="4e044cf84412afd3f21fe2687827fc567e4759045b717532d8f7a4608a08e2d16a20dc03aee67db2380c870f2cdf9e6058fad01540ef02463f6ed77a5d45b37b15dfd9965ee88ca8e2d6d47758ba0463357a5d562258db1c529c06b21cff8c8a19ffa1029f94fea4e0d628073c435df4b21a6394551dcac3007945c91bcf300b08dcdd430320d25e1ec7f88a4f71ec7c15f83c6e66e12ce8e84568a6ac468d6403aa8910f830e62400d37fc872da806b194723d5b4c87b72574e9092a174a0000f85e6a27dbe1616aad16b", 0xcb}, {&(0x7f0000000fc0)="a84f802e3baea81fe8d8b22f3c4828e3d4199474a8b0e72c1e4ff65dd137215b95f6f002dad25cbc", 0x28}, {&(0x7f0000002d00)="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", 0xd95}], 0x7}, 0x0) 1.27935385s ago: executing program 0 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) 789.63µs ago: executing program 1 (id=1637): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10f242, 0x1e4) pwrite64(r0, 0x0, 0x0, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xfff8, 0xf}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=1638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d100d6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b35a20af1752f3f2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000e83e1300000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450fc21d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f7b5bf21ecd12357309e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a4de84ff1907140070000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba9b49254d8192124c20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f94791369df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c717ed53db529a811662841b1dc43291e450ce9b8d7d80fcb44966d7ad4691a3787000000000000000000000000000000000000000000001cadd5e4558166315878c65b6b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r2) kernel console output (not intermixed with test programs): 16986][ T26] audit: type=1326 audit(152.150:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2f70ba8 code=0x7ffc0000 [ 154.868739][ T6460] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.872034][ T6460] F2FS-fs (loop13): Unable to read 1th superblock [ 154.873887][ T6460] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.876707][ T6460] F2FS-fs (loop13): Unable to read 2th superblock [ 155.852254][ T6465] device vlan2 entered promiscuous mode [ 156.897687][ T6494] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.291202][ T6510] binder: 6509:6510 tried to acquire reference to desc 0, got 1 instead [ 158.294698][ T6510] binder: 6509:6510 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 158.301496][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.457'. [ 158.308088][ T6510] binder: 6510 RLIMIT_NICE not set [ 158.312020][ T21] binder: undelivered TRANSACTION_COMPLETE [ 158.505895][ T6513] overlayfs: statfs failed on './file0' [ 158.517696][ T6528] overlayfs: failed to clone upperpath [ 159.813223][ T6534] overlayfs: failed to resolve './bus': -4 [ 159.847339][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 159.905993][ T6568] bridge0: port 3(vxlan0) entered blocking state [ 159.921971][ T6568] bridge0: port 3(vxlan0) entered disabled state [ 159.924627][ T6568] device vxlan0 entered promiscuous mode [ 161.433198][ T580] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.449440][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 161.449452][ T26] audit: type=1326 audit(161.390:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.493350][ T580] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.498521][ T26] audit: type=1326 audit(161.390:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.515733][ T6631] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 161.520902][ T26] audit: type=1326 audit(161.430:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.532065][ T6631] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 161.532478][ T26] audit: type=1326 audit(161.430:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.561803][ T580] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.573310][ T26] audit: type=1326 audit(161.430:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.595029][ T26] audit: type=1326 audit(161.430:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.612890][ T26] audit: type=1326 audit(161.430:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.641292][ T26] audit: type=1326 audit(161.430:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.643744][ T580] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.653040][ T26] audit: type=1326 audit(161.430:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 161.672992][ T26] audit: type=1326 audit(161.440:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae116ba8 code=0x7ffc0000 [ 162.012510][ T6655] loop3: detected capacity change from 0 to 2048 [ 162.086591][ T6655] Alternate GPT is invalid, using primary GPT. [ 162.094535][ T6655] loop3: p1 p2 p3 [ 162.399239][ T6780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.487'. [ 162.402623][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.404825][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.502971][ T6640] chnl_net:caif_netlink_parms(): no params data found [ 162.578340][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 162.688826][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.694229][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.704814][ T6640] device bridge_slave_0 entered promiscuous mode [ 162.748159][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.750011][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.753810][ T6640] device bridge_slave_1 entered promiscuous mode [ 162.802682][ T6866] qfq: no options [ 162.805929][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 162.826353][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 162.838833][ T4147] udevd[4147]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 162.890432][ T4027] udevd[4027]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 163.758678][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 163.770725][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 163.782928][ T4027] udevd[4027]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 163.803085][ T4147] udevd[4147]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 163.830825][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.845423][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.887207][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 163.888899][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 163.891188][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 164.022998][ T6640] team0: Port device team_slave_0 added [ 164.061962][ T6640] team0: Port device team_slave_1 added [ 164.085303][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.088219][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.096522][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.884801][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.886728][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.907021][ T6981] binder: 6980:6981 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 164.910194][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.926873][ T6981] binder: 6980:6981 got transaction to invalid handle, 1 [ 164.938809][ T6981] binder: 6980:6981 transaction failed 29201/-22, size 0-0 line 2917 [ 164.963938][ T6981] binder: 6980:6981 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 164.967823][ T6981] binder: 6981 RLIMIT_NICE not set [ 164.969222][ T6981] binder: 6980:6981 ioctl c0306201 20000240 returned -11 [ 164.975591][ T6981] binder: 6980:6981 BC_FREE_BUFFER u0000000020ffe000 no match [ 164.979505][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.999215][ T6640] device hsr_slave_0 entered promiscuous mode [ 165.017483][ T6640] device hsr_slave_1 entered promiscuous mode [ 165.045934][ T7013] overlayfs: statfs failed on './file0' [ 165.067239][ T6640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.069342][ T6640] Cannot create hsr debugfs directory [ 165.160414][ T7020] team0: Port device ip6gretap1 added [ 165.245810][ T7072] udc-core: couldn't find an available UDC or it's busy [ 165.249170][ T7072] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.806994][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 166.395881][ T7108] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 166.439953][ T7115] overlayfs: failed to clone upperpath [ 166.466769][ T7108] team0: Port device dummy0 added [ 166.634928][ T580] device hsr_slave_0 left promiscuous mode [ 166.639605][ T7116] loop4: detected capacity change from 0 to 32768 [ 166.748815][ T7116] (syz.4.507,7116,1):ocfs2_load_local_alloc:319 ERROR: Local alloc size is invalid (la_size = 33328) [ 166.752116][ T7116] (syz.4.507,7116,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 166.754215][ T7116] (syz.4.507,7116,1):ocfs2_check_volume:2465 ERROR: status = -22 [ 166.756365][ T7116] (syz.4.507,7116,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 166.758476][ T7116] (syz.4.507,7116,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 166.774183][ T7116] (syz.4.507,7116,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 166.777248][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.779334][ T580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.797485][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.800720][ T580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.810136][ T580] device bridge_slave_1 left promiscuous mode [ 166.814192][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.868682][ T580] device bridge_slave_0 left promiscuous mode [ 166.870393][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.027442][ T580] device veth1_macvtap left promiscuous mode [ 167.029122][ T580] device veth0_macvtap left promiscuous mode [ 167.030759][ T580] device veth1_vlan left promiscuous mode [ 167.032336][ T580] device veth0_vlan left promiscuous mode [ 167.635966][ T580] team0 (unregistering): Port device team_slave_1 removed [ 167.661067][ T580] team0 (unregistering): Port device team_slave_0 removed [ 167.670134][ T580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.887493][ T4461] Bluetooth: hci2: command 0x040f tx timeout [ 168.057641][ T580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.654222][ T580] bond0 (unregistering): Released all slaves [ 168.687080][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.744680][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.751964][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.765793][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.772980][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.805337][ T7117] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 168.843179][ T7117] team0: Port device dummy0 removed [ 168.849254][ T7117] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.856259][ T7152] sch_tbf: burst 4395 is lower than device lo mtu (65550) ! [ 169.956452][ T6640] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.972918][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 170.207608][ T6640] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 170.628668][ T6640] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 170.679846][ T6640] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 170.693810][ T7208] Cannot find del_set index 1 as target [ 171.009041][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.061368][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.064056][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.088549][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.115639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.121771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.124535][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.126529][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.163705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.191260][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.194118][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.196662][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.198715][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.041549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.046255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.107896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.113293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.127478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.137778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.147887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.306968][ T6640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.309699][ T6640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.496891][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.514167][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.686890][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.891121][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.971800][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.227817][ T7263] binder: 7261:7263 ioctl 4018620d 0 returned -22 [ 