last executing test programs: 14.435797691s ago: executing program 2 (id=2481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x7, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240088a5}, 0x4028040) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.076928191s ago: executing program 2 (id=2486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xb}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.89575626s ago: executing program 4 (id=2487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001cc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e5}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r2, 0x19}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="10", 0x1}], 0x1}, 0x0) 8.275765732s ago: executing program 4 (id=2490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8.252893753s ago: executing program 1 (id=2491): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/173, 0xad}], 0x1}, 0x8}], 0x1, 0x40000000, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 8.242872334s ago: executing program 3 (id=2492): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYBLOB="9d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) clock_gettime(0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9c5054a5af2f81d706d451f728eeeb", 0xf}, {&(0x7f0000000240)="a356f58980a4d1bc340b4e2fde9103daf31d759e26dc8c7daf932a29deb282c831f5ac7c221bd877f910efe1305661a004d56dcdae60bf8c5afcdf94e242116d01754e2c8bf813abff4130fbf20f90d34ec6312e92c1f0702bdc590d16a0e93b9a7cb6f4a57018173bdc851f1a55fca8ff825e03bdabad1c447a88abbcfafe7b8c76a6e71a03f4abbe22454a88599438b9c3740cdbd09e74715e6a6b640fd621b67df416dcf324fe233f3e043b", 0xad}, {&(0x7f0000000340)="c046641ca8108ae11f406a3f6dd523a4b312f92777b24ad78aab6c826de6", 0x1e}, {&(0x7f00000006c0)="9416acfde1a73a7a1efd2d18429095ae9d31dc914cd671a059a0f0db651179fbae4aa18c50c09f8700572e6a6cda96af26365f9744b5201fa08a9e16d0469506f1db7026f3a7d358c5749daf2cdc46a1693a54bb8d20ced0d7d3bd01b7cac380c2d91ef243c4b3dbfa64310ffed013954d4640f6965ae4f7d46e5e7127ad4104b8fc819e6fc5c56d2b938e8a86074b05865b21921c1c8c1e1578bcbad5ccea0e1b857ab2cd86ccad22afda7a7a9dd6c9e589e3debe39ca7999bf906911642c404cd3a1d767cfd007bfc250c8bd7a57e1531f01546ba6f19ec41850a427f994c92e36e4b47883341c819a88411e0324783507d778b49d1ae87b2d2e28ce7569378369e4b6fd78fc7c166d9dbd67f7a704e31962c543f3d1d3c2516f4b24f295311bd0c7ce0add3eb2ef21fd62c048a8be7ae52cda2a209d70592c3d996f34484e4f2d3cd04eb0b09a349fcbd8d243441f6cdd5c693c684abff434d0544a5089283a13b639d274a12d8ab9d32307778e00f35fe7d5820dd4502b4e0ae13f7fa8196a9e3e69e5828edea978c553faa85212c0ed08d0ce4e56c9471eb00328ace3d88336ef4cbcfbcf0fe6466d6937f8e8c28615966993fedd2e4e2684484829fe95553f85c273a17cdbe69b35de969