last executing test programs: 31.469020289s ago: executing program 2 (id=3240): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c822}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 31.133897748s ago: executing program 2 (id=3242): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 22.800111903s ago: executing program 3 (id=3264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x103000, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x10000000, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r1, 0x0, 0x4005) 16.48674762s ago: executing program 2 (id=3281): socket(0x1d, 0x2, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 16.345289299s ago: executing program 2 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) 14.305326977s ago: executing program 2 (id=3285): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000001c0)=""/214) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) mbind(&(0x7f0000335000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000540)=0x9, 0x433c, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, 0x0, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 13.406045649s ago: executing program 4 (id=3291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 13.363802992s ago: executing program 2 (id=3292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000"], 0x38}}, 0x10) 13.001255473s ago: executing program 4 (id=3295): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 12.456052745s ago: executing program 3 (id=3297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x40, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x65}}}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "596c2051e8784dec2f94c0b32b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = epoll_create1(0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x20d}) 10.092177343s ago: executing program 3 (id=3298): futex(&(0x7f00000000c0)=0x2, 0x4, 0x2, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000000000/0x3000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xdc9, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff014}, {0x6, 0xfc}]}, 0x10) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$TIOCGISO7816(r8, 0x80285442, &(0x7f00000001c0)) ioctl$DRM_IOCTL_NEW_CTX(r8, 0x40086425, &(0x7f0000000140)={r9, 0x3}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000080007000000", @ANYRES32=0x0, @ANYBLOB="800002000a0002000180c20000010000"], 0x28}}, 0x0) 9.95858599s ago: executing program 1 (id=3300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 9.892016474s ago: executing program 3 (id=3301): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8.94243836s ago: executing program 1 (id=3304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 8.685174585s ago: executing program 4 (id=3305): socket(0x1d, 0x2, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f00050000000300050072174405"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000df", @ANYRES16=r6, @ANYBLOB="0100feffffff0000000001000000100007800c00018008", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x20000040) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250100000014000600fe8000000000000000000000000000aa06000b002c00000006000b0000000000080002000500000008000c000100000014000500fe80000000000000000000000080001508000c0003000000080008000a0101020a0001005b26242d2b00000014000600"/134], 0x8c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x54) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}}) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r9, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xa0, 0x0, [{@empty}, {}, {@multicast2}, {}, {@private}, {@broadcast}, {@empty}, {@dev}, {@dev}, {@dev}]}}) 8.568000101s ago: executing program 1 (id=3307): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[], 0x4, 0x27a, &(0x7f0000000440)="$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") r4 = creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x6, 0x7f}) r5 = getpid() syz_pidfd_open(r5, 0x0) umount2(0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 8.295258887s ago: executing program 3 (id=3308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}, {&(0x7f0000002380)="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", 0x235}], 0x2}, 0x4005) 7.38382311s ago: executing program 1 (id=3309): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 7.149153194s ago: executing program 4 (id=3310): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 6.966444884s ago: executing program 3 (id=3312): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 6.893106569s ago: executing program 0 (id=3313): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 6.803343954s ago: executing program 1 (id=3314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x40, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x65}}}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "596c2051e8784dec2f94c0b32b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x20d}) 5.583108985s ago: executing program 1 (id=3315): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c822}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.346601618s ago: executing program 4 (id=3316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 5.217154576s ago: executing program 4 (id=3317): socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="1b0000001e005f0014f9f407faac47", 0xf) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r3, &(0x7f0000004f40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)='T', 0x1}], 0x1}}], 0x1, 0x810) listen(r3, 0xc6) accept4(r3, &(0x7f0000000040)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @netrom, @null, @null]}, &(0x7f00000001c0)=0x80, 0x80000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 5.014707848s ago: executing program 0 (id=3318): syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000) 4.571976594s ago: executing program 0 (id=3319): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f00", 0x1f}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="ba73806f7f957a4c4a45e170e55ab5f96274d759e686bfae706836df39ecc645c8a69453c6fe7417e57034c180fea45c0da27fee76b2730c5cc7150796758318ba22c53b1ca64741204af0fab8fda81094f4c3e1aad8cca7adb53a9d1b30bde40042cfe8bfde979757f4f2342746360b200eb338ea09302b629fbb825357d4398e11a042da6d0fe7de582d9e06ed95ea5590343383fb0df590bbe240ec7f3fa8b6fad0c8737632a56ddb6bc430d3748a600475476cbc439d34c361112bfafe30ab21699781c95fca", 0xc8}, {&(0x7f0000000880)="4b64de36577db8f6bf10512830583ba7582be875f437f9ebc957c2448d35f7eb1f847a5bd132b90c02192a000e189162c7617b2fe7bf795d54b56ee40670984f14eade2ee3525ca2ac3b1f5f7d645ce9ef506d900caa9d4280af54591855fd6d6346945839959bd5e24762b37c4bab0325004a8df3d391a5bc6f4fadc7cef9106584035e78aa11b7dcf2e9903a1aa7fc4bdd62f85cf32eacd3e7dde472598aa6730e3e12fe681df5d74f7be432600eb0faea88abe1ad2a58683f6f6f280aa1b54038e0d422d7cd1ab0ed3046e35afaabc8004bf79658868302fd0d7e5655cc647a5d1cfe79f63b681d0fde59e29e97d2ada859e3", 0xf4}, {&(0x7f0000000540)="b229", 0x2}, {&(0x7f0000000980)="839b673fd0c44c26128c431f114c0e9cb0ec4acc2cb7dfb1c7cb75dfaba6cdab09af4c68476d2fea0fcce066145df9ec9a55538860effffd0cbb2802d4e3d29ce81cf03ffed4d40b7f1053978b0b5be12ea78a18db7afb1d656a297f8e66b42c5be8ae7bfa64e5e01b0d971b035a176c34a4ac62715109d6b0353d68a306fb28e4375b2d1190601c33f3a94c193cdece43411a435646f4e9b82ea4742cb44bcf17fac8176581bc9be42339f753683aa3e3e6717017a7cfbf10a2c42b98573df297a66d6a", 0xc4}, {&(0x7f0000001140)="1e2165c6e57a2e7a8c16704cc200303298d1cbe8620e73cfdb1eb002a761039e6727543d87c6d2e5cc5dedec23596d914444b0015b76d048c96313caf972692bad3a861690c3ca5cf83293834697fe625313a77698af46809197bde1da880ff7cb3107732cd97c6f40213c55b944b3325fbe8357416a8aa465a8ddf3884bc1012af80aecd4233d7a546647e63a3bb4cd177127fa75c85807e319939cd67dbab1529b1d61e98fdf8fe484969007a6e3dad91715f96172c69fa4a22c8fcce7ebacdb0869423f81cd060a417599228e8cbf48dbac50fd028721e53fdb912f2e3575d73b15d051b04c13c93374e3b868d211c9", 0xf1}, {&(0x7f0000000c40)="6460c98d5c6b781d11fd0d905c8a9994d0ffd775d6cde9a6f87b0ebe6bb239faf6b4f0bbe6e9b897316c1623546aef2631b597f763983f582e44dc095d684f8dc9f46caa2952da4265945eb764786eb1e2efde1d4db32cd6de9d6914bf14f7f7a543c626c081b03e92131bad6e23eff1986fbb23cbded0d89c32981f847553d6f83bec47dae858b078a0c71b04bede12ce425fe01d944e5479a9479a3f9757aa0801578f32718e3d30e9e44c2196dd3bd4d6193672204a59ae4bbf4ff4509648f3b110a4501243cf9a55bbab15ee39caad793b2de2613e514810b358b38211fa3da8a5f55c57556345", 0xe9}, {&(0x7f0000000780)="c252f9e054d4b6abff0854ab78a672fa0aba3d42a9926bc29de5f2b20b8254c9dc425a1080b246038fab43e383c454f70409f5c6ad4d85c3fbfa5b5601106ea3b65826e7936032987f8fac62a5d9abf2b47a2972c3c4e4fb140c5a65df7fd033398403d348c37e77d2852ae1c12686e08c64ec9169aadbd4068e24b78b762ae6fbc595eda1d01760b1ac55f9ec745049e4870440b0a131a4a5b307fabd16", 0x9e}], 0x7, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x290}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x1fd, 0x2, 0xd000, 0x1000, &(0x7f000000b000/0x1000)=nil}) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.617256799s ago: executing program 0 (id=3320): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0xc0) 1.162702492s ago: executing program 0 (id=3321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x65}}}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "596c2051e8784dec2f94c0b32b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x20d}) 0s ago: executing program 0 (id=3322): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4c822}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ip=0x7fd74f693f79 code=0x7ffc0000 [ 309.570405][ T26] audit: type=1326 audit(1770986369.326:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 309.592667][ T26] audit: type=1326 audit(1770986369.346:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 309.653827][ T26] audit: type=1326 audit(1770986369.346:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 309.711232][ T26] audit: type=1326 audit(1770986369.346:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 309.755765][ T26] audit: type=1326 audit(1770986369.346:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 309.811662][ T26] audit: type=1326 audit(1770986369.346:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 309.994240][ T1110] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 310.291963][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 310.444167][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.617047][ T1110] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 311.626329][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.643195][ T1110] usb 3-1: config 0 descriptor?? [ 311.761141][ T1110] hub 3-1:0.0: USB hub found [ 311.984140][ T1110] hub 3-1:0.0: 1 port detected [ 313.291064][ T4228] usb 3-1: USB disconnect, device number 17 [ 313.303916][ T3577] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 313.501593][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 313.749362][ T8554] autofs4:pid:8554:autofs_fill_super: called with bogus options [ 314.284403][ T8570] overlayfs: failed to clone upperpath [ 314.646160][ T4228] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 314.897191][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 315.028428][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.040075][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.215149][ T4228] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.249155][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.288615][ T4228] usb 3-1: Product: syz [ 315.306647][ T4228] usb 3-1: Manufacturer: syz [ 315.331843][ T4228] usb 3-1: SerialNumber: syz [ 315.710407][ T8601] autofs4:pid:8601:autofs_fill_super: called with bogus options [ 315.784424][ T4228] usb 3-1: 0:2 : does not exist [ 315.791827][ T4228] usb 3-1: unit 6 not found! [ 315.844014][ T4228] usb 3-1: USB disconnect, device number 18 [ 317.066446][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073027][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.192133][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.245968][ T8611] device syzkaller0 entered promiscuous mode [ 317.278992][ T8615] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1506'. [ 317.366321][ T8621] overlayfs: failed to clone upperpath [ 318.463832][ T4325] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 318.813911][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 318.934145][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.960272][ T4325] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.974973][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.027523][ T4325] usb 3-1: config 0 descriptor?? [ 319.106523][ T4325] hub 3-1:0.0: USB hub found [ 319.435793][ T4325] hub 3-1:0.0: 1 port detected [ 320.907232][ T4325] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 320.914019][ T4325] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 321.034258][ T4325] usbhid 3-1:0.0: can't add hid device: -71 [ 321.040412][ T4325] usbhid: probe of 3-1:0.0 failed with error -71 [ 321.115697][ T4325] usb 3-1: USB disconnect, device number 19 [ 321.436644][ T8672] autofs4:pid:8672:autofs_fill_super: called with bogus options [ 322.069582][ T8697] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 322.149131][ T8697] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 322.193877][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.801120][ T8709] autofs4:pid:8709:autofs_fill_super: called with bogus options [ 324.011872][ T8732] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 324.051681][ T8732] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 324.061569][ T8732] pit: kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 324.071201][ T8732] pit: kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 324.088001][ T8732] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 324.111781][ T8732] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 324.120993][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 324.121008][ T26] audit: type=1326 audit(1770986383.956:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 324.151032][ T8732] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 324.232123][ T26] audit: type=1326 audit(1770986383.956:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 324.293397][ T26] audit: type=1326 audit(1770986383.996:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 324.322906][ T26] audit: type=1326 audit(1770986383.996:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 