173.370747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.373039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.394778][ T7263] loop4: detected capacity change from 0 to 4096 [ 173.399185][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.450964][ C1] vcan0: j1939_tp_rxtimer: 0x00000000bbbfa218: rx timeout, send abort [ 173.617168][ T7278] binder: 7261:7278 ioctl c018620c 0 returned -14 [ 173.619311][ T7278] binder: 7261:7278 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 173.622660][ T7278] binder: 7278 RLIMIT_NICE not set [ 173.882901][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.885884][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.942598][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.945667][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.951761][ C1] vcan0: j1939_tp_rxtimer: 0x0000000073f2cb68: rx timeout, send abort [ 173.954522][ C1] vcan0: j1939_tp_rxtimer: 0x00000000bbbfa218: abort rx timeout. Force session deactivation [ 173.969786][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.972576][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.988060][ T6640] device veth0_vlan entered promiscuous mode [ 173.996020][ T6640] device veth1_vlan entered promiscuous mode [ 174.089981][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.092550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.095084][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.098456][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.113864][ T6640] device veth0_macvtap entered promiscuous mode [ 174.149488][ T6640] device veth1_macvtap entered promiscuous mode [ 174.454028][ C1] vcan0: j1939_tp_rxtimer: 0x0000000073f2cb68: abort rx timeout. Force session deactivation [ 175.018754][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.021318][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.029096][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.031989][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.034505][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.077738][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.124289][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.215945][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.220459][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.226101][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.235103][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.238295][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.241214][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.243827][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.246578][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.383763][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.386602][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.405685][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.412017][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.421169][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.705114][ T7334] binder: BINDER_SET_CONTEXT_MGR already set [ 175.737214][ T7334] binder: 7331:7334 ioctl 4018620d 20000040 returned -16 [ 175.739960][ T7334] binder: tried to use weak ref as strong ref [ 175.741643][ T7334] binder: 7331:7334 Acquire 1 refcount change on invalid ref 0 ret -22 [ 175.750067][ T7334] binder: 7331:7334 got transaction to invalid handle, 1 [ 175.752411][ T7334] binder: 7331:7334 transaction failed 29201/-22, size 88-24 line 2917 [ 175.784342][ T4085] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.801760][ T6640] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.804232][ T6640] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.806561][ T6640] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.818501][ T6640] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.891266][ T7346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.542'. [ 176.149449][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.151796][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.156767][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.309732][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.545'. [ 176.312171][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.314041][ T7383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.360055][ T7374] netlink: 156 bytes leftover after parsing attributes in process `syz.3.544'. [ 176.462784][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.465193][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.694425][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.647202][ T1534] Bluetooth: hci0: command 0x0409 tx timeout [ 177.744385][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 178.796283][ T7509] lo speed is unknown, defaulting to 1000 [ 178.799094][ T7509] lo speed is unknown, defaulting to 1000 [ 178.802588][ T7509] lo speed is unknown, defaulting to 1000 [ 178.807719][ T7509] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.813491][ T7509] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.852721][ T7510] loop4: detected capacity change from 0 to 164 [ 178.948521][ T7509] lo speed is unknown, defaulting to 1000 [ 178.952850][ T7509] lo speed is unknown, defaulting to 1000 [ 178.955024][ T7509] lo speed is unknown, defaulting to 1000 [ 178.957134][ T7509] lo speed is unknown, defaulting to 1000 [ 178.959234][ T7509] lo speed is unknown, defaulting to 1000 [ 178.961286][ T7509] lo speed is unknown, defaulting to 1000 [ 179.332289][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.334307][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.347920][ T7326] device bridge_slave_0 entered promiscuous mode [ 179.727225][ T4097] Bluetooth: hci0: command 0x041b tx timeout [ 180.417097][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.418988][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.443628][ T7326] device bridge_slave_1 entered promiscuous mode [ 180.530745][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.561900][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.748612][ T7592] netlink: 'syz.7.555': attribute type 16 has an invalid length. [ 180.750753][ T7592] netlink: 'syz.7.555': attribute type 17 has an invalid length. [ 180.804383][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.806564][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.418664][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.426646][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.441463][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.443549][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.473779][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.476287][ T7592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.520718][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.522801][ T7592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.613688][ T580] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.675186][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.7.562'. [ 181.753214][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.816395][ T580] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.820802][ T4113] Bluetooth: hci0: command 0x040f tx timeout [ 181.868124][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.973873][ T7326] team0: Port device team_slave_0 added [ 181.983481][ T580] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.001427][ T7326] team0: Port device team_slave_1 added [ 182.119203][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.121123][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.147416][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.176087][ T580] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.195099][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.197323][ T4411] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 182.197344][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.199714][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.545262][ T7326] device hsr_slave_0 entered promiscuous mode [ 182.587526][ T7326] device hsr_slave_1 entered promiscuous mode [ 183.894873][ T4036] Bluetooth: hci0: command 0x0419 tx timeout [ 184.543204][ T580] tipc: Left network mode [ 184.650016][ T7326] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 184.711552][ T7326] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 184.770058][ T7326] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 184.875233][ T7326] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 186.116798][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.418057][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.421630][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.509266][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.738082][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.741240][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.743894][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.745782][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.779742][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.789980][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.803658][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.805604][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.826149][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.990907][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.993758][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.863193][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.903796][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.136349][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.141848][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.151501][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.168430][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.457765][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.473606][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.487817][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.504614][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.660939][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.662835][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.612376][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.614938][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.617979][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.7.603'. [ 193.626369][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.605'. [ 193.741483][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.024000][ T580] device hsr_slave_0 left promiscuous mode [ 194.152913][ T580] device hsr_slave_1 left promiscuous mode [ 195.975742][ C0] vcan0: j1939_tp_rxtimer: 0x000000006670e4b1: rx timeout, send abort [ 196.019675][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.021895][ T580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.032639][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.035100][ T580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.478080][ C0] vcan0: j1939_tp_rxtimer: 0x000000006670e4b1: abort rx timeout. Force session deactivation [ 196.507261][ T8100] tmpfs: Bad value for 'size' [ 197.333765][ T580] device bridge_slave_1 left promiscuous mode [ 197.335629][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.419511][ T580] device bridge_slave_0 left promiscuous mode [ 197.421502][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.547276][ T580] device veth1_macvtap left promiscuous mode [ 197.548991][ T580] device veth0_macvtap left promiscuous mode [ 197.550667][ T580] device veth1_vlan left promiscuous mode [ 197.552259][ T580] device veth0_vlan left promiscuous mode [ 198.001841][ T580] team0 (unregistering): Port device team_slave_1 removed [ 198.029078][ T580] team0 (unregistering): Port device team_slave_0 removed [ 198.050827][ T580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.100891][ T580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.354425][ T580] bond0 (unregistering): Released all slaves [ 199.900570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.961725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.678877][ T7326] device veth0_vlan entered promiscuous mode [ 200.697800][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.700740][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.714111][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.727649][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.747369][ T7326] device veth1_vlan entered promiscuous mode [ 201.305236][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.687287][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.690648][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.360965][ T8174] overlayfs: failed to clone upperpath [ 202.523095][ T7326] device veth0_macvtap entered promiscuous mode [ 202.525668][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.556532][ T7326] device veth1_macvtap entered promiscuous mode [ 203.416927][ T8185] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 203.562037][ T8190] bond1: (slave bridge2): making interface the new active one [ 203.565272][ T8190] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 