324.356799][ T26] audit: type=1326 audit(1770986383.996:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 324.385874][ T26] audit: type=1326 audit(1770986383.996:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 324.412756][ T26] audit: type=1326 audit(1770986383.996:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 324.449292][ T26] audit: type=1326 audit(1770986383.996:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 325.047404][ T8747] overlayfs: failed to clone upperpath [ 325.973941][ T8768] netlink: 'syz.3.1551': attribute type 25 has an invalid length. [ 325.981816][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1551'. [ 326.069821][ T8768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1551'. [ 326.115799][ T8768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1551'. [ 326.307662][ T26] audit: type=1326 audit(1770986386.146:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 326.391282][ T26] audit: type=1326 audit(1770986386.146:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 326.700051][ T8794] overlayfs: failed to clone upperpath [ 327.295056][ T8799] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 327.362383][ T8799] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 327.400475][ T8799] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 327.444148][ T8799] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 327.467373][ T8804] netlink: 'syz.2.1566': attribute type 25 has an invalid length. [ 327.513880][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1566'. [ 327.552011][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1566'. [ 327.631039][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1566'. [ 328.709058][ T8849] netlink: 'syz.0.1583': attribute type 25 has an invalid length. [ 328.733963][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1583'. [ 328.778049][ T8849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1583'. [ 328.791508][ T8853] overlayfs: failed to clone upperpath [ 328.820696][ T8849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1583'. [ 329.150611][ T8857] loop4: detected capacity change from 0 to 4096 [ 329.223924][ T8857] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 329.294028][ T8857] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 329.385753][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 329.385775][ T26] audit: type=1326 audit(1770986389.226:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 329.413683][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.758577][ T26] audit: type=1326 audit(1770986389.226:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 330.827159][ T26] audit: type=1326 audit(1770986389.256:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 331.412931][ T26] audit: type=1326 audit(1770986389.256:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 331.722903][ T26] audit: type=1326 audit(1770986389.256:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 331.801330][ T26] audit: type=1326 audit(1770986389.256:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 331.837240][ T8887] netlink: 'syz.1.1598': attribute type 25 has an invalid length. [ 331.872283][ T26] audit: type=1326 audit(1770986389.256:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 331.926520][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1598'. [ 331.979827][ T8893] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1598'. [ 332.006042][ T26] audit: type=1326 audit(1770986389.256:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 332.126588][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1598'. [ 332.718984][ T8895] overlayfs: failed to resolve './file0': -2 [ 333.269099][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1603'. [ 335.197145][ T8942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1617'. [ 336.310640][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'. [ 337.682020][ T26] audit: type=1326 audit(1770986397.516:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 337.712760][ T26] audit: type=1326 audit(1770986397.516:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 337.754148][ T26] audit: type=1326 audit(1770986397.516:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 337.786060][ T26] audit: type=1326 audit(1770986397.516:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 337.821772][ T26] audit: type=1326 audit(1770986397.516:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 337.893127][ T26] audit: type=1326 audit(1770986397.516:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 337.931750][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1643'. [ 337.943995][ T26] audit: type=1326 audit(1770986397.516:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 337.988849][ T26] audit: type=1326 audit(1770986397.516:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 339.346304][ T9037] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 339.396039][ T9037] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 339.491108][ T9037] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 339.524594][ T9037] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 341.760241][ T9113] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.901073][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 341.986280][ T9122] loop2: detected capacity change from 0 to 4096 [ 342.084678][ T9122] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 342.169174][ T9122] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 342.264111][ T26] audit: type=1326 audit(1770986402.106:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5303f79 code=0x7ffc0000 [ 342.351356][ T26] audit: type=1326 audit(1770986402.126:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a5303f79 code=0x7ffc0000 [ 342.506330][ T9147] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 342.578631][ T9144] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.779148][ T9153] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.357013][ T9177] autofs4:pid:9177:autofs_fill_super: called with bogus options [ 343.498107][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 345.520982][ T9228] netlink: 'syz.1.1727': attribute type 25 has an invalid length. [ 345.543845][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 345.559384][ T9228] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1727'. [ 347.442840][ T9265] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1742'. [ 347.595357][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1742'. [ 348.374251][ T9274] loop4: detected capacity change from 0 to 4096 [ 348.423271][ T9274] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 348.611907][ T9274] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 348.716228][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 348.716245][ T26] audit: type=1326 audit(1770986408.556:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 348.782321][ T26] audit: type=1326 audit(1770986408.586:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 348.804187][ T26] audit: type=1326 audit(1770986408.586:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 348.828001][ T26] audit: type=1326 audit(1770986408.586:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 348.873604][ T26] audit: type=1326 audit(1770986408.586:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 349.013842][ T26] audit: type=1326 audit(1770986408.586:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 349.108520][ T26] audit: type=1326 audit(1770986408.586:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 349.326549][ T26] audit: type=1326 audit(1770986408.586:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 350.290705][ T9299] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1756'. [ 350.327428][ T9299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1756'. [ 351.995802][ T26] audit: type=1326 audit(1770986411.836:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 352.082162][ T26] audit: type=1326 audit(1770986411.856:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7777dff79 code=0x7ffc0000 [ 352.212844][ T9326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1768'. [ 352.255210][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1768'. [ 355.097866][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 355.097883][ T26] audit: type=1326 audit(1770986414.936:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 355.134395][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 355.213435][ T26] audit: type=1326 audit(1770986414.996:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 355.243510][ T26] audit: type=1326 audit(1770986414.996:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 355.279430][ T26] audit: type=1326 audit(1770986414.996:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 355.318424][ T26] audit: type=1326 audit(1770986414.996:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 355.321901][ T9361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1780'. [ 355.365290][ T26] audit: type=1326 audit(1770986414.996:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 355.433921][ T9361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1780'. [ 355.466441][ T9366] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1779'. [ 355.477730][ T9366] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1779'. [ 355.586172][ T26] audit: type=1326 audit(1770986414.996:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77a2d8f79 code=0x7ffc0000 [ 356.702849][ T9378] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1785'. [ 359.419199][ T9405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1794'. [ 359.441884][ T9405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1794'. [ 360.023225][ T9416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1797'. [ 360.539420][ T9416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1797'. [ 360.886154][ T9431] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1801'. [ 360.897972][ T9431] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1801'. [ 362.016470][ T9445] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1803'. [ 362.073997][ T9445] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1803'. [ 362.394519][ T9448] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1806'. [ 362.415018][ T9448] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1806'. [ 362.890473][ T9461] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1808'. [ 362.911858][ T9461] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1808'. [ 363.241923][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 366.014004][ T9511] __nla_validate_parse: 4 callbacks suppressed [ 366.014046][ T9511] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1823'. [ 366.193954][ T9512] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1826'. [ 366.583865][ T9511] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1823'. [ 366.973834][ T9512] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1826'. [ 368.682904][ T9527] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1828'. [ 368.704186][ T9527] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1828'. [ 370.718792][ T9561] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1840'. [ 370.729970][ T9561] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1840'. [ 371.604883][ T9573] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1843'. [ 371.910329][ T9574] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1842'. [ 371.943853][ T9573] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1843'. [ 372.294735][ T9574] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1842'. [ 372.994199][ T9587] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1844'. [ 373.005432][ T9587] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1844'. [ 375.734505][ T9615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1857'. [ 375.749575][ T9615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1857'. [ 376.363934][ T9625] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1859'. [ 376.671697][ T9626] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1860'. [ 376.734428][ T9625] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1859'. [ 377.184058][ T9626] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1860'. [ 377.661184][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 378.505576][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.513755][ T9650] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1867'. [ 378.524769][ T9650] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1867'. [ 378.684845][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.966341][ T9657] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1870'. [ 379.021567][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1870'. [ 379.087507][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'. [ 379.268627][ T9661] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 379.284769][ T9673] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1873'. [ 383.394217][ T9716] __nla_validate_parse: 5 callbacks suppressed [ 383.394236][ T9716] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1886'. [ 383.410824][ T9717] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1885'. [ 383.774037][ T9716] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1886'. [ 383.784216][ T9717] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1885'. [ 384.461743][ T9727] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1887'. [ 384.475738][ T9727] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1887'. [ 385.605230][ T9734] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 386.059288][ T9743] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1892'. [ 386.079940][ T9743] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1892'. [ 386.509341][ T9750] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1894'. [ 386.521277][ T9750] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1894'. [ 388.803890][ T9776] __nla_validate_parse: 3 callbacks suppressed [ 388.803910][ T9776] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1897'. [ 389.233845][ T9776] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1897'. [ 390.289899][ T9793] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1901'. [ 390.311101][ T9793] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1901'. [ 391.966023][ T9812] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1907'. [ 391.987034][ T9812] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1907'. [ 392.628658][ T9819] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1910'. [ 392.692406][ T9819] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1910'. [ 393.271553][ T9829] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1912'. [ 393.282377][ T9829] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1912'. [ 394.660983][ T9850] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1919'. [ 394.681787][ T9850] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1919'. [ 395.145164][ T9858] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1922'. [ 395.156294][ T9858] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1922'. [ 396.413882][ T9871] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1924'. [ 396.433525][ T9871] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1924'. [ 398.664067][ T9896] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1934'. [ 399.073966][ T9896] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1934'. [ 399.701402][ T9912] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1936'. [ 399.746055][ T9912] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1936'. [ 400.455803][ T9931] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1944'. [ 400.466959][ T9931] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1944'. [ 402.076878][ T9966] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1954'. [ 404.068722][T10005] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1966'. [ 404.088332][T10005] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1966'. [ 405.141071][T10017] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1967'. [ 405.152483][T10017] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1967'. [ 405.224181][T10019] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1971'. [ 407.018163][T10057] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1980'. [ 407.030199][T10057] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1980'. [ 408.289276][T10070] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1984'. [ 408.303550][T10070] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1984'. [ 409.719866][T10088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1989'. [ 409.815211][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1989'. [ 410.996354][T10110] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1994'. [ 411.166278][ T26] audit: type=1326 audit(1770986471.006:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 411.204998][ T26] audit: type=1326 audit(1770986471.006:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 411.235145][ T26] audit: type=1326 audit(1770986471.026:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 411.270816][ T26] audit: type=1326 audit(1770986471.026:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 411.341988][ T26] audit: type=1326 audit(1770986471.036:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 411.402821][ T26] audit: type=1326 audit(1770986471.036:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f693f79 code=0x7ffc0000 [ 411.937197][ T26] audit: type=1326 audit(1770986471.776:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10136 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 412.017966][ T26] audit: type=1326 audit(1770986471.806:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10136 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 412.052131][ T26] audit: type=1326 audit(1770986471.806:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10136 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 412.701867][ T26] audit: type=1326 audit(1770986471.806:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10136 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c385f79 code=0x7ffc0000 [ 413.010137][T10149] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2010'. [ 413.031458][T10149] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2010'. [ 413.577703][T10152] overlayfs: failed to clone upperpath [ 415.106983][T10201] overlayfs: failed to clone upperpath [ 415.407422][T10217] overlayfs: failed to clone upperpath [ 416.485155][T10253] binder: 10252:10253 ioctl c0306201 0 returned -14 [ 416.758135][T10272] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2049'. [ 416.799376][T10272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2049'. [ 417.060886][T10281] overlayfs: failed to clone upperpath [ 417.659072][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2063'. [ 417.668486][T10305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'. [ 417.756178][T10310] overlayfs: failed to clone upperpath [ 419.027770][T10344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2076'. [ 419.043915][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2076'. [ 419.291923][T10356] autofs4:pid:10356:autofs_fill_super: called with bogus options [ 420.004898][T10358] overlayfs: failed to clone upperpath [ 420.164020][T10369] overlayfs: failed to clone upperpath [ 421.395335][T10381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2088'. [ 421.439821][T10381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2088'. [ 422.607385][T10398] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 422.647184][T10398] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 422.968953][T10420] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2103'. [ 422.999364][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2103'. [ 423.017701][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.461257][T10440] overlayfs: failed to clone upperpath [ 423.778264][T10452] overlayfs: failed to clone upperpath [ 425.740570][T10487] overlayfs: failed to clone upperpath [ 426.353045][T10521] block device autoloading is deprecated and will be removed. [ 427.591790][T10571] overlayfs: failed to clone upperpath [ 427.944373][T10587] overlayfs: failed to clone upperpath [ 428.395966][T10608] overlayfs: failed to clone upperpath [ 428.661665][T10620] overlayfs: failed to clone upperpath [ 429.173269][T10646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2194'. [ 429.190624][T10646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2194'. [ 429.335083][T10654] overlayfs: failed to clone upperpath [ 429.511455][T10658] overlayfs: failed to clone upperpath [ 429.796746][T10667] overlayfs: failed to clone upperpath [ 430.231296][T10682] overlayfs: failed to clone upperpath [ 433.092711][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2267'. [ 434.591866][T10889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2289'. [ 434.636822][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2289'. [ 435.423886][ T3577] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 435.673864][ T3577] usb 3-1: Using ep0 maxpacket: 16 [ 435.814057][ T3577] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.832082][ T3577] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.879421][T10947] overlayfs: failed to resolve './file1': -2 [ 435.937820][T10945] device syzkaller0 entered promiscuous mode [ 436.034219][ T3577] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.058321][ T3577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.082307][ T3577] usb 3-1: Product: syz [ 436.097374][ T3577] usb 3-1: Manufacturer: syz [ 436.102031][ T3577] usb 3-1: SerialNumber: syz [ 436.495457][ T3577] usb 3-1: 0:2 : does not exist [ 436.529652][ T3577] usb 3-1: USB disconnect, device number 20 [ 436.796012][ T9761] udevd[9761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.853732][ T21] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 439.123728][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 439.253974][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.278665][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.464065][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.493935][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.502103][ T21] usb 3-1: Product: syz [ 439.517600][ T21] usb 3-1: Manufacturer: syz [ 439.522253][ T21] usb 3-1: SerialNumber: syz [ 439.893998][ T21] usb 3-1: 0:2 : does not exist [ 439.946240][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.952845][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.978691][ T21] usb 3-1: USB disconnect, device number 21 [ 440.265509][ T9761] udevd[9761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.585987][T11035] device gretap1 entered promiscuous mode [ 440.679390][T11032] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 440.699284][T11032] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 440.875154][T11044] overlayfs: failed to resolve './file0': -2 [ 441.251321][T11065] overlayfs: failed to clone upperpath [ 444.949305][T11105] overlayfs: failed to clone upperpath [ 445.330473][T11120] device syzkaller0 entered promiscuous mode [ 446.682707][T11140] overlayfs: failed to clone upperpath [ 446.690595][T11139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.834969][T11146] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.857836][T11146] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 447.012471][T11155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2385'. [ 447.023873][T11155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2385'. [ 447.045838][T11152] device syzkaller0 entered promiscuous mode [ 447.743546][T11178] overlayfs: failed to clone upperpath [ 447.878988][T11182] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 447.991909][T11184] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 448.014768][T11184] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 448.091083][T11182] bond2: (slave gretap1): making interface the new active one [ 448.109945][T11182] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 448.919011][T11214] overlayfs: failed to clone upperpath [ 449.328781][T11229] overlayfs: failed to clone upperpath [ 449.345256][T11230] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 449.356431][T11232] overlayfs: failed to clone upperpath [ 449.510991][T11234] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 449.564737][T11234] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 449.583450][T11240] netlink: 'syz.0.2413': attribute type 1 has an invalid length. [ 449.652073][T11230] bond1: (slave gretap1): making interface the new active one [ 449.661039][T11246] overlayfs: failed to clone upperpath [ 449.685402][T11230] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 449.720894][T11243] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 449.750383][T11243] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 449.791316][T11240] bond2: (slave gretap1): making interface the new active one [ 449.808835][T11240] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 450.094736][T11269] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.137747][T11269] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 450.172330][T11273] netlink: 'syz.3.2428': attribute type 13 has an invalid length. [ 450.230226][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 450.257970][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.281937][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.495619][T11269] device gretap2 entered promiscuous mode [ 451.301466][T11307] netlink: 'syz.0.2441': attribute type 1 has an invalid length. [ 451.361607][T11306] tipc: Enabling of bearer rejected, failed to enable media [ 451.389827][T11312] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 451.515203][T11312] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 451.877714][T11326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2445'. [ 451.901810][T11324] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 451.961948][T11327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2445'. [ 451.981378][T11327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2445'. [ 452.001435][T11329] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 452.044734][T11329] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 452.139453][T11324] device macvlan3 entered promiscuous mode [ 452.162395][T11335] overlayfs: failed to clone upperpath [ 452.169249][T11324] device bond4 entered promiscuous mode [ 452.183841][T11324] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 452.206904][T11324] device bond4 left promiscuous mode [ 452.293519][ T5265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.536263][ T5265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.766765][ T5265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.882304][ T5265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.953105][T11328] chnl_net:caif_netlink_parms(): no params data found [ 453.186789][T11369] tipc: Enabling of bearer rejected, failed to enable media [ 453.250948][T11328] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.282713][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.303098][T11328] device bridge_slave_0 entered promiscuous mode [ 453.334962][T11328] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.353418][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.370004][T11328] device bridge_slave_1 entered promiscuous mode [ 453.457184][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.467584][T11384] netlink: 'syz.0.2460': attribute type 1 has an invalid length. [ 453.506931][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.585242][T11390] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 453.620707][T11390] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 453.684276][T11391] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 453.787550][T11393] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 453.798967][T11393] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 453.835005][T11328] team0: Port device team_slave_0 added [ 453.858646][T11328] team0: Port device team_slave_1 added [ 453.943733][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 454.076336][T11328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.083687][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.109610][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.144023][T11328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.247755][T11328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.267044][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.313863][T11328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.439573][T11328] device