203.668360][ T8195] device macvlan2 entered promiscuous mode [ 203.671171][ T8195] device bond1 entered promiscuous mode [ 203.672782][ T8195] device bridge2 entered promiscuous mode [ 203.721650][ T8195] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.723954][ T8195] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 203.808988][ T8195] device bond1 left promiscuous mode [ 203.810506][ T8195] device bridge2 left promiscuous mode [ 203.859055][ T8238] overlayfs: failed to clone upperpath [ 203.999899][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.016745][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.026965][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.030125][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.177283][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.181615][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.967265][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.970192][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.973055][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.991532][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.000988][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.004120][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.041537][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.044267][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.220934][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.241835][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.653579][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.657757][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.669834][ T7326] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.672385][ T7326] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.674883][ T7326] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.705388][ T7326] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.830650][ T4173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.833379][ T4173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.890519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.943552][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.946077][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.977214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.575696][ T8345] tmpfs: Bad value for 'size' [ 211.411804][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 211.510298][ T8352] loop8: detected capacity change from 0 to 1024 [ 211.617635][ T8352] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 211.631532][ T8352] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 211.634529][ T8352] EXT4-fs (loop8): orphan cleanup on readonly fs [ 211.638319][ T8352] EXT4-fs error (device loop8): ext4_read_inode_bitmap:168: comm syz.8.657: Inode bitmap for bg 0 marked uninitialized [ 211.658985][ T8372] loop7: detected capacity change from 0 to 256 [ 211.663302][ T8352] EXT4-fs (loop8): Remounting filesystem read-only [ 211.672737][ T8352] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,usrjquota=,lazytime,. Quota mode: writeback. [ 212.603668][ T8372] FAT-fs (loop7): Directory bread(block 64) failed [ 212.605919][ T8372] FAT-fs (loop7): Directory bread(block 65) failed [ 212.645892][ T8372] FAT-fs (loop7): Directory bread(block 66) failed [ 212.671712][ T8372] FAT-fs (loop7): Directory bread(block 67) failed [ 212.673722][ T8372] FAT-fs (loop7): Directory bread(block 68) failed [ 212.675578][ T8372] FAT-fs (loop7): Directory bread(block 69) failed [ 212.737075][ T8372] FAT-fs (loop7): Directory bread(block 70) failed [ 212.739056][ T8372] FAT-fs (loop7): Directory bread(block 71) failed [ 212.741015][ T8372] FAT-fs (loop7): Directory bread(block 72) failed [ 212.779996][ T8372] FAT-fs (loop7): Directory bread(block 73) failed [ 213.053610][ T8398] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 214.741998][ T4232] attempt to access beyond end of device [ 214.741998][ T4232] loop7: rw=1, want=1832, limit=256 [ 214.774591][ T4232] attempt to access beyond end of device [ 214.774591][ T4232] loop7: rw=1, want=3984, limit=256 [ 215.212263][ T8461] ptrace attach of "./syz-executor exec"[6640] was attempted by " eth0 #®uàûu0*óiÝÙƇ޿_ ößk¿.\x22¦À#pÍ/¦ò¼yL…aµ»~+>¼“ø«š3…l{@!2¶!®÷9kˆ\x0b8I$ýQ=rØÀØ\x09/vÓ§ØJý”#KTÝÓá¾_$A=zî½/X¾mOX)s”Þ¾_ˆN¸Þë)ÍÅ6m\x0a\x0b¾ë»‘zÂ|d\x1bÒùyx²\x1bLTrwˆ|0\x09Æâœí\x5cØ[È ó¬]V:üÞ\x07xïþ.TTÏ¿õ€a%ÜQ³CuTÌê‘èØYZyæ!‰œÑ¦7Švs²\x07þ³j*­IÌéª{]ï·òî*ù5JtÐsĪÈ~²ò0½fÛ®Gãûï”ï:Q\x1b㣤}ï`eÍL«Û\x0dòyŸg1ô\x09i/!ñ,Œuª¿~)”\x1b2“†çšòj¨–¦¢üN¯Th³\x1bo:è\x0bq7SäHóL œ—Bªq¹(öƒ±[„aF›ÚëÄ*q²’ Œv¬ AN¹ªà—Te˜Lþ—+uÓ^±ðà½\x07»åsha ë„™ÆñÕLD¨7 DQŠ2!8,¼%$ñòÖœyìKÚÅÜúÝöÆ´œ’…°¢%:ðô0´¦d´äLWÕ÷l\x1bþÞ\x0bh—=m‚.¬\x0bhþ„Q}ƒ8/ƒëP¾Ö+:ÎE\x5c•Ô¬’‡×˜—ãì­Õ¬€C„Rˆr^gºQ( [ 219.358975][ T8525] binder: 8524:8525 tried to acquire reference to desc 0, got 1 instead [ 219.445511][ T8525] binder: tried to use weak ref as strong ref [ 219.453695][ T8525] binder: 8524:8525 ioctl c018620c 20000100 returned -22 [ 219.461309][ T4036] binder: undelivered TRANSACTION_COMPLETE [ 219.471799][ T4036] binder: undelivered transaction 84, process died. [ 221.823711][ T8572] loop7: detected capacity change from 0 to 4096 [ 224.004169][ T8616] ptrace attach of "./syz-executor exec"[4034] was attempted by " eth0 #®uàûu0*óiÝÙƇ޿_ ößk¿.\x22¦À#pÍ/¦ò¼yL…aµ»~+>¼“ø«š3…l{@!2¶!®÷9kˆ\x0b8I$ýQ=rØÀØ\x09/vÓ§ØJý”#KTÝÓá¾_$A=zî½/X¾mOX)s”Þ¾_ˆN¸Þë)ÍÅ6m\x0a\x0b¾ë»‘zÂ|d\x1bÒùyx²\x1bLTrwˆ|0\x09Æâœí\x5cØ[È ó¬]V:üÞ\x07xïþ.TTÏ¿õ€a%ÜQ³CuTÌê‘èØYZyæ!‰œÑ¦7Švs²\x07þ³j*­IÌéª{]ï·òî*ù5JtÐsĪÈ~²ò0½fÛ®Gãûï”ï:Q\x1b㣤}ï`eÍL«Û\x0dòyŸg1ô\x09i/!ñ,Œuª¿~)”\x1b2“†çšòj¨–¦¢üN¯Th³\x1bo:è\x0bq7SäHóL œ—Bªq¹(öƒ±[„aF›ÚëÄ*q²’ Œv¬ AN¹ªà—Te˜Lþ—+uÓ^±ðà½\x07»åsha ë„™ÆñÕLD¨7 DQŠ2!8,¼%$ñòÖœyìKÚÅÜúÝöÆ´œ’…°¢%:ðô0´¦d´äLWÕ÷l\x1bþÞ\x0bh—=m‚.¬\x0bhþ„Q}ƒ8/ƒëP¾Ö+:ÎE\x5c•Ô¬’‡×˜—ãì­Õ¬€C„Rˆr^gºQ( [ 224.079811][ T8618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.064707][ T8693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.392527][ T8708] netlink: 'syz.7.724': attribute type 21 has an invalid length. [ 231.976503][ T8754] ODEBUG: Out of memory. ODEBUG disabled [ 235.911609][ T8795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.437682][ T8888] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 240.453837][ T8888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.501807][ T8888] bond2: (slave vlan3): making interface the new active one [ 240.511069][ T8888] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 240.514017][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 240.752933][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 241.369543][ T8940] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 243.356785][ T8972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.768'. [ 243.359291][ T8972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.361257][ T8972] IPv6: NLM_F_CREATE should be set when creating new route [ 245.726246][ T9030] 9pnet: Insufficient options for proto=fd [ 246.468640][ T9110] netlink: 'syz.7.787': attribute type 2 has an invalid length. [ 247.166064][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 247.166076][ T26] audit: type=1326 audit(247.100:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.174751][ T26] audit: type=1326 audit(247.110:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.183500][ T26] audit: type=1326 audit(247.110:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.189844][ T26] audit: type=1326 audit(247.110:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.195957][ T26] audit: type=1326 audit(247.110:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.202136][ T26] audit: type=1326 audit(247.110:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.210019][ T26] audit: type=1326 audit(247.110:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.216173][ T26] audit: type=1326 audit(247.110:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.227808][ T26] audit: type=1326 audit(247.110:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.233931][ T26] audit: type=1326 audit(247.110:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 247.369563][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.7.791'. [ 247.658485][ T9152] netlink: 156 bytes leftover after parsing attributes in process `syz.1.795'. [ 247.712058][ T9154] netlink: 104 bytes leftover after parsing attributes in process `syz.4.796'. [ 247.749241][ T9156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.792'. [ 247.775751][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 247.843383][ T9170] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 247.845814][ T9170] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 247.850556][ T9170] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 248.782865][ T9194] netlink: 'syz.8.803': attribute type 21 has an invalid length. [ 248.785123][ T9194] netlink: 'syz.8.803': attribute type 6 has an invalid length. [ 248.817397][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.8.803'. [ 250.033535][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 250.110462][ T9232] loop7: detected capacity change from 0 to 2048 [ 250.927182][ T9244] lo speed is unknown, defaulting to 1000 [ 251.120453][ T8364] Alternate GPT is invalid, using primary GPT. [ 251.122313][ T8364] loop7: p1 p2 p3 [ 251.381151][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'. [ 252.390067][ T9232] Alternate GPT is invalid, using primary GPT. [ 252.391929][ T9232] loop7: p1 p2 p3 [ 252.684471][ T9312] netlink: 'syz.8.821': attribute type 4 has an invalid length. [ 253.369690][ T8120] udevd[8120]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 253.443159][ T8364] udevd[8364]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 253.455117][ T8366] udevd[8366]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 253.484905][ T9338] overlayfs: failed to clone upperpath [ 253.499998][ T8366] udevd[8366]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 253.526305][ T8120] udevd[8120]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 253.532027][ T8364] udevd[8364]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 253.609771][ T9314] netlink: 'syz.8.821': attribute type 4 has an invalid length. [ 253.735198][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.834'. [ 253.737782][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.834'. [ 254.058551][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.062825][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.681068][ T9446] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 258.756047][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 258.878305][ T9472] binder: 9467:9472 tried to acquire reference to desc 0, got 1 instead [ 258.881315][ T9472] binder: 9467:9472 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 258.884864][ T9472] binder: 9472 RLIMIT_NICE not set [ 258.886256][ T9472] binder: 9472 RLIMIT_NICE not set [ 258.937634][ T3615] binder: release 9467:9472 transaction 95 out, still active [ 258.939786][ T3615] binder: undelivered TRANSACTION_COMPLETE [ 258.965044][ T3615] binder: release 9467:9472 transaction 95 in, still active [ 258.967266][ T3615] binder: send failed reply for transaction 95, target dead [ 259.140195][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 260.644975][ T9505] loop8: detected capacity change from 0 to 256 [ 260.726040][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 260.726053][ T26] audit: type=1326 audit(260.660:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 260.736933][ T9505] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 260.749502][ T26] audit: type=1326 audit(260.660:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 260.787998][ T26] audit: type=1326 audit(260.680:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 260.797353][ T9511] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 260.799807][ T9511] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 260.990211][ T26] audit: type=1326 audit(260.680:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 260.996168][ T26] audit: type=1326 audit(260.680:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 261.117756][ T26] audit: type=1326 audit(260.680:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 261.123798][ T26] audit: type=1326 audit(260.680:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 261.173378][ T26] audit: type=1326 audit(260.680:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 261.203420][ T26] audit: type=1326 audit(260.680:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 261.227002][ T26] audit: type=1326 audit(260.680:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 261.243796][ T9529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.861'. [ 261.308315][ T9529] bridge0: port 3(vlan2) entered disabled state [ 261.310180][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.312229][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.605185][ T9552] team0: Port device ip6gretap1 added [ 262.577194][ T9567] Cannot find add_set index 0 as target [ 262.709187][ T9578] overlayfs: failed to clone upperpath [ 262.709298][ T9533] lo speed