hsr_slave_0 entered promiscuous mode [ 454.474221][T11328] device hsr_slave_1 entered promiscuous mode [ 454.495460][T11328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.535910][T11328] Cannot create hsr debugfs directory [ 454.611704][T11420] md: array md2 already initialised! [ 455.092578][ T5265] device hsr_slave_0 left promiscuous mode [ 455.103441][ T5265] device hsr_slave_1 left promiscuous mode [ 455.127688][ T5265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.164228][ T5265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.172284][ T5265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.204801][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.244373][ T5265] device bridge_slave_0 left promiscuous mode [ 455.250674][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.288729][ T5265] device veth1_macvtap left promiscuous mode [ 455.304710][ T5265] device veth0_macvtap left promiscuous mode [ 455.321238][ T5265] device veth1_vlan left promiscuous mode [ 455.327601][ T5265] device veth0_vlan left promiscuous mode [ 455.647683][ T5265] bond1 (unregistering): Released all slaves [ 455.899046][ T5265] team0 (unregistering): Port device team_slave_1 removed [ 455.920570][ T5265] team0 (unregistering): Port device team_slave_0 removed [ 455.937337][ T5265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.966558][ T5265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.023797][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 456.091313][ T5265] bond0 (unregistering): Released all slaves [ 456.199791][T11455] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 457.416674][T11328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.526470][T11328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.587362][T11328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.703857][T11328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.103748][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 458.167938][T11328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.222951][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.236505][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.294728][T11328] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.328727][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.349519][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.434657][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.441862][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.484896][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.528295][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.558891][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.614292][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.621395][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.673934][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.692837][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.739726][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.780201][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.825703][T11533] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 458.922435][T11536] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 459.047633][T11536] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 459.158610][T11538] device macvlan2 entered promiscuous mode [ 459.185185][T11538] device bond4 entered promiscuous mode [ 459.213064][T11538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.280937][T11538] device bond4 left promiscuous mode [ 459.351584][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.372987][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.436301][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.470968][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.510137][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.573912][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.605183][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.652266][T11328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.738674][T11567] tipc: Enabling of bearer rejected, failed to enable media [ 460.027890][T11578] netlink: 'syz.0.2502': attribute type 13 has an invalid length. [ 460.140359][T11578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.193910][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 460.334169][ T4242] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.364693][T11328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.372695][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.395652][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.445611][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.489877][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.561622][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.574941][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.623280][T11328] device veth0_vlan entered promiscuous mode [ 460.644779][T11596] netlink: 'syz.1.2504': attribute type 1 has an invalid length. [ 460.715215][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.723312][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.824674][T11601] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 460.840347][T11601] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 460.867334][T11607] netlink: 'syz.4.2506': attribute type 13 has an invalid length. [ 460.956399][T11614] overlayfs: failed to resolve './file1': -2 [ 460.974846][T11607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 461.011790][T11607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.043030][T11607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.181341][T11328] device veth1_vlan entered promiscuous mode [ 461.234121][ T4228] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.285158][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.309892][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.323866][ T4242] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 461.334551][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.345687][T11622] overlayfs: failed to clone upperpath [ 461.358293][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.396219][T11328] device veth0_macvtap entered promiscuous mode [ 461.432006][T11328] device veth1_macvtap entered promiscuous mode [ 461.519673][T11328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.529829][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.562643][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.577046][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.592813][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.594255][ T4242] usb 3-1: Using ep0 maxpacket: 16 [ 461.615165][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.630674][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.651711][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.663249][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.680778][T11328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.703959][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.712924][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.763993][ T4242] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.772600][T11328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.783604][T11328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.793537][T11328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.805186][ T4242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.813905][T11328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.987490][ T5268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.014013][ T5268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.034230][ T4242] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.044267][T11642] netlink: 'syz.4.2519': attribute type 1 has an invalid length. [ 462.061147][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.093869][ T4242] usb 3-1: Product: syz [ 462.098090][ T4242] usb 3-1: Manufacturer: syz [ 462.137406][ T4242] usb 3-1: SerialNumber: syz [ 462.157437][T11643] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 462.175754][T11643] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 462.210019][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 462.287915][T11647] bond2: (slave gretap1): making interface the new active one [ 462.304930][T11647] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 462.325762][ T5266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.333621][ T5266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.354735][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 462.514027][ T4242] usb 3-1: 0:2 : does not exist [ 462.559366][ T4242] usb 3-1: USB disconnect, device number 22 [ 462.641120][T11657] udevd[11657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.684274][T11664] netlink: 'syz.1.2523': attribute type 1 has an invalid length. [ 462.750414][T11664] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 462.761987][T11664] bond6: (slave vxcan3): Error -22 calling dev_set_mtu [ 462.815485][T11666] device syzkaller0 entered promiscuous mode [ 463.513881][T11682] netlink: 'syz.3.2527': attribute type 13 has an invalid length. [ 463.583894][T11682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.626512][T11682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.637813][T11682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.101157][T11702] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 464.138141][T11708] netlink: 'syz.3.2534': attribute type 13 has an invalid length. [ 464.173422][T11708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.227548][T11708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.279145][T11708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.359841][T11714] tipc: Started in network mode [ 464.383603][T11714] tipc: Node identity 5685e5f934ea, cluster identity 4711 [ 464.404239][T11714] tipc: Enabled bearer , priority 0 [ 464.456550][T11714] tipc: Resetting bearer [ 464.485562][T11713] tipc: Disabling bearer [ 464.633909][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 464.667686][T11718] device gretap1 entered promiscuous mode [ 465.137454][T11731] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.177575][ T4242] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 465.191567][T11731] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 465.261912][T11731] device gretap2 entered promiscuous mode [ 465.463962][ T4242] usb 4-1: Using ep0 maxpacket: 16 [ 465.579077][T11740] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 465.596947][ T4242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.628214][ T4242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.707841][T11742] netlink: 'syz.1.2548': attribute type 1 has an invalid length. [ 465.849771][T11745] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 465.861086][ T4242] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.870461][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.879131][ T4242] usb 4-1: Product: syz [ 465.883510][ T4242] usb 4-1: Manufacturer: syz [ 465.894640][ T4242] usb 4-1: SerialNumber: syz [ 465.905595][T11745] bond7: (slave vxcan3): Error -22 calling dev_set_mtu [ 465.947971][T11740] device macvlan3 entered promiscuous mode [ 465.965954][T11740] device bond6 entered promiscuous mode [ 465.975015][T11740] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 465.998648][T11740] device bond6 left promiscuous mode [ 466.063876][T11742] device macvlan2 entered promiscuous mode [ 466.098280][T11742] device bond7 entered promiscuous mode [ 466.117321][T11742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.168772][T11742] device bond7 left promiscuous mode [ 466.255340][ T4242] usb 4-1: 0:2 : does not exist [ 466.341507][ T4242] usb 4-1: USB disconnect, device number 6 [ 466.900192][T11761] device syzkaller0 entered promiscuous mode [ 466.992369][T11766] tipc: Enabled bearer , priority 0 [ 467.008276][T11769] device syzkaller0 entered promiscuous mode [ 467.060006][T11766] tipc: Resetting bearer [ 467.081801][T11765] tipc: Disabling bearer [ 467.231163][T11779] device syzkaller0 entered promiscuous mode [ 467.280315][T11781] device syzkaller0 entered promiscuous mode [ 468.251147][T11820] device syzkaller0 entered promiscuous mode [ 469.859676][T11848] netlink: 'syz.0.2582': attribute type 1 has an invalid length. [ 469.967314][T11854] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 469.978487][T11854] bond7: (slave vxcan3): Error -22 calling dev_set_mtu [ 470.016524][T11848] device macvlan3 entered promiscuous mode [ 470.024661][T11848] device bond7 entered promiscuous mode [ 470.030738][T11848] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 470.046660][T11848] device bond7 left promiscuous mode [ 470.242607][T11863] netlink: 'syz.0.2587': attribute type 25 has an invalid length. [ 470.251709][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2587'. [ 470.270271][T11863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2587'. [ 470.280555][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2587'. [ 471.854224][T11883] device syzkaller0 entered promiscuous mode [ 472.266640][T11909] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 472.302380][T11909] device gretap2 entered promiscuous mode [ 473.881233][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 474.055224][ T4242] syzkaller0: tun_net_xmit 76 [ 474.060349][ T4242] syzkaller0: tun_net_xmit 48 [ 474.088922][ T1110] syzkaller0: tun_net_xmit 76 [ 474.114542][T11936] syzkaller0: delete flow: hash 169929464 index 1 [ 474.777274][T11968] xt_TPROXY: Can be used only with -p tcp or -p udp [ 474.788058][T11968] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 474.816652][T11968] device gretap2 entered promiscuous mode [ 475.593552][T11985] xt_TPROXY: Can be used only with -p tcp or -p udp [ 475.650276][T11988] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 475.751248][T11985] device gretap2 entered promiscuous mode [ 475.792666][T11993] xt_TPROXY: Can be used only with -p tcp or -p udp [ 475.813247][T11993] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 475.876848][T11993] device gretap2 entered promiscuous mode [ 476.003779][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 476.283730][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 