is unknown, defaulting to 1000 [ 263.408109][ T4113] Bluetooth: hci0: command 0x0409 tx timeout [ 264.125742][ T9621] lo speed is unknown, defaulting to 1000 [ 264.224512][ T9533] chnl_net:caif_netlink_parms(): no params data found [ 265.056059][ T9533] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.058408][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.061142][ T9533] device bridge_slave_0 entered promiscuous mode [ 265.102999][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.105110][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.116772][ T9533] device bridge_slave_1 entered promiscuous mode [ 265.956697][ T1959] Bluetooth: hci0: command 0x041b tx timeout [ 265.977872][ T4078] Bluetooth: hci2: command 0x0409 tx timeout [ 267.134169][ T9533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.180200][ T9533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.189354][ T4120] Bluetooth: hci2: command 0x041b tx timeout [ 268.192096][ T4120] Bluetooth: hci0: command 0x040f tx timeout [ 268.214600][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 268.593273][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 268.703776][ T9121] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.741572][ T9533] team0: Port device team_slave_0 added [ 268.774995][ T9121] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.791908][ T9533] team0: Port device team_slave_1 added [ 268.863417][ T9121] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.983966][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.985974][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.005899][ T9533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.028896][ T9121] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.047519][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.049633][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.058483][ T9621] device bridge_slave_0 entered promiscuous mode [ 269.086151][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.104139][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.142121][ T9533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.159204][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.172332][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.183465][ T9621] device bridge_slave_1 entered promiscuous mode [ 269.419628][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.424171][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.418960][ T4120] Bluetooth: hci0: command 0x0419 tx timeout [ 270.420723][ T4120] Bluetooth: hci2: command 0x040f tx timeout [ 270.514430][ T9533] device hsr_slave_0 entered promiscuous mode [ 270.561088][ T9533] device hsr_slave_1 entered promiscuous mode [ 270.600704][ T9533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.602802][ T9533] Cannot create hsr debugfs directory [ 270.627563][ T9621] team0: Port device team_slave_0 added [ 270.689358][ T9621] team0: Port device team_slave_1 added [ 270.783915][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.785942][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.807394][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.824570][ T9121] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.845200][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.854666][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.885479][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.938928][ T9121] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.024967][ T9121] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.179224][ T9621] device hsr_slave_0 entered promiscuous mode [ 271.217279][ T9621] device hsr_slave_1 entered promiscuous mode [ 271.257267][ T9621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.259637][ T9621] Cannot create hsr debugfs directory [ 271.298879][ T9121] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.713245][ T9533] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 271.765247][ T9533] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 271.810699][ T9533] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 271.884857][ T9533] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 272.125474][ T9533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.153330][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.155943][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.163455][ T9533] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.200558][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.203601][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.206413][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.208447][ T9123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.215461][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.219029][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.221677][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.223702][ T9123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.226066][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.237311][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.284606][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.298256][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.303795][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.360871][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.363540][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.368700][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.371404][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.374079][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.376686][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.380219][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.383812][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.448017][ T4461] Bluetooth: hci2: command 0x0419 tx timeout [ 272.557711][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.560031][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.578897][ T9533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.997286][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.000102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.002775][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.005416][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.020892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.023538][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.028669][ T9533] device veth0_vlan entered promiscuous mode [ 273.034965][ T9533] device veth1_vlan entered promiscuous mode [ 273.094621][ T9533] device veth0_macvtap entered promiscuous mode [ 273.125588][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.128720][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.132227][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.135076][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.147326][ T9533] device veth1_macvtap entered promiscuous mode [ 273.154031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.165032][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.195508][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.202673][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.205713][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.214343][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.219836][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.222715][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.225524][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.233503][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.240579][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.245564][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.253638][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.311622][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.314805][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.321075][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.324008][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.333333][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.336683][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.342074][ T9533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.344880][ T9533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.355086][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.359758][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.362827][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.390114][ T9533] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.392658][ T9533] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.395187][ T9533] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.407804][ T9533] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.638001][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.640579][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.671651][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.842653][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.845050][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.869324][ T9121] device hsr_slave_0 left promiscuous mode [ 273.906910][ T9121] device hsr_slave_1 left promiscuous mode [ 273.996945][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.999083][ T9121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.005013][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.007718][ T9121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.010250][ T9121] device bridge_slave_1 left promiscuous mode [ 274.012098][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.067966][ T9121] device bridge_slave_0 left promiscuous mode [ 274.069873][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.141280][ T9121] device hsr_slave_0 left promiscuous mode [ 274.197694][ T9121] device hsr_slave_1 left promiscuous mode [ 274.289374][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.291615][ T9121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.294211][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.296365][ T9121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.308963][ T9121] device bridge_slave_1 left promiscuous mode [ 274.310820][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.368008][ T9121] device bridge_slave_0 left promiscuous mode [ 274.369927][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.517191][ T9121] device veth1_macvtap left promiscuous mode [ 274.519006][ T9121] device veth0_macvtap left promiscuous mode [ 274.520810][ T9121] device veth1_vlan left promiscuous mode [ 274.522443][ T9121] device veth0_vlan left promiscuous mode [ 274.617128][ T9121] device veth1_macvtap left promiscuous mode [ 274.618952][ T9121] device veth0_macvtap left promiscuous mode [ 274.620550][ T9121] device veth1_vlan left promiscuous mode [ 274.622234][ T9121] device veth0_vlan left promiscuous mode [ 275.032671][ T9121] team0 (unregistering): Port device team_slave_1 removed [ 275.044636][ T9121] team0 (unregistering): Port device team_slave_0 removed [ 275.053029][ T9121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.112513][ T9121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.304218][ T9121] bond0 (unregistering): Released all slaves [ 275.574177][ T9121] team0 (unregistering): Port device team_slave_1 removed [ 275.585053][ T9121] team0 (unregistering): Port device team_slave_0 removed [ 275.593510][ T9121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.635263][ T9121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.823539][ T9121] bond0 (unregistering): Released all slaves [ 275.913185][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.290520][ T9621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.137940][ T9621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.338235][ T9621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.405471][ T9621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.705132][ C0] vcan0: j1939_tp_rxtimer: 0x0000000018c87312: rx timeout, send abort [ 278.707013][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.724253][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.727194][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.729627][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.774032][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.777239][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.779886][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.781978][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.000959][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.005186][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.205248][ C0] vcan0: j1939_tp_rxtimer: 0x0000000073611561: rx timeout, send abort [ 279.947045][ C0] vcan0: j1939_tp_rxtimer: 0x0000000018c87312: abort rx timeout. Force session deactivation [ 279.950065][ C0] vcan0: j1939_tp_rxtimer: 0x000000004a2dace1: rx timeout, send abort [ 279.952626][ C0] vcan0: j1939_tp_rxtimer: 0x0000000068464cb9: rx timeout, send abort [ 279.954895][ C0] vcan0: j1939_tp_rxtimer: 0x0000000073611561: abort rx timeout. Force session deactivation [ 280.007779][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.009862][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.017613][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.038763][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000068464cb9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 280.043213][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000004a2dace1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 280.158407][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.161468][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.164471][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.178553][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.181320][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.184135][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.188602][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.198803][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.208208][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.211110][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.223693][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.282935][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.160635][T10646] netlink: 'syz.3.910': attribute type 4 has an invalid length. [ 281.233783][ T4120] lo speed is unknown, defaulting to 1000 [ 281.237291][T10659] netlink: 'syz.3.910': attribute type 4 has an invalid length. [ 281.260162][T10663] binder: 10662:10663 tried to acquire reference to desc 0, got 1 instead [ 281.287737][ T4113] binder: undelivered TRANSACTION_COMPLETE [ 281.295918][ T4113] lo speed is unknown, defaulting to 1000 [ 281.342931][ T4113] binder: undelivered transaction 100, process died. [ 281.633422][T10677] siw: device registration error -23 [ 282.497272][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.499510][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.533898][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.364753][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.371024][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.384297][ T9621] device veth0_vlan entered promiscuous mode [ 283.397096][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.427861][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.448486][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.452062][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.473172][ T9621] device veth1_vlan entered promiscuous mode [ 283.527691][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.530283][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 283.532765][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.535402][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.569427][ T9621] device veth0_macvtap entered promiscuous mode [ 283.573750][ T9621] device veth1_macvtap entered promiscuous mode [ 283.612319][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.615260][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.636849][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.639853][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.642643][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.645568][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.658115][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.660161][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.666547][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.684099][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.692674][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.695630][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.716895][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.719847][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.722495][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.725150][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.739140][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.741361][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.762171][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.769967][ T9621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.772399][ T9621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.774871][ T9621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.796890][ T9621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.930732][ T4657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.933250][ T4657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.941586][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.992624][ T9123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.995067][ T9123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.002407][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.093995][T10704] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 284.129670][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.9.926'. [ 284.399584][T10719] netlink: 'syz.3.928': attribute type 2 has an invalid length. [ 285.549381][T10704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.641418][T10716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.847055][T10715] bond1: (slave vlan2): making interface the new active one [ 285.863831][T10715] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 286.694399][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 286.768999][T10773] 9pnet: Insufficient options for proto=fd [ 286.805908][T10773] overlayfs: failed to clone upperpath [ 287.628129][T10785] loop9: detected capacity change from 0 to 128 [ 288.497484][T10785] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.580701][T10801] overlayfs: failed to clone upperpath [ 288.714460][T10804] overlayfs: failed to clone upperpath [ 296.744789][T10906] overlayfs: failed to resolve './bus': -2 [ 297.566678][T10926] loop2: detected capacity change from 0 to 256 [ 299.195184][T10946] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 299.210837][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.212917][T10946] bridge0: port 2(bridge_slave_1) entered listening state [ 299.214964][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.216950][T10946] bridge0: port 1(bridge_slave_0) entered listening state [ 299.241177][T10948] 9pnet: Insufficient options for proto=fd [ 299.291361][T10944] loop9: detected capacity change from 0 to 512 [ 299.311439][T10946] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 299.376598][T10944] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 299.379684][T10944] EXT4-fs (loop9): orphan cleanup on readonly fs [ 299.572316][T10944] EXT4-fs warning (device loop9): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 299.949463][T10944] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 300.038387][T10944] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #16: comm syz.9.960: iget: immutable or append flags not allowed on symlinks [ 300.057677][T10944] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.960: couldn't read orphan inode 16 (err -117) [ 300.102104][T10944] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.250579][T10973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.964'. [ 300.460168][T10984] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 300.504215][T10984] device bond2 entered promiscuous mode [ 300.719943][T10984] bond2: (slave ip6gretap2): making interface the new active one [ 300.754113][T10984] device ip6gretap2 entered promiscuous mode [ 300.781236][T10984] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 300.804402][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.970'. [ 300.832808][T11037] device bond2 left promiscuous mode [ 300.840080][T11037] device ip6gretap2 left promiscuous mode [ 300.857212][T11037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.999319][T11046] tipc: Enabled bearer , priority 10 [ 301.109616][T11049] loop9: detected capacity change from 0 to 4096 [ 302.263610][T11070] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 302.265642][T11070] PKCS7: Only support pkcs7_signedData type [ 302.272825][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 302.275470][T11068] device vlan2 left promiscuous mode [ 302.302233][T11068] device bond0 left promiscuous mode [ 302.303739][T11068] device bond_slave_0 left promiscuous mode [ 302.305414][T11068] device bond_slave_1 left promiscuous mode [ 302.333140][T11068] bridge0: port 3(vlan2) entered disabled state [ 302.357675][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 302.388449][T11068] device bridge_slave_1 left promiscuous mode [ 302.390197][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.429247][T11068] device bridge_slave_0 left promiscuous mode [ 302.431249][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.577332][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 304.345956][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 304.466399][T11102] netlink: 156 bytes leftover after parsing attributes in process `syz.1.988'. [ 305.484866][T11138] loop9: detected capacity change from 0 to 65 [ 305.521165][T11138] BFS-fs: bfs_fill_super(): NOTE: filesystem loop9 was created with 512 inodes, the real maximum is 511, mounting anyway [ 305.796320][T11149] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 306.550623][T11159] loop2: detected capacity change from 0 to 1024 [ 306.630423][T11159] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 306.669357][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1001'. [ 306.676139][T11171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1002'. [ 306.697432][T11172] loop9: detected capacity change from 0 to 512 [ 306.709846][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1001'. [ 306.712970][T11159] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,max_dir_size_kb=0x0000000000000002,norecovery,debug_want_extra_isize=0x0000000000000080,block_validity,nodiscard,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 306.843071][T11172] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1000: bg 0: block 248: padding at end of block bitmap is not set [ 306.875827][T11172] __quota_error: 18 callbacks suppressed [ 306.875841][T11172] Quota error (device loop9): write_blk: dquota write failed [ 306.893172][T11172] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 306.896191][T11172] EXT4-fs error (device loop9): ext4_acquire_dquot:6207: comm syz.9.1000: Failed to acquire dquot type 1 [ 306.924104][T11186] 9pnet: Could not find request transport: 0xffffffffffffffff [ 306.985495][T11172] EXT4-fs (loop9): 1 truncate cleaned up [ 307.011844][T11172] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 307.029752][T11172] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.1000: deleted inode referenced: 12 [ 309.060271][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1013'. [ 309.064870][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1013'. [ 309.076613][T11224] netlink: 550 bytes leftover after parsing attributes in process `syz.1.1012'. [ 310.181829][T11243] netlink: 'syz.9.1015': attribute type 13 has an invalid length. [ 311.349128][T11286] "syz.3.1023" (11286) uses obsolete ecb(arc4) skcipher [ 311.514057][T11302] 9pnet: Unknown protocol version 9p20\++} [ 312.466248][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 312.503828][T11314] loop2: detected capacity change from 0 to 64 [ 312.507846][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1031'. [ 312.676274][T11314] device vlan2 entered promiscuous mode [ 312.696489][T11314] device bond0 entered promiscuous mode [ 312.731950][T11314] device bond_slave_0 entered promiscuous mode [ 312.734087][T11314] device bond_slave_1 entered promiscuous mode [ 313.609453][T11339] netlink: 'syz.1.1038': attribute type 10 has an invalid length. [ 313.804155][T11339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.812665][T11339] team0: Failed to send port change of device bond0 via netlink (err -105) [ 314.777256][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 314.780183][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 315.419089][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.420819][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.435599][T11339] team0: Port device bond0 added [ 315.532835][T11353] loop9: detected capacity change from 0 to 1024 [ 315.705118][T11353] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 315.752265][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1044'. [ 316.510201][ T9533] hfsplus: bad catalog entry type [ 316.515451][ T9533] hfsplus: bad catalog entry type [ 316.601959][T11381] loop2: detected capacity change from 0 to 512 [ 317.121324][T11381] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.561238][T11381] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.1045: inode #0: comm syz.2.1045: iget: illegal inode # [ 317.565491][T11381] EXT4-fs (loop2): Remounting filesystem read-only [ 317.568459][T11381] EXT4-fs (loop2): get orphan inode failed [ 317.572381][T11381] EXT4-fs (loop2): mount failed [ 317.686924][T11408] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 317.722349][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 317.803792][T11372] loop2: detected capacity change from 0 to 128 [ 317.867003][T11372] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 