476.424837][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.448024][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.528732][T12023] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 476.663975][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.683308][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.691766][ T23] usb 4-1: Product: syz [ 476.701873][ T23] usb 4-1: Manufacturer: syz [ 476.712013][ T23] usb 4-1: SerialNumber: syz [ 476.801500][T12024] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 476.858330][T12024] bond8: (slave vxcan3): Error -22 calling dev_set_mtu [ 477.059421][ T23] usb 4-1: 0:2 : does not exist [ 477.099418][ T23] usb 4-1: USB disconnect, device number 7 [ 478.147088][T12053] overlayfs: missing 'lowerdir' [ 478.296054][T12058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 478.326788][T11657] udevd[11657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.417477][T12058] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 478.495251][T12063] netlink: 'syz.4.2654': attribute type 1 has an invalid length. [ 478.655712][T12066] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 478.674473][T12066] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 478.723759][T12068] netlink: 'syz.3.2655': attribute type 13 has an invalid length. [ 478.771387][T12068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.806248][T12068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.827947][T12068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.462625][T12070] device macvlan2 entered promiscuous mode [ 479.485487][T12070] device bond3 entered promiscuous mode [ 479.504910][T12070] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.524377][T12070] device bond3 left promiscuous mode [ 479.834971][ T23] syzkaller0: tun_net_xmit 76 [ 479.841184][T12096] syzkaller0: create flow: hash 169929464 index 1 [ 479.854079][ T23] syzkaller0: tun_net_xmit 48 [ 479.890140][ T21] syzkaller0: tun_net_xmit 76 [ 479.955194][T12084] syzkaller0: delete flow: hash 169929464 index 1 [ 480.886298][T12110] device syzkaller0 entered promiscuous mode [ 480.903859][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.543530][T12166] overlayfs: missing 'lowerdir' [ 485.754743][T12204] netlink: 'syz.4.2693': attribute type 1 has an invalid length. [ 486.575706][T12208] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 486.671214][T12208] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 487.361489][T12250] tipc: Enabled bearer , priority 0 [ 487.435740][T12249] tipc: Disabling bearer [ 489.007150][T12293] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2715'. [ 489.045707][T12293] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2715'. [ 489.115778][T12293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2715'. [ 489.163553][T12295] device syzkaller0 entered promiscuous mode [ 489.219028][T12295] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 489.646180][T12314] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 489.712196][T12316] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 489.824694][T12316] bond9: (slave vxcan3): Error -22 calling dev_set_mtu [ 489.870183][T12318] device syzkaller0 entered promiscuous mode [ 490.118412][T12324] syzkaller0: create flow: hash 169929464 index 1 [ 490.151930][T12321] syzkaller0: delete flow: hash 169929464 index 1 [ 490.168652][T12334] overlayfs: missing 'lowerdir' [ 491.083267][T12359] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 491.189735][T12363] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 491.284837][T12363] bond8: (slave vxcan3): Error -22 calling dev_set_mtu [ 491.367955][T12365] device macvlan2 entered promiscuous mode [ 491.397572][T12365] device bond8 entered promiscuous mode [ 491.414412][T12365] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 491.442101][T12365] device bond8 left promiscuous mode [ 491.587075][T12373] xt_TPROXY: Can be used only with -p tcp or -p udp [ 491.612012][T12373] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 491.649488][T12373] device gretap2 entered promiscuous mode [ 491.784624][T12378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 491.825209][T12378] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 491.904351][T12378] device gretap2 entered promiscuous mode [ 492.961417][T12414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 492.991328][T12414] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 493.046028][T12414] device gretap2 entered promiscuous mode [ 493.397177][T12424] netlink: 'syz.1.2754': attribute type 1 has an invalid length. [ 493.560141][T12427] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 493.637020][T12427] bond9: (slave vxcan3): Error -22 calling dev_set_mtu [ 493.872680][T12430] tipc: Started in network mode [ 493.902810][T12430] tipc: Node identity f231b0a5f596, cluster identity 4711 [ 493.968705][T12430] tipc: Enabled bearer , priority 0 [ 494.108175][T12434] device syzkaller0 entered promiscuous mode [ 494.201321][T12429] tipc: Resetting bearer [ 494.241440][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2760'. [ 494.308298][T12429] tipc: Disabling bearer [ 495.741814][ T4235] syzkaller0: tun_net_xmit 76 [ 495.747958][ T4235] syzkaller0: tun_net_xmit 48 [ 495.767047][T12345] syzkaller0: tun_net_xmit 76 [ 495.795517][T12483] syzkaller0: create flow: hash 169929464 index 1 [ 495.817025][T12482] syzkaller0: delete flow: hash 169929464 index 1 [ 496.165748][T12490] device syzkaller0 entered promiscuous mode [ 496.734926][T12503] overlayfs: failed to clone upperpath [ 498.127705][T12525] device syzkaller0 entered promiscuous mode [ 498.393407][T12530] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2786'. [ 498.457468][T12532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 498.518839][T12538] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 498.533365][T12534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2789'. [ 498.548676][T12534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2789'. [ 498.575364][T12532] device gretap2 entered promiscuous mode [ 498.676694][T12545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 498.909982][T12558] device gretap2 entered promiscuous mode [ 499.050094][T12572] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 499.459153][T12590] device syzkaller0 entered promiscuous mode [ 499.802823][T12598] device syzkaller0 entered promiscuous mode [ 500.005186][T12607] netlink: 'syz.2.2812': attribute type 13 has an invalid length. [ 500.023509][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2812'. [ 500.212130][T12613] device syzkaller0 entered promiscuous mode [ 500.847915][T12646] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 500.932958][T12651] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 501.000265][T12651] bond10: (slave vxcan3): Error -22 calling dev_set_mtu [ 501.048085][T12652] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 501.078789][T12652] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 501.128092][T12656] device macvlan2 entered promiscuous mode [ 501.152727][T12656] device bond2 entered promiscuous mode [ 501.169723][T12656] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.191990][T12656] device bond2 left promiscuous mode [ 501.396711][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.403532][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.787083][T12672] overlayfs: failed to clone upperpath [ 502.968049][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'. [ 503.149994][T12695] device syzkaller0 entered promiscuous mode [ 503.711528][T12711] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 503.723075][T12711] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 503.825405][T12706] device macvlan2 entered promiscuous mode [ 503.832283][T12706] device bond5 entered promiscuous mode [ 503.892268][T12706] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.903343][T12706] device bond5 left promiscuous mode [ 504.011648][T12720] syzkaller0: create flow: hash 169929464 index 1 [ 504.024087][ T4235] syzkaller0: tun_net_xmit 76 [ 504.035547][T12719] syzkaller0: delete flow: hash 169929464 index 1 [ 504.151548][T12723] netlink: 'syz.4.2845': attribute type 13 has an invalid length. [ 504.203012][T12723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.226511][T12723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.235015][T12723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.520709][T12732] netlink: 'syz.4.2847': attribute type 1 has an invalid length. [ 504.581232][T12736] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 504.599913][T12736] bond6: (slave vxcan3): Error -22 calling dev_set_mtu [ 504.875070][T12744] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 504.895150][T12744] bond11: (slave vxcan3): Error -22 calling dev_set_mtu [ 505.023850][T12750] device macvlan3 entered promiscuous mode [ 505.085675][T12750] device bond11 entered promiscuous mode [ 505.091798][T12750] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 505.124400][T12750] device bond11 left promiscuous mode [ 505.198054][T12754] device syzkaller0 entered promiscuous mode [ 505.572480][T12766] device syzkaller0 entered promiscuous mode [ 505.683901][ T4192] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 505.789874][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 505.954143][ T4192] usb 4-1: Using ep0 maxpacket: 16 [ 506.383952][ T4192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.416080][ T4192] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.914695][ T4192] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.924320][ T4192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.932552][ T4192] usb 4-1: Product: syz [ 506.936932][ T4192] usb 4-1: Manufacturer: syz [ 506.941707][ T4192] usb 4-1: SerialNumber: syz [ 507.844201][ T4192] usb 4-1: 0:2 : does not exist [ 507.883243][ T4192] usb 4-1: USB disconnect, device number 8 [ 508.012116][T12808] syzkaller0: create flow: hash 169929464 index 1 [ 508.022084][T12810] overlayfs: failed to clone upperpath [ 508.033958][ T13] syzkaller0: tun_net_xmit 76 [ 508.058303][T12802] syzkaller0: delete flow: hash 169929464 index 1 [ 508.110760][T11657] udevd[11657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.881059][T12832] netlink: 'syz.4.2882': attribute type 25 has an invalid length. [ 508.895172][T12832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2882'. [ 508.910952][T12832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2882'. [ 508.921510][T12832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2882'. [ 508.977790][T12826] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 509.032208][T12826] netlink: 'syz.3.2880': attribute type 3 has an invalid length. [ 509.172718][T12841] netlink: 'syz.4.2885': attribute type 13 has an invalid length. [ 509.193159][T12841] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.210100][T12841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.220584][T12841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.798344][T12870] netlink: 'syz.1.2896': attribute type 25 has an invalid length. [ 509.818291][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2896'. [ 509.846100][T12870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2896'. [ 510.202961][T12882] overlayfs: failed to clone upperpath [ 512.165837][T12904] netlink: 'syz.3.2908': attribute type 3 has an invalid length. [ 513.359691][T12946] netlink: 'syz.0.2923': attribute type 3 has an invalid length. [ 513.371731][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 513.408857][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 513.930198][T12969] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 513.941633][T12969] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 514.276878][ T5269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.306727][T12980] netlink: 'syz.0.2933': attribute type 3 has an invalid length. [ 514.318992][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 514.372272][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2933'. [ 514.464846][ T5269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.548270][ T5269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.640006][T12991] tipc: Enabling of bearer rejected, failed to enable media [ 514.681062][T12971] chnl_net:caif_netlink_parms(): no params data found [ 514.779970][ T5269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.063803][T12971] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.085179][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.119545][T12971] device bridge_slave_0 entered promiscuous mode [ 515.189781][T12971] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.197263][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.205962][T12971] device bridge_slave_1 entered promiscuous mode [ 515.268460][T12971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.314556][T12971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.461417][T12971] team0: Port device team_slave_0 added [ 515.510265][T12971] team0: Port device team_slave_1 added [ 515.573019][T12971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.594123][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.630252][T13040] xt_TPROXY: Can be used only with -p tcp or -p udp [ 515.640419][T12971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.660655][T13040] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 515.679682][T12971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.693671][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.740827][T12971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.760544][T13040] device gretap2 entered promiscuous mode [ 515.869958][T12971] device hsr_slave_0 entered promiscuous mode [ 515.885434][T12971] device hsr_slave_1 entered promiscuous mode [ 515.943809][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 516.076523][ T5269] bond2: (slave gretap1): Releasing active interface [ 516.496715][T13071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.757296][T13071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.908512][T13071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.054376][T13071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.119582][ T5269] device hsr_slave_0 left promiscuous mode [ 517.131638][ T5269] device hsr_slave_1 left promiscuous mode [ 517.169160][ T5269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.193957][ T5269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.211789][ T5269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.235737][ T5269] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.250218][ T5269] device bridge_slave_0 left promiscuous mode [ 517.270797][ T5269] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.376051][ T5269] device veth1_macvtap left promiscuous mode [ 517.389417][ T5269] device veth0_macvtap left promiscuous mode [ 517.409926][ T5269] device veth1_vlan left promiscuous mode [ 517.423599][ T5269] device veth0_vlan left promiscuous mode [ 517.650251][ T5269] bond9 (unregistering): Released all slaves [ 517.667528][ T5269] bond8 (unregistering): Released all slaves [ 517.683325][ T5269] bond7 (unregistering): Released all slaves [ 517.699834][ T5269] bond6 (unregistering): Released all slaves [ 517.715685][ T5269] bond5 (unregistering): Released all slaves [ 517.730963][ T5269] bond4 (unregistering): Released all slaves [ 517.747484][ T5269] bond3 (unregistering): Released all slaves [ 517.762465][ T5269] bond2 (unregistering): Released all slaves [ 517.781786][ T5269] bond1 (unregistering): Released all slaves [ 517.933024][ T5269] team0 (unregistering): Port device team_slave_1 removed [ 517.952977][ T5269] team0 (unregistering): Port device team_slave_0 removed [ 517.968877][ T5269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.996177][ T5269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.036510][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 518.107845][ T5269] bond0 (unregistering): Released all slaves [ 518.349546][T13071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.392432][T13071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.419815][T13088] device syzkaller0 entered promiscuous mode [ 518.458472][T13071] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.473136][T13071] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.582537][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2965'. [ 519.403588][T12971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 519.462127][T12971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 519.557251][T12971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 519.613569][T12971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 519.774743][T13163] device syzkaller0 entered promiscuous mode [ 520.010378][T12971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.067664][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.109125][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.117127][T13096] Bluetooth: hci4: command 0x040f tx timeout [ 520.148329][T12971] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.183040][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.224246][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.253453][ T4820] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.260648][ T4820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.285421][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.318958][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.347644][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.411426][ T4820] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.418587][ T4820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.481310][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 520.512744][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.559961][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.626074][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.657079][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.727737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.754719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.803295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 520.845768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.902594][T12971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.952241][T12971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.995370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.018506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.558083][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.601766][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.635683][T12971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.718481][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 521.771338][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.862470][T12971] device veth0_vlan entered promiscuous mode [ 521.912561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.940716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.990649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.035138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.087028][T12971] device veth1_vlan entered promiscuous mode [ 522.193999][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 522.209197][T12971] device veth0_macvtap entered promiscuous mode [ 522.259371][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 522.285036][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 522.372455][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 522.419829][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.450811][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 522.502702][T12971] device veth1_macvtap entered promiscuous mode [ 523.346856][T12971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.390563][T12971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.431315][T12971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.449347][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.470936][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.512860][T12971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.536486][T12971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.551590][T12971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.562349][T12971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.572643][T12971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.583521][T12971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.605520][T12971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.623540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.642586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.677112][T12971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.696084][T12971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.715999][T12971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.730875][T12971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.763908][T13274] device syzkaller0 entered promiscuous mode [ 523.961836][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.984859][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.052343][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 524.078894][ T5268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.110209][ T5268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.142679][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 524.305263][T13296] netlink: 'syz.4.3008': attribute type 3 has an invalid length. [ 524.364354][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'. [ 525.417415][T13309] chnl_net:caif_netlink_parms(): no params data found [ 525.484631][T13329] netlink: 'syz.4.3017': attribute type 1 has an invalid length. [ 525.555566][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3018'. [ 525.579760][T13329] device macvlan2 entered promiscuous mode [ 525.587469][T13329] device bond7 entered promiscuous mode [ 525.593457][T13329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.604017][T13329] device bond7 left promiscuous mode [ 525.698193][T13341] device syzkaller0 entered promiscuous mode [ 525.716648][T13348] netlink: 'syz.2.3009': attribute type 3 has an invalid length. [ 525.742966][T13293] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 525.787077][T13336] netlink: 'syz.2.3009': attribute type 5 has an invalid length. [ 525.890678][T13353] netlink: 'syz.4.3020': attribute type 25 has an invalid length. [ 525.900410][T13353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3020'. [ 525.927393][T13309] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.941817][T13309] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.950991][T13309] device bridge_slave_0 entered promiscuous mode [ 525.971178][T13309] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.004517][T13309] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.020229][T13309] device bridge_slave_1 entered promiscuous mode [ 526.159293][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3023'. [ 526.281160][T13309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.332369][T13309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.489795][T13309] team0: Port device team_slave_0 added [ 526.595164][T13309] team0: Port device team_slave_1 added [ 526.708947][T13309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.746002][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.932847][ T4235] Bluetooth: hci0: command 0x0409 tx timeout [ 526.933316][T13309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.057853][T13309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.380264][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.817380][T13309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.939062][T13390] device syzkaller0 entered promiscuous mode [ 528.335356][T13309] device hsr_slave_0 entered promiscuous mode [ 528.343190][T13309] device hsr_slave_1 entered promiscuous mode [ 528.364284][T13309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.372093][T13309] Cannot create hsr debugfs directory [ 528.530818][T13403] netlink: 'syz.2.3031': attribute type 25 has an invalid length. [ 528.550581][T13403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3031'. [ 528.754940][ T5269] bond2: (slave gretap1): Releasing active interface [ 529.808320][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 530.974183][ T5269] device hsr_slave_0 left promiscuous mode [ 531.012619][ T5269] device hsr_slave_1 left promiscuous mode [ 531.031980][ T5269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.052805][ T5269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.104863][ T5269] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.141388][ T5269] device bridge_slave_0 left promiscuous mode [ 531.235266][ T5269] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.390864][ T5269] bond11 (unregistering): Released all slaves [ 531.486354][ T5269] bond10 (unregistering): Released all slaves [ 531.532802][ T5269] bond9 (unregistering): Released all slaves [ 531.617679][ T5269] bond8 (unregistering): Released all slaves [ 531.661182][ T5269] bond7 (unregistering): Released all slaves [ 531.718969][ T5269] bond6 (unregistering): Released all slaves [ 531.764234][ T5269] bond5 (unregistering): Released all slaves [ 531.817768][ T5269] bond4 (unregistering): Released all slaves [ 531.861900][ T5269] bond3 (unregistering): Released all slaves [ 531.868365][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 531.952614][T13460] netlink: 'syz.3.3040': attribute type 3 has an invalid length. [ 531.963169][ T5269] bond2 (unregistering): Released all slaves [ 531.983883][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'. [ 532.009990][ T5269] bond1 (unregistering): Released all slaves [ 532.351098][ T5269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.388331][ T5269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.541340][ T5269] bond0 (unregistering): Released all slaves [ 532.606716][T13464] netlink: 'syz.1.3043': attribute type 25 has an invalid length. [ 532.615761][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3043'. [ 532.666427][T13309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.734346][T13309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.857648][T13472] netlink: 'syz.4.3045': attribute type 1 has an invalid length. [ 533.906683][T13476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3045'. [ 533.935941][T13309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.947068][T13491] Bluetooth: hci0: command 0x0419 tx timeout [ 533.955188][T13309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.228194][T13309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.318918][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.331846][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.353990][T13517] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 534.380250][T13309] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.402722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.414849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.450685][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.457927][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.478532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.531855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.557490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.573225][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.580413][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.594909][T13525] netlink: 'syz.4.3055': attribute type 25 has an invalid length. [ 534.630928][T13525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3055'. [ 534.682191][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.842689][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.914055][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.926051][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.935881][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.963943][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.981177][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 535.052929][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 535.095395][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.122551][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.153122][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.214822][T13309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 535.250495][T13540] device syzkaller0 entered promiscuous mode [ 535.596303][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.615974][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.635785][T13309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.735428][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.745325][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.939756][T13309] device veth0_vlan entered promiscuous mode [ 535.993237][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 536.008634][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.062421][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.126155][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.184907][T13309] device veth1_vlan entered promiscuous mode [ 536.280608][T13309] device veth0_macvtap entered promiscuous mode [ 536.348747][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.377588][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 536.402070][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.431564][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.574257][T13562] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 536.617016][T13562] team0 (unregistering): Port device team_slave_0 removed [ 536.682245][T13562] team0 (unregistering): Failed to send options change via netlink (err -105) [ 536.712164][T13562] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 536.748988][T13562] team0 (unregistering): Port device team_slave_1 removed [ 536.813184][T13309] device veth1_macvtap entered promiscuous mode [ 536.857346][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 536.908706][T13567] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.016881][T13568] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 537.048858][T13568] bond4: (slave vxcan3): Error -22 calling dev_set_mtu [ 537.096951][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.120448][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.156886][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.193541][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.233167][T13309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.249904][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.266731][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.276190][T13577] netlink: 'syz.1.3067': attribute type 25 has an invalid length. [ 537.284449][T13577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'. [ 537.307331][T13567] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.364618][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.398576][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.435159][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.462297][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.476164][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.491284][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.502178][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.516816][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.528578][T13309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.538179][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.548485][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.560623][T13309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.572420][T13309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.588043][T13309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.598868][T13309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.621195][T13567] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.686726][T13567] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.799932][T13567] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.823336][T13567] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.838175][T13567] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.861193][T13567] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.960851][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.989583][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.064377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.088627][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.112559][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.124088][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.436566][T13608] netlink: 'syz.4.3077': attribute type 25 has an invalid length. [ 538.493755][T13608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3077'. [ 538.550785][T13609] device gretap1 entered promiscuous mode [ 538.825766][T13615] device macvlan2 entered promiscuous mode [ 538.878241][T13615] device bond8 entered promiscuous mode [ 538.913143][T13615] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 538.966900][T13615] device bond8 left promiscuous mode [ 539.484867][T13628] device syzkaller0 entered promiscuous mode [ 539.516203][T13630] overlayfs: failed to resolve './file1': -2 [ 539.893716][T13644] netlink: 'syz.3.3088': attribute type 25 has an invalid length. [ 539.920420][T13644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3088'. [ 539.941705][T13644] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3088'. [ 540.030299][T13645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.072490][T13647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3089'. [ 540.088906][T13645] device gretap1 entered promiscuous mode [ 540.181711][T13649] device syzkaller0 entered promiscuous mode [ 540.197177][T13655] netlink: 'syz.4.3092': attribute type 3 has an invalid length. [ 540.224266][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 541.335966][T13664] device syzkaller0 entered promiscuous mode [ 541.409850][T13664] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 541.689010][T13676] netlink: 'syz.1.3100': attribute type 25 has an invalid length. [ 541.697030][T13676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3100'. [ 541.732164][T13676] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3100'. [ 541.845868][T13678] device syzkaller0 entered promiscuous mode [ 542.898015][T13691] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 543.059677][T13694] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 543.250221][T13700] tipc: Started in network mode [ 543.274665][T13700] tipc: Node identity d29c1272f198, cluster identity 4711 [ 543.281964][T13700] tipc: Enabled bearer , priority 0 [ 543.353964][T13700] device syzkaller0 entered promiscuous mode [ 544.406257][T13089] tipc: Node number set to 587469426 [ 544.420588][T13699] tipc: Resetting bearer [ 544.481997][T13699] tipc: Disabling bearer [ 544.709093][T13721] device macvlan2 entered promiscuous mode [ 544.728916][T13723] device syzkaller0 entered promiscuous mode [ 546.055863][T13753] netlink: 'syz.4.3123': attribute type 72 has an invalid length. [ 546.211853][T13757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3124'. [ 546.251769][ T5417] syzkaller0: tun_net_xmit 76 [ 546.263448][T13757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3124'. [ 546.277560][ T5417] syzkaller0: tun_net_xmit 48 [ 546.289385][T13736] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 546.296811][T12155] syzkaller0: tun_net_xmit 76 [ 546.309972][T13757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3124'. [ 546.323378][T13736] netlink: 'syz.2.3119': attribute type 3 has an invalid length. [ 548.311396][T13791] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 548.469907][T13794] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 548.508940][T13794] bond5: (slave vxcan3): Error -22 calling dev_set_mtu [ 548.566614][T13791] device macvlan2 entered promiscuous mode [ 548.592062][T13791] device bond5 entered promiscuous mode [ 548.618283][T13791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 548.659397][T13791] device bond5 left promiscuous mode [ 550.289881][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3136'. [ 552.898469][T13855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.477682][T13855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.447406][T13855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.605522][T13855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.777136][T13876] loop0: detected capacity change from 0 to 256 [ 554.784787][T13855] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.962724][T13855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.182813][T13855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.992677][T13855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.564830][T13491] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 557.650509][T13904] netlink: 'syz.1.3164': attribute type 1 has an invalid length. [ 557.803759][T13491] usb 1-1: Using ep0 maxpacket: 16 [ 558.514481][T13905] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 558.564064][T13491] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.589686][T13491] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.633251][T13905] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 558.716391][T13904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3164'. [ 558.744444][T13911] device macvlan2 entered promiscuous mode [ 558.751544][T13911] device bond1 entered promiscuous mode [ 558.758382][T13911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 558.770620][T13911] device bond1 left promiscuous mode [ 558.774987][T13491] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.788642][T13491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.517342][T13491] usb 1-1: Product: syz [ 559.521614][T13491] usb 1-1: Manufacturer: syz [ 559.537799][T13491] usb 1-1: SerialNumber: syz [ 559.700476][T13922] device syzkaller0 entered promiscuous mode [ 559.739606][T13924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 559.772588][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 559.893989][T13491] usb 1-1: 0:2 : does not exist [ 559.916953][T13491] usb 1-1: USB disconnect, device number 21 [ 560.122332][T13932] netlink: 'syz.1.3175': attribute type 3 has an invalid length. [ 560.131254][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3175'. [ 560.176356][T11657] udevd[11657]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.746966][T13964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3182'. [ 562.828064][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.862171][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'. [ 563.404498][T13983] device syzkaller0 entered promiscuous mode [ 563.423711][T13089] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 563.440983][T13981] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 563.460630][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 563.483501][T13985] device gretap2 entered promiscuous mode [ 563.684427][T13089] usb 2-1: Using ep0 maxpacket: 16 [ 563.827576][T13089] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.846084][T13089] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.926206][T13988] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.049638][T13988] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.064023][T13089] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.089444][T13089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.133674][T13089] usb 2-1: Product: syz [ 564.137928][T13089] usb 2-1: Manufacturer: syz [ 564.152946][T13089] usb 2-1: SerialNumber: syz [ 564.159678][T13988] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.242332][T13988] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.370803][T13988] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.389624][T13988] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.405001][T13988] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.419513][T13988] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.493900][T13089] usb 2-1: 0:2 : does not exist [ 564.520408][T13089] usb 2-1: USB disconnect, device number 6 [ 564.680322][T14013] loop4: detected capacity change from 0 to 256 [ 564.764071][T13491] syzkaller0: tun_net_xmit 76 [ 564.788247][T14011] syzkaller0: create flow: hash 169929464 index 1 [ 564.816018][T11657] udevd[11657]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.854885][T14010] syzkaller0: delete flow: hash 169929464 index 1 [ 567.689124][T14025] netlink: 'syz.4.3203': attribute type 3 has an invalid length. [ 568.150465][T14047] loop0: detected capacity change from 0 to 128 [ 568.894026][T14050] netlink: 'syz.4.3210': attribute type 1 has an invalid length. [ 569.055452][T14052] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 569.067170][T14052] bond9: (slave vxcan3): Error -22 calling dev_set_mtu [ 569.105931][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3210'. [ 569.124326][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3210'. [ 569.146610][T14050] device macvlan2 entered promiscuous mode [ 569.205668][T14050] device bond9 entered promiscuous mode [ 569.211655][T14050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 569.227563][T14050] device bond9 left promiscuous mode [ 569.968813][T14060] loop0: detected capacity change from 0 to 128 [ 572.944908][T14081] loop1: detected capacity change from 0 to 128 [ 574.738375][T14094] loop1: detected capacity change from 0 to 512 [ 574.757627][T14093] device syzkaller0 entered promiscuous mode [ 574.837681][T14094] EXT4-fs (loop1): Test dummy encryption mode enabled [ 574.876116][T14094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 574.916055][T14094] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 574.970907][T14094] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.3221: bad orphan inode 131083 [ 575.012654][T14094] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 575.153950][T14103] device syzkaller0 entered promiscuous mode [ 575.185067][T14105] loop3: detected capacity change from 0 to 512 [ 575.457196][T14105] EXT4-fs (loop3): Test dummy encryption mode enabled [ 575.473461][T14105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 575.683085][T14105] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.3226: bad orphan inode 131083 [ 575.925977][T14105] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 576.297921][T13089] Bluetooth: hci3: command 0x0406 tx timeout [ 576.902990][T14121] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 578.115087][T14137] loop3: detected capacity change from 0 to 128 [ 578.870561][T14139] loop1: detected capacity change from 0 to 256 [ 579.925343][T14147] device syzkaller0 entered promiscuous mode [ 581.021439][T14142] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 581.125239][T14142] netlink: 'syz.4.3234': attribute type 3 has an invalid length. [ 581.153803][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 581.711314][T14168] loop1: detected capacity change from 0 to 128 [ 583.989199][T14180] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.193244][T14188] loop1: detected