317.885979][T11372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.285080][ T4233] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.299692][T11442] lo speed is unknown, defaulting to 1000 [ 318.324563][T11454] netlink: 'syz.2.1056': attribute type 4 has an invalid length. [ 318.389602][ T4233] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.416121][T11454] netlink: 'syz.2.1056': attribute type 4 has an invalid length. [ 318.481565][ T4233] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.856549][ T4233] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.636615][T11535] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 319.657518][T11537] device vlan3 entered promiscuous mode [ 319.670351][T11578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1060'. [ 319.672927][T11578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1060'. [ 319.801234][T11442] chnl_net:caif_netlink_parms(): no params data found [ 320.088396][T11535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1060'. [ 320.092208][T11615] tipc: Enabled bearer , priority 18 [ 320.859941][ T4461] Bluetooth: hci0: command 0x0409 tx timeout [ 321.130725][T11442] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.135154][T11442] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.155205][T11442] device bridge_slave_0 entered promiscuous mode [ 321.195118][T11442] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.203632][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.030202][T11442] device bridge_slave_1 entered promiscuous mode [ 322.034272][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 322.036743][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 322.039405][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 322.041897][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 322.044380][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 322.047074][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 322.095402][T11733] loop2: detected capacity change from 0 to 512 [ 322.182833][T11733] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 322.185789][T11733] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 322.191066][T11733] EXT4-fs (loop2): mount failed [ 322.318478][T11442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.343189][T11442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.495567][T11797] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 322.501096][T11442] team0: Port device team_slave_0 added [ 322.504721][T11442] team0: Port device team_slave_1 added [ 322.598357][T11821] loop2: detected capacity change from 0 to 16 [ 322.625747][T11821] erofs: (device loop2): mounted with root inode @ nid 36. [ 322.749261][T11442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.927244][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.951748][T11442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.852571][T11442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.854509][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.913251][T11442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.108978][ T4078] Bluetooth: hci0: command 0x041b tx timeout [ 324.349272][T11442] device hsr_slave_0 entered promiscuous mode [ 324.387428][T11442] device hsr_slave_1 entered promiscuous mode [ 327.047833][T11993] __nla_validate_parse: 49 callbacks suppressed [ 327.047848][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 327.108164][ T4078] Bluetooth: hci0: command 0x040f tx timeout [ 327.181655][T11975] tipc: Enabling of bearer rejected, failed to enable media [ 328.406246][ T26] audit: type=1326 audit(328.340:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 328.416451][ T26] audit: type=1326 audit(328.350:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=10 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 328.469614][ T26] audit: type=1326 audit(328.350:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 328.490151][ T26] audit: type=1326 audit(328.390:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 328.548430][ T26] audit: type=1326 audit(328.390:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 328.582556][ T26] audit: type=1326 audit(328.400:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 328.781978][ T26] audit: type=1326 audit(328.400:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x7ffc0000 [ 329.327214][T12085] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 329.994319][ T4078] Bluetooth: hci0: command 0x0419 tx timeout [ 330.127027][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.129036][ C0] bridge0: topology change detected, propagating [ 330.131078][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.132994][ C0] bridge0: topology change detected, propagating [ 330.957411][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.983456][ T9121] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 332.228159][T12139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.230324][T12139] IPv6: NLM_F_CREATE should be set when creating new route [ 333.220194][T12145] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.222377][T12145] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.239270][T12145] tipc: Resetting bearer [ 333.910608][T12145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.943277][T12145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.300677][T12145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.303357][T12145] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.306132][T12145] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.312593][T12145] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.753097][T12145] device vlan3 left promiscuous mode [ 334.961055][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 335.910668][T12241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.587358][T12241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.621992][ T4233] device hsr_slave_0 left promiscuous mode [ 337.854537][ T4233] device hsr_slave_1 left promiscuous mode [ 340.288836][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.291030][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.307948][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.320061][T12284] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 340.323218][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.335462][ T4233] device bridge_slave_1 left promiscuous mode [ 340.357320][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.464702][ T4233] device bridge_slave_0 left promiscuous mode [ 340.466856][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.503247][ T26] audit: type=1326 audit(340.440:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.4.1132" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x0 [ 340.800533][ T4233] device veth1_macvtap left promiscuous mode [ 340.802727][ T4233] device veth0_macvtap left promiscuous mode [ 340.826428][ T4233] device veth1_vlan left promiscuous mode [ 340.850502][ T4233] device veth0_vlan left promiscuous mode [ 343.370015][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 343.390880][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 343.410080][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.466896][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.653047][ T4233] bond0 (unregistering): Released all slaves [ 343.764358][T12294] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 344.101097][T11442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.859488][T11442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.948862][T11442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.555063][T12353] xt_nat: multiple ranges no longer supported [ 347.091316][T11442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.098156][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 348.244998][T11442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.277014][T12389] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 348.307471][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.313779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.331499][T11442] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.373413][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.376675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.383139][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.385056][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.404403][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.426490][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.429352][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.431424][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.454356][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.479958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.483083][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.504228][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.523422][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.565089][T11442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.582265][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.587581][T11442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.595037][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.598515][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.604696][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.613758][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.622618][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.625660][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.632526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.664726][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.704996][T12408] device veth0 entered promiscuous mode [ 348.767458][T12407] device veth0 left promiscuous mode [ 349.973882][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.976448][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.982130][T11442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.090663][T12446] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 350.159859][T11442] device veth0_vlan entered promiscuous mode [ 350.188973][T11442] device veth1_vlan entered promiscuous mode [ 350.264242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.271813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.274965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 350.299604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.145866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.151006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.192383][T11442] device veth0_macvtap entered promiscuous mode [ 351.206805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.209409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.217785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.232844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.242658][T11442] device veth1_macvtap entered promiscuous mode [ 352.426258][T11442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.445790][T11442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.448544][T11442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.482084][T11442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.509560][T11442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.541851][T11442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.558660][T11442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.575114][T11442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.592735][T11442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.618333][T11442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.693282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.696331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 352.699037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.701789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.704529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.737234][T12475] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 352.757757][T11442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.760684][T11442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.773382][T11442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.787780][T11442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.894569][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 353.082269][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.088030][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.132329][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.150937][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.157666][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.187640][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.220174][T12535] binder: 12534:12535 tried to acquire reference to desc 0, got 1 instead [ 353.293187][ T13] binder: release 12534:12535 transaction 107 out, still active [ 353.304318][ T13] binder: undelivered TRANSACTION_COMPLETE [ 353.310699][ T13] binder: undelivered TRANSACTION_COMPLETE [ 353.337480][ T13] binder: send failed reply for transaction 107, target dead [ 353.339889][ T13] binder: undelivered