capacity change from 0 to 128 [ 584.480891][T14180] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.580050][T14180] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.642190][T14180] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.787344][T14180] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.819698][T14180] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.862576][T14180] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.927499][T14180] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.162190][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3249'. [ 585.194621][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3249'. [ 585.224922][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3249'. [ 585.459855][T14208] loop1: detected capacity change from 0 to 512 [ 585.560788][T14208] EXT4-fs (loop1): Test dummy encryption mode enabled [ 585.587900][T14208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 585.675207][T14212] loop3: detected capacity change from 0 to 128 [ 586.487598][T14208] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.3254: bad orphan inode 131083 [ 586.545342][T14217] loop0: detected capacity change from 0 to 512 [ 586.552412][T14208] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 586.813434][T14217] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 586.843967][T14217] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.007258][T14224] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.3254: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 588.050555][T14232] device syzkaller0 entered promiscuous mode [ 588.234777][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'. [ 590.108134][T14247] device syzkaller0 entered promiscuous mode [ 590.582236][T14256] loop0: detected capacity change from 0 to 128 [ 593.144613][T14271] loop4: detected capacity change from 0 to 512 [ 593.172463][T14271] EXT4-fs (loop4): Test dummy encryption mode enabled [ 593.333287][T14271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 593.553854][T14271] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3272: bad orphan inode 131083 [ 593.601537][T14271] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 594.090315][T14281] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.3272: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 594.973220][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 596.139739][T14296] loop1: detected capacity change from 0 to 512 [ 596.221653][T14296] EXT4-fs (loop1): Test dummy encryption mode enabled [ 596.243845][T14296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 596.293196][T14296] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.3279: bad orphan inode 131083 [ 596.322930][T14296] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 596.729404][T14310] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.3279: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 598.643149][T14299] netlink: 'syz.4.3280': attribute type 3 has an invalid length. [ 598.680958][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3280'. [ 598.770234][T14321] netlink: 'syz.1.3286': attribute type 25 has an invalid length. [ 598.800795][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3286'. [ 598.841087][T14321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3286'. [ 598.872663][T14321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3286'. [ 599.087973][T14324] device syzkaller0 entered promiscuous mode [ 599.238134][T14328] loop0: detected capacity change from 0 to 256 [ 599.542819][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3290'. [ 600.186590][ T7712] bond0: (slave syz_tun): Releasing backup interface [ 602.351312][ T4325] Bluetooth: hci1: command 0x0409 tx timeout [ 602.804349][T14347] chnl_net:caif_netlink_parms(): no params data found [ 602.946925][T14367] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.004262][T14367] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3300'. [ 603.060342][T14372] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.090390][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.190705][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.199044][T14347] device bridge_slave_0 entered promiscuous mode [ 603.207987][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.216040][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.224881][T14347] device bridge_slave_1 entered promiscuous mode [ 603.354619][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.406238][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.510546][T14347] team0: Port device team_slave_0 added [ 603.538617][T14347] team0: Port device team_slave_1 added [ 603.576086][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.588769][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.614790][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.625131][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.637602][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.644623][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.670624][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.718419][T14372] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.828549][T14347] device hsr_slave_0 entered promiscuous mode [ 603.845236][T14347] device hsr_slave_1 entered promiscuous mode [ 603.883802][T14347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.911372][T14347] Cannot create hsr debugfs directory [ 603.923565][T14372] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.061548][T14372] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.179289][T14372] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.194521][T14372] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.213158][T14372] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.235640][T14372] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.250931][T14395] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 604.403067][T14347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.538363][T14407] loop1: detected capacity change from 0 to 128 [ 604.567383][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 605.189908][T14400] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 605.274168][T14400] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 605.377980][T14406] device macvlan2 entered promiscuous mode [ 605.395126][T14406] device bond1 entered promiscuous mode [ 605.401169][T14406] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.435939][T14406] device bond1 left promiscuous mode [ 605.501662][T14347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.589729][T14347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.790977][T14347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.927503][T14421] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.074074][T14421] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.189040][T14421] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.051316][T14429] netlink: 'syz.4.3310': attribute type 3 has an invalid length. [ 607.075672][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3310'. [ 607.090173][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 607.108626][T14421] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.185742][ T4820] bond1: (slave gretap1): Releasing active interface [ 607.529368][ T4820] device hsr_slave_0 left promiscuous mode [ 607.536661][ T4820] device hsr_slave_1 left promiscuous mode [ 607.543337][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.552435][ T4820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.564361][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.574175][ T4820] device bridge_slave_0 left promiscuous mode [ 607.580488][ T4820] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.596358][ T4820] device veth1_macvtap left promiscuous mode [ 607.602634][ T4820] device veth0_macvtap left promiscuous mode [ 607.609249][ T4820] device veth1_vlan left promiscuous mode [ 607.616702][ T4820] device veth0_vlan left promiscuous mode [ 607.744742][ T4820] bond5 (unregistering): Released all slaves [ 607.761324][ T4820] bond4 (unregistering): Released all slaves [ 607.776269][ T4820] bond3 (unregistering): Released all slaves [ 607.790844][ T4820] bond2 (unregistering): Released all slaves [ 607.805476][ T4820] bond1 (unregistering): Released all slaves [ 607.932418][ T4820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.959314][ T4820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.983454][ T4820] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 607.996305][T14444] netlink: 'syz.0.3318': attribute type 3 has an invalid length. [ 608.004327][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3318'. [ 608.102077][ T4820] bond0 (unregistering): Released all slaves [ 609.144235][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 614.850801][T14421] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.863119][T14421] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.876780][T14421] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.890428][T14421] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.900470][T14347] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 614.912326][T14347] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 614.920780][T14347] CPU: 0 PID: 14347 Comm: syz-executor Not tainted syzkaller #0 [ 614.928448][T14347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 614.938535][T14347] RIP: 0010:netlink_broadcast_filtered+0x50/0x1170 [ 614.945073][T14347] Code: 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 b8 19 5d f9 4c 89 b4 24 88 00 00 00 49 83 c6 30 e8 e7 15 a0 01 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 71 25 a2 f9 4c 8b ac 24 88 00 00 [ 614.964711][T14347] RSP: 0018:ffffc90003e9f888 EFLAGS: 00010206 [ 614.970926][T14347] RAX: 0000000000000006 RBX: ffff88805ff37a00 RCX: ffff88801d2c5940 [ 614.978932][T14347] RDX: 0000000000000000 RSI: ffff88805ff37a00 RDI: 0000000000000000 [ 614.986938][T14347] RBP: 0000000000000000 R08: 0000000000000cc0 R09: 0000000000000000 [ 614.995661][T14347] R10: dffffc0000000000 R11: ffffed100fac1819 R12: dffffc0000000000 [ 615.003662][T14347] R13: ffff888079426068 R14: 0000000000000030 R15: 0000000000000004 [ 615.011658][T14347] FS: 000055558f2a4500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 615.020640][T14347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.027253][T14347] CR2: 000055bb36182660 CR3: 0000000029403000 CR4: 00000000003506f0 [ 615.035260][T14347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 615.043580][T14347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 615.051590][T14347] Call Trace: [ 615.054894][T14347] [ 615.057853][T14347] ? devlink_nl_cmd_trap_policer_set_doit+0x790/0x790 [ 615.064785][T14347] netlink_broadcast+0x33/0x40 [ 615.069589][T14347] devlink_unregister+0x142/0x1d0 [ 615.074647][T14347] nsim_dev_remove+0xdf/0x100 [ 615.079355][T14347] ? nsim_bus_probe+0x20/0x20 [ 615.084066][T14347] device_release_driver_internal+0x475/0x750 [ 615.090164][T14347] bus_remove_device+0x2e2/0x400 [ 615.095132][T14347] device_del+0x6af/0xaf0 [ 615.099494][T14347] ? kill_device+0x160/0x160 [ 615.104122][T14347] device_unregister+0x1c/0xc0 [ 615.108923][T14347] del_device_store+0x296/0x3a0 [ 615.113807][T14347] ? del_port_store+0x1f0/0x1f0 [ 615.118693][T14347] ? sysfs_kf_write+0x183/0x2a0 [ 615.123579][T14347] ? sysfs_kf_read+0x310/0x310 [ 615.128368][T14347] kernfs_fop_write_iter+0x379/0x4c0 [ 615.133694][T14347] vfs_write+0x745/0xd60 [ 615.137978][T14347] ? file_end_write+0x250/0x250 [ 615.142864][T14347] ? __context_tracking_exit+0x4c/0x80 [ 615.148403][T14347] ? __fdget_pos+0x2c6/0x370 [ 615.153377][T14347] ksys_write+0x152/0x260 [ 615.157844][T14347] ? __ia32_sys_read+0x80/0x80 [ 615.162645][T14347] ? lockdep_hardirqs_on+0x94/0x140 [ 615.167879][T14347] do_syscall_64+0x4c/0xa0 [ 615.172333][T14347] ? clear_bhb_loop+0x30/0x80 [ 615.177041][T14347] ? clear_bhb_loop+0x30/0x80 [ 615.181754][T14347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 615.187685][T14347] RIP: 0033:0x7f53b316884e [ 615.192137][T14347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.212048][T14347] RSP: 002b:00007ffedab64c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 615.220733][T14347] RAX: ffffffffffffffda RBX: 000055558f2a4500 RCX: 00007f53b316884e [ 615.228828][T14347] RDX: 0000000000000001 RSI: 00007ffedab64cd0 RDI: 0000000000000005 [ 615.237470][T14347] RBP: 00007f53b323f0e6 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 615.245558][T14347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.253562][T14347] R13: 00007ffedab64cd0 R14: 00007f53b3f50620 R15: 0000000000000003 [ 615.261574][T14347] [ 615.264630][T14347] Modules linked in: [ 615.299287][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3324'. [ 615.309388][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3324'. [ 615.320740][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3324'. [ 615.438111][T14347] ---[ end trace dbfb30af6090f2ac ]--- [ 615.458796][T14347] RIP: 0010:netlink_broadcast_filtered+0x50/0x1170 [ 615.467842][T14347] Code: 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 b8 19 5d f9 4c 89 b4 24 88 00 00 00 49 83 c6 30 e8 e7 15 a0 01 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 71 25 a2 f9 4c 8b ac 24 88 00 00 [ 615.552130][T14347] RSP: 0018:ffffc90003e9f888 EFLAGS: 00010206 [ 615.593663][T14347] RAX: 0000000000000006 RBX: ffff88805ff37a00 RCX: ffff88801d2c5940 [ 615.601697][T14347] RDX: 0000000000000000 RSI: ffff88805ff37a00 RDI: 0000000000000000 [ 615.659997][T14347] RBP: 0000000000000000 R08: 0000000000000cc0 R09: 0000000000000000 [ 615.687084][T14347] R10: dffffc0000000000 R11: ffffed100fac1819 R12: dffffc0000000000 [ 615.721379][T14347] R13: ffff888079426068 R14: 0000000000000030 R15: 0000000000000004 [ 615.736515][T14347] FS: 000055558f2a4500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 615.745813][T14347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.752455][T14347] CR2: 000055bb7303e168 CR3: 0000000029403000 CR4: 00000000003506e0 [ 615.762846][T14347] DR0: 0000000000000000 DR1: 0000000000009000 DR2: 0000000000000000 [ 615.771427][T14347] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 615.779699][T14347] Kernel panic - not syncing: Fatal exception [ 615.786176][T14347] Kernel Offset: disabled [ 615.790515][T14347] Rebooting in 86400 seconds..