transaction 108, process died. [ 353.355295][T12542] tipc: Started in network mode [ 353.365747][T12542] tipc: Node identity 7afc013b70f8, cluster identity 4711 [ 353.367858][T12542] tipc: Enabled bearer , priority 0 [ 354.016138][T12542] device syzkaller0 entered promiscuous mode [ 354.049935][T12542] tipc: Resetting bearer [ 354.925631][T12540] tipc: Resetting bearer [ 354.963752][T12567] loop2: detected capacity change from 0 to 8 [ 354.973536][T12540] tipc: Disabling bearer [ 355.141184][T12577] netlink: 'syz.1.1189': attribute type 33 has an invalid length. [ 355.154738][T12577] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1189'. [ 356.443244][T12629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1196'. [ 356.657091][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 356.672360][T12640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1203'. [ 356.691818][T12640] xt_hashlimit: max too large, truncated to 1048576 [ 357.961657][T12673] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 358.000279][T12673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.128676][T12714] binder: 12671:12714 tried to acquire reference to desc 0, got 1 instead [ 358.145193][ T4078] binder: release 12671:12714 transaction 113 out, still active [ 358.147418][ T4078] binder: undelivered TRANSACTION_COMPLETE [ 358.149836][ T4078] binder: undelivered TRANSACTION_COMPLETE [ 358.182545][T12719] netlink: 'syz.3.1214': attribute type 4 has an invalid length. [ 358.213799][ T4078] lo speed is unknown, defaulting to 1000 [ 358.416603][ T21] binder: send failed reply for transaction 113, target dead [ 358.419109][ T21] binder: undelivered transaction 114, process died. [ 359.064970][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 359.190895][T12742] netlink: 'syz.3.1220': attribute type 4 has an invalid length. [ 359.193169][T12742] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1220'. [ 360.099927][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 367.405161][T12845] tipc: Enabling of bearer rejected, failed to enable media [ 367.415221][T12847] loop2: detected capacity change from 0 to 256 [ 367.572955][T12847] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 367.592104][T12847] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 367.668620][T12847] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 367.671000][T12847] UDF-fs: Scanning with blocksize 512 failed [ 367.702167][T12847] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 367.719757][T12855] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 367.721582][T12847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.091428][T12924] loop2: detected capacity change from 0 to 2048 [ 371.141119][T12924] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 371.149342][T12924] NILFS (loop2): mounting unchecked fs [ 371.159164][T12924] NILFS (loop2): recovery required for readonly filesystem [ 371.161242][T12924] NILFS (loop2): write access will be enabled during recovery [ 371.169653][T10178] udevd[10178]: incorrect nilfs2 checksum on /dev/loop2 [ 371.184519][T12924] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 371.234858][T12926] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 371.300906][T12926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.561181][T12924] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 372.102745][T12962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.116810][T10178] udevd[10178]: incorrect nilfs2 checksum on /dev/loop2 [ 372.144384][T12962] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 373.096540][T12962] bond2: (slave vti0): Error -95 calling set_mac_address [ 373.194110][T12926] bond2: (slave gretap1): making interface the new active one [ 373.210200][T12926] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 373.410281][T12995] tipc: New replicast peer: 0.0.0.0 [ 373.412733][T12995] tipc: Enabled bearer , priority 10 [ 374.416169][ T4097] tipc: Node number set to 168034619 [ 374.495715][ T26] audit: type=1326 audit(2952.394:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1277" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x0 [ 374.577928][T13016] netlink: 'syz.2.1271': attribute type 10 has an invalid length. [ 374.769249][T13016] device wlan1 entered promiscuous mode [ 374.771557][T13016] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 375.513050][T13046] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1282'. [ 376.043366][T13035] futex_wake_op: syz.1.1281 tries to shift op by 36; fix this program [ 376.084730][T13043] bridge0: port 3(syz_tun) entered blocking state [ 376.086887][T13043] bridge0: port 3(syz_tun) entered disabled state [ 376.090421][T13043] device syz_tun entered promiscuous mode [ 376.384910][T13056] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.388415][T13056] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.450284][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.452057][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.980812][T13057] tc_dump_action: action bad kind [ 379.979199][T13089] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1292'. [ 380.148842][T13119] udc-core: couldn't find an available UDC or it's busy [ 380.150966][T13119] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 381.006459][T13127] netlink: 'syz.0.1298': attribute type 5 has an invalid length. [ 382.037585][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 383.278713][T13168] netlink: 'syz.1.1309': attribute type 5 has an invalid length. [ 383.317304][T13173] loop2: detected capacity change from 0 to 2048 [ 383.356575][T10178] Alternate GPT is invalid, using primary GPT. [ 383.358536][T10178] loop2: p1 p2 p3 [ 383.396155][T13173] Alternate GPT is invalid, using primary GPT. [ 383.397988][T13173] loop2: p1 p2 p3 [ 383.741166][T10394] udevd[10394]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 383.770855][T10178] udevd[10178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 383.775466][T10386] udevd[10386]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 383.908221][T10394] udevd[10394]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 383.991998][T10386] udevd[10386]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 384.754853][T10178] udevd[10178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 385.114330][T13230] tipc: Enabled bearer , priority 0 [ 386.700198][T13266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 386.895408][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 389.810899][ T4112] Bluetooth: hci2: command 0x0406 tx timeout [ 389.968720][T13307] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 392.144173][T13325] lo speed is unknown, defaulting to 1000 [ 392.180427][T13337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1340'. [ 393.331759][T13372] xt_TCPMSS: Only works on TCP SYN packets [ 393.940797][T13395] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 393.940797][T13395] The task syz.1.1347 (13395) triggered the difference, watch for misbehavior. [ 394.828640][T13406] loop2: detected capacity change from 0 to 512 [ 394.895885][T13406] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 394.909514][T13410] vlan0 speed is unknown, defaulting to 1000 [ 394.921109][T13406] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 394.923998][T13410] vlan0 speed is unknown, defaulting to 1000 [ 394.926063][T13410] vlan0 speed is unknown, defaulting to 1000 [ 394.929412][T13406] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 394.949246][T13410] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 394.961242][T13406] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 394.963646][T13406] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 394.965828][T13406] EXT4-fs (loop2): failed to initialize system zone (-117) [ 394.967831][T13406] EXT4-fs (loop2): mount failed [ 395.010306][T13410] vlan0 speed is unknown, defaulting to 1000 [ 395.015700][T13410] vlan0 speed is unknown, defaulting to 1000 [ 395.036344][T13410] vlan0 speed is unknown, defaulting to 1000 [ 395.073337][T13410] vlan0 speed is unknown, defaulting to 1000 [ 395.117715][T13410] vlan0 speed is unknown, defaulting to 1000 [ 395.138101][T13410] vlan0 speed is unknown, defaulting to 1000 [ 395.382599][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1354'. [ 396.048694][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 396.071157][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 397.552645][T13485] udc-core: couldn't find an available UDC or it's busy [ 397.554616][T13485] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 397.581263][T13489] xt_ecn: cannot match TCP bits for non-tcp packets [ 397.820567][T13497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1365'. [ 397.999815][T13505] tipc: Enabling of bearer rejected, failed to enable media [ 398.067633][T13508] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 398.074494][T13508] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1368'. [ 398.084325][T13508] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 399.218128][T13537] loop2: detected capacity change from 0 to 512 [ 399.410993][T13537] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 403.449542][T13600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1389'. [ 403.597415][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 403.610900][T13597] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 403.613256][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 403.615892][T13618] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 405.012982][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1394'. [ 405.015603][T13636] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1394'. [ 405.050223][T13636] bridge0: port 3(macvlan1) entered blocking state [ 405.052155][T13636] bridge0: port 3(macvlan1) entered disabled state [ 405.054717][T13636] device macvlan1 entered promiscuous mode [ 405.057121][T13636] bridge0: port 3(macvlan1) entered blocking state [ 405.058978][T13636] bridge0: port 3(macvlan1) entered forwarding state [ 405.842484][T13636] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1394'. [ 408.164623][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 408.346322][T13702] smc: net device bond0 applied user defined pnetid SYZ2 [ 408.359655][T13711] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1409'. [ 408.428490][T13711] smc: removing net device bond0 with user defined pnetid SYZ2 [ 408.441922][T13711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.505011][T13711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.542030][T13711] bond0 (unregistering): Released all slaves [ 410.057330][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 410.097285][T13809] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link [ 410.105790][T13809] bond3 (unregistering): (slave ip6gretap3): Releasing backup interface [ 410.305791][T13809] bond3 (unregistering): Released all slaves [ 411.037305][T13891] netlink: 'syz.2.1424': attribute type 8 has an invalid length. [ 411.128845][T13891] bridge0: port 4(syz_tun) entered blocking state [ 411.140149][T13891] bridge0: port 4(syz_tun) entered disabled state [ 411.149151][T13891] device syz_tun entered promiscuous mode [ 411.240905][T13891] bridge0: port 4(syz_tun) entered blocking state [ 411.243238][T13891] bridge0: port 4(syz_tun) entered forwarding state [ 411.303120][T13890] netlink: 'syz.4.1417': attribute type 2 has an invalid length. [ 411.305720][T13890] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 411.310383][T13890] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 412.206464][T13908] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 412.237721][T13908] loop2: detected capacity change from 0 to 256 [ 412.260148][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 412.307632][T13908] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 412.325579][T13908] FAT-fs (loop2): Filesystem has been set read-only [ 413.450222][T13937] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 413.565515][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 413.646183][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 416.027480][T13987] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1445'. [ 416.035425][T13987] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1445'. [ 416.046043][T13987] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1445'. [ 416.106698][T14004] tipc: Enabling of bearer rejected, failed to enable media [ 416.332554][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 418.764975][T14039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.767234][T14039] IPv6: NLM_F_CREATE should be set when creating new route [ 419.015441][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 419.084147][T14058] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 419.173036][T14058] device bond3 entered promiscuous mode [ 419.320905][T14063] bond3: (slave ip6gretap2): making interface the new active one [ 419.323134][T14063] device ip6gretap2 entered promiscuous mode [ 419.361183][T14063] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 419.465123][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 420.582241][ T26] audit: type=1326 audit(2998.529:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14114 comm="syz.4.1469" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff993f9ba8 code=0x0 [ 421.347452][T14135] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 421.349316][T14135] PKCS7: Only support pkcs7_signedData type [ 421.667766][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 421.672112][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 421.703273][T14167] netlink: 'syz.1.1483': attribute type 13 has an invalid length. [ 422.277570][T14182] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1482'. [ 426.059205][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 427.023579][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1497'. [ 427.110128][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 427.112637][T14285] device vxlan0 left promiscuous mode [ 427.114225][T14285] bridge0: port 3(vxlan0) entered disabled state [ 428.487173][T14285] device bridge_slave_1 left promiscuous mode [ 428.489091][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.548153][T14285] device bridge_slave_0 left promiscuous mode [ 428.550041][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.593493][T14285] bond0: (slave bridge0): Releasing backup interface [ 428.624159][T14285] tipc: Disabling bearer [ 428.995976][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 431.211749][T14391] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link [ 431.215118][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 431.219669][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'. [ 431.317944][T14391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1528'. [ 431.323999][T14391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1528'. [ 431.449225][T14391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1528'. [ 431.453174][T14408] "syz.0.1531" (14408) uses obsolete ecb(arc4) skcipher [ 431.472335][T14405] netlink: 'syz.2.1529': attribute type 10 has an invalid length. [ 431.476376][T14405] bridge0: port 4(syz_tun) entered disabled state [ 431.478228][T14405] bridge0: port 3(macvlan1) entered disabled state [ 431.480316][T14405] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.482599][T14405] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.262983][T14405] bridge0: port 4(syz_tun) entered blocking state [ 432.264724][T14405] bridge0: port 4(syz_tun) entered forwarding state [ 432.266679][T14405] bridge0: port 3(macvlan1) entered blocking state [ 432.268463][T14405] bridge0: port 3(macvlan1) entered forwarding state [ 432.270308][T14405] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.272570][T14405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.274675][T14405] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.276793][T14405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.334810][T14424] cgroup2: Unknown parameter 'pids_localevents' [ 432.371003][T14405] device bridge0 entered promiscuous mode [ 432.374049][T14405] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 432.397579][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 434.465837][T14449] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 434.468729][T14449] tipc: Resetting bearer [ 434.486212][T14449] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.550880][T14449] tipc: Resetting bearer [ 434.567269][T14449] tipc: Resetting bearer [ 434.570727][ T9139] bond0: (slave wlan1): link status definitely down, disabling slave [ 434.575239][T14458] netlink: 'syz.2.1539': attribute type 10 has an invalid length. [ 434.636167][T14458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.678570][T14458] team0: Failed to send port change of device bond0 via netlink (err -105) [ 434.685893][T14458] team0: Failed to send options change via netlink (err -105) [ 434.692110][T14458] team0: Port device bond0 added [ 434.697278][T14464] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 434.733296][T14467] sctp: [Deprecated]: syz.3.1542 (pid 14467) Use of int in max_burst socket option. [ 434.733296][T14467] Use struct sctp_assoc_value instead [ 434.751119][T14461] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 436.521325][T14503] overlayfs: failed to clone upperpath [ 438.286943][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.288867][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.607581][T14498] smc: adding net device bond0 with user defined pnetid SYZ2 [ 438.620727][T14504] netlink: 'syz.0.1547': attribute type 10 has an invalid length. [ 438.643351][T14504] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.645643][T14504] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.554060][T14518] device vlan6 entered promiscuous mode [ 439.620946][T14518] device bond0 entered promiscuous mode [ 439.622421][T14518] device bond_slave_0 entered promiscuous mode [ 439.624091][T14518] device bond_slave_1 entered promiscuous mode [ 439.653258][T14518] device dummy0 entered promiscuous mode [ 439.654912][T14518] device ip6gretap2 entered promiscuous mode [ 439.724868][T14575] device vlan2 entered promiscuous mode [ 441.247176][ T4085] Bluetooth: hci0: command 0x0406 tx timeout [ 441.528577][ T26] audit: type=1326 audit(3019.472:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 441.562483][ T26] audit: type=1326 audit(3019.502:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 442.339792][ T26] audit: type=1326 audit(3020.282:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 442.434604][ T26] audit: type=1326 audit(3020.362:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 442.495366][ T26] audit: type=1326 audit(3020.362:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 442.501332][ T26] audit: type=1326 audit(3020.362:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 442.512849][T14624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1565'. [ 442.517666][T14618] bond0: (slave ip6gretap3): no link monitoring support [ 442.717225][T14618] bond0: (slave ip6gretap3): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 442.724462][T14618] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link [ 442.727420][ T26] audit: type=1326 audit(3020.362:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 442.745992][T14624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1565'. [ 442.800806][ T26] audit: type=1326 audit(3020.362:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82e98ba8 code=0x7ffc0000 [ 443.314827][T14639] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 444.057369][T14618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1565'. [ 445.817760][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 445.950130][T14662] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 446.002052][T14662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.076302][T14662] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.182526][T14662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.196011][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 446.230478][T14674] device bridge_slave_1 left promiscuous mode [ 446.232245][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.085949][T14674] device bridge_slave_0 left promiscuous mode [ 447.087881][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.294712][ T9139] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 448.298213][ T9139] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 450.437430][T14731] netlink: 'syz.4.1584': attribute type 10 has an invalid length. [ 452.552722][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 452.560462][ T26] audit: type=1326 audit(3030.503:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.0.1589" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff829e5ba8 code=0x0 [ 454.694003][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 454.785222][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 454.815524][T14803] device syz_tun left promiscuous mode [ 454.817233][T14803] bridge0: port 3(syz_tun) entered disabled state [ 455.620446][T14803] device bridge_slave_1 left promiscuous mode [ 455.622718][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.763513][T14803] device bridge_slave_0 left promiscuous mode [ 455.767937][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.139755][T14860] overlayfs: failed to clone upperpath [ 460.111760][T14890] netlink: 'syz.3.1622': attribute type 33 has an invalid length. [ 460.114594][T14890] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1622'. [ 460.341185][T14892] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 460.491503][T14892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.499793][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'. [ 460.512526][T14935] device syz_tun left promiscuous mode [ 460.516802][T14935] bridge0: port 4(syz_tun) entered disabled state [ 461.318957][T14935] device macvlan1 left promiscuous mode [ 461.320922][T14935] bridge0: port 3(macvlan1) entered disabled state [ 461.365600][T14953] overlayfs: failed to clone upperpath [ 461.382187][T14935] device bridge_slave_1 left promiscuous mode [ 461.384095][T14935] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.574933][T14935] device bridge_slave_0 left promiscuous mode [ 461.577106][T14935] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.263269][T14935] bond0: (slave bridge0): Releasing backup interface [ 463.462777][T14935] device bridge0 left promiscuous mode [ 464.786242][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 464.789658][T14966] Unable to handle kernel paging request at virtual address dfff80000000000b [ 464.792601][T14966] Mem abort info: [ 464.793570][T14966] ESR = 0x0000000096000006 [ 464.794903][T14966] EC = 0x25: DABT (current EL), IL = 32 bits [ 464.796598][T14966] SET = 0, FnV = 0 [ 464.797793][T14966] EA = 0, S1PTW = 0 [ 464.799045][T14966] FSC = 0x06: level 2 translation fault [ 464.800780][T14966] Data abort info: [ 464.801910][T14966] ISV = 0, ISS = 0x00000006 [ 464.803338][T14966] CM = 0, WnR = 0 [ 464.804434][T14966] [dfff80000000000b] address between user and kernel address ranges [ 464.806927][T14966] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 464.809159][T14966] Modules linked in: [ 464.810379][T14966] CPU: 1 PID: 14966 Comm: syz.3.1632 Not tainted 5.15.188-syzkaller #0 [ 464.812761][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.815732][T14966] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 464.818164][T14966] pc : __list_del_entry_valid+0x28/0x150 [ 464.819983][T14966] lr : drr_qlen_notify+0x38/0x110 [ 464.821509][T14966] sp : ffff800020306cc0 [ 464.822812][T14966] x29: ffff800020306cc0 x28: 1ffff000025a914c x27: dfff800000000000 [ 464.825350][T14966] x26: 0000000000000000 x25: ffff800012d48a68 x24: ffff800012d48a60 [ 464.827812][T14966] x23: dfff800000000000 x22: ffff8000162edce0 x21: dfff800000000000 [ 464.830099][T14966] x20: 0000000000000050 x19: 0000000000000050 x18: 0000000000000201 [ 464.832637][T14966] x17: 0000000000000002 x16: ffff8000082bf708 x15: 00000000ffffffff [ 464.834959][T14966] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000080000 [ 464.837397][T14966] x11: 0000000000000fd0 x10: ffff800027d3e000 x9 : ffff80000f98d928 [ 464.839597][T14966] x8 : 000000000000000b x7 : ffff80000f8d3b08 x6 : 0000000000000000 [ 464.841658][T14966] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 464.843904][T14966] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000058 [ 464.846290][T14966] Call trace: [ 464.847389][T14966] __list_del_entry_valid+0x28/0x150 [ 464.849028][T14966] drr_qlen_notify+0x38/0x110 [ 464.850461][T14966] qdisc_tree_reduce_backlog+0x250/0x410 [ 464.852054][T14966] codel_change+0x70c/0x9f8 [ 464.853248][T14966] codel_init+0x14c/0x2f0 [ 464.854436][T14966] qdisc_create+0x6e4/0xf24 [ 464.855742][T14966] tc_modify_qdisc+0x8bc/0x1308 [ 464.857339][T14966] rtnetlink_rcv_msg+0x9d4/0xd04 [ 464.858830][T14966] netlink_rcv_skb+0x208/0x3c4 [ 464.860265][T14966] rtnetlink_rcv+0x28/0x38 [ 464.861667][T14966] netlink_unicast+0x60c/0x89c [ 464.863057][T14966] netlink_sendmsg+0x6e8/0x9cc [ 464.864466][T14966] ____sys_sendmsg+0x61c/0x920 [ 464.865912][T14966] ___sys_sendmsg+0x1d0/0x240 [ 464.867256][T14966] __arm64_sys_sendmsg+0x1a8/0x254 [ 464.868653][T14966] invoke_syscall+0x98/0x2b8 [ 464.869985][T14966] el0_svc_common+0x138/0x258 [ 464.871363][T14966] do_el0_svc+0x58/0x14c [ 464.872685][T14966] el0_svc+0x78/0x1e0 [ 464.873782][T14966] el0t_64_sync_handler+0xcc/0xe4 [ 464.875226][T14966] el0t_64_sync+0x1a0/0x1a4 [ 464.876506][T14966] Code: 91002000 d2d00015 d343fc08 f2fbfff5 (38756908) [ 464.878413][T14966] ---[ end trace c44356469a42dbf0 ]--- [ 465.387488][T14966] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 465.389801][T14966] SMP: stopping secondary CPUs [ 465.391241][T14966] Kernel Offset: disabled [ 465.392530][T14966] CPU features: 0x8,000081c1,21302e40 [ 465.394121][T14966] Memory Limit: none [ 465.895478][T14966] Rebooting in 86400 seconds..