d5c40ec4c15d1d259de60da0d8881f6503c48527efc5b618246dbd95e950798cc6aade069126ad392d831c4801ce645dcafd29579825f247197196407a4d410e9785ee3418b2a0186d190b4d03111ca42c845795478cd30a802a7f479ce646101e6b9303f1006d2458a2a494552794cdf09ef22968e3d650b3fdeda989a12bd14e85b4876a4ef1a253b5c07b70db2a8daedd93618db3d1177e368bc214c13e5dfff275a16a5030f4415fbcd7b95393480733c4b95ec38962194d4a75ab876bbd62fcf50ca35831e05a12f69488f959990ae43ed3114fb77a1a71c3ee4cedde06f4e4d12d7f17c6d8acba7e3a4472534fa78aa9ca507d92d47d9d792803683195cbe4bdc95361c1c5898514a440c5c8cd7a1153d6eea859798c60af468980e894156c3a374111878eea05b5395196bd383db85325b1bdff1a040fae19ffb97841ca5955b78584199eeea31d8f471b6383d2ac5328419f3f9d18d90530598ee8c22241b647aa8e3732146c6c0451df55ef5ca14f014f3888907610cc5d186717d71573ff7fa0f42da7ff4bb0c08c16888274b6bc42c2da16717a151c9a47574a950ded1f298de1e30e24aa6ba2c6d71057a111af722e5afe04ef6041dcbdd5581dc3fed22776f17583491ed01e5f427ab03247efc8c9a8433cea0d6ce342062d9deaf1b20499a5064c2609c510e38182e69988861c811c4f00eb75560b7c74e9cc2fb6c0a837a89e7029705259d617503c17629ea1aff1c9eab3642c90f980705dee96202453eb9d4ee620e29a46cc1bb6d19d9f992c0cd1347fe87a2c0ff5163bb45619ac9c4afddcece8e2165e744c082b1fbd4e13bcce215cad1cd0dd30753947d16114856eb4dd832679ddc878e3fc86a769a60d60a66b9fc1f25554cb5c2c8a2ab7e027ec71b6239268ce1b8cc4d2d43ecb9795a33b3729859c2b0dcd25101852ead50562e2738a85621fab640b7719658256b650ec6338a3f1f8890ce72eb3441590828b8f56a783f496f442a348bcc6184b0b5d42398126b869bf8b13b935e6cf5a07cb5a96f2ba78edbe6c93cc7b7e634fc87acc8482b1dbd9e211df82d90f29e06cc2008050a85d0f5f0fbcf10ff4601f6bc11ab7bd63e5fdd131c4b3290c6f3209e1d2240daa08a59a53298b322d7931641b65b7b0ba0f3f7824c3009ba2bb1ea0e2d58dfeee12beae6334cdb66e206a2a2f2f7b7a5610e58e901a17ecd8e910bfd58247b661415da6a60dff4a9ba85fccdee8414e226d036ea10cf968b0deaac794ef906154fb53ec020389e4dd5069ae270675b5d1ac688793ce8f2c29f6511baf3229ea3704d3466150f7bc6b8b3c6434f00b4c8fb5bb9e94262db8dfad2ce4fd82f0df94a853c7eeec33dff24554d90b2c057773d11d0e0c29b8ccac35c93f3905417531e74480480d887ff23992341e3cc4bc0f44c045090191b98a97e121ab78e12eee5492a0f27980948881584b6ac6eff0a2751ae4b72d80efe22be710d14453d69d8245305be2070b18c538da4d1ecc217a9d4abbb7f1047ce42202e67a678bb175caf2c0fb0b6c8921bf4c2afff3c10344f98f33882f647487066812b8af48ebdcafe70ceecc217a8b8a990279c045abe3024aee16f3ec856ac00c4b6a1dde6220bcb3cf7a67de97085a0ab798c95f78db810b48f23dc7effe89fcb4ac03e35ea7f80aecd39be9aee9680a0dd9d09ec6f717e213bb9aa8c92d8000ab29128331c66d7e247290acc51285ba9d9b5922b2d1ea0d1f241b766e97d27d414ab15f97e031fc99c2eefdf78833cb6c7a702ed7016ce511a55815eb5ac73ef52691b74a2e2ef02440802b073be15e420e1eb19510e6ddaf98212cc4aa2903d3cac17e73f549796d980fda47082d2744530ac58a8f0731c0540517fdda62dcf434e41176aa585bb75f846c72e023ea7da2feea3d9d5fad14907dd46bb3022c0e3b7054795054589ee0893f58e49672292d706cbcd1da8128d1a1e52de9bd847ad4adcdffa4989cae0792360a0eac3427a111de88715024d8927b037152170afd8d16b84d8b9a2f6e8dbff4360068a42bd4178e397f9d769af6eb88c287fa27ef801197001854be8811bae544718d4cef836a50a59ec9cc2f217bf96da3cd4d5f7d2bca87be25d60f22bdf043cf01809447b077214448c98068420b17edd94f7aae946a65ebe4a356629d147166973b73f531ee470fd9cd944a6e38fab468d65bd4feee463d64becc9bdc012f09fef21f0fc038e2450247858750dc868cc16c6049a4800771d38779cddc851a376ca6fb20f99020cb6a9d54b8f13df71ad14595f6942dd8823000af8e21026cfd0b5d96d52b70f6fe7b491fcc71691184dba7537d8146fa3f170add1ad8acfdf32297c199a0cf389cff44549f0c1f1a3c0182ae8f3cd3445364112fe3ff042530ae41fae15e1a0d371acdb79de2347b4c788b6ccb1cf35ae9569a65671856044d20fca1afd5cd7a026332c57c0e4050047dc8a70d61dc7162529936970012f1c7be74e618cc949608c97ec84cfa9dfeddbbb62c982b1f1f195f259d2c41e0e48fe7e7295b4d6b517dcdf86ef10b5641f1774264867863a4a47e0e3024f7335b806ef661a507b1b0303a83e2d8023aa90177403cd05f68192441ac1a64754854ba583dd6e0787b916466e53cd1d3c7dfd17651cd8ce843be4fbb9eedd4e3f869e8691353a4a8294ebf6fdf98c0bae5bc85f0ef1858439f664067d8d11fa6c8613ebc100a6e331bd60170d76ee232d67760c016cca5ab177990e8b6a3d90b7f0f4e268f25ad797a60a3f078b19dc86ac7375cac8d7b45c77a618fb9ae30cd4b2911be91b8ed27d9c5256a8f6c074c463fc1c19bd14f7dc57202af013a67a2184efc38a569c8dbea4dd1973b3bb19a716518c2ac020cd10a20203837fc884120ae5781d78a3426648ebc9ffa1c88a50478eeb7c7774ae24d73b62c461a19d64fd7cf4e66c5ced72e027e70ad3fbc2e64e718cdce638d6f8f7fe60649b690c85609aa821b87ed4770bc61edc2046c7f9d263e09c2ec7b4aee678617bd57c9f6553e771cfa56ff6b2f43980d4fd95c1ddeacd2beb4f84292fe56b37e2c7b64d1d9efab780ffee89125e47887ed5031fc2d4532ab1c69aeee4a9da998ea954b674d1de407bb47c645cbd2d43e4d7f9516f299d093cc85c9cb420ca0a4aff6d2a02557d284e381a8ec3cb5e5baaf762f99eecff4b9120f3a242208dc30479a44b44a3952599335721eb6527156f3904686cc44407ee724a69c203da1f2b71f2ac5bfb2135abd9d5016ee414aedefc5eebccc6d26e2fea2a727714de546f55124deb951a9db59774d086c5fd6e8f1c2185a26544587f564279b58805507b7343fcf102ca59db3e7302205983954ce96a13eb733c550aeb3b30c669a1b878aee465d642d1e15232e29d69c5c258e76ae53203856a5b97170cf531fd3c1964d74d08f696f0bc92069f004532e914751047daf7aeb66fba4d04e50ba5a26149241d57a40d79d6081fce22a8faef48ec5cc7903472e8445d5383009f41b9e631c22538d80db02f3e7713de30a016c703d70a1c85cab58c1ad4bc548527d2dbe9bcf1ce80b1d7c14c3704255fa2379b39f39cd2b3bbaf9792648e08988474b27fadcabc5861a7adfa484ae110cd43e1ab444d7958cf71ecfd838d327915fd0f49c109329d5de2bc89bdbca70fca6b864b2fcad7b1e7b2335ac98e5128a6efee82369742099129cfaf1ce4011e93a17803378ceb13428ef419fb0b84a4225c0615156d7d1ed1eb59cdad2da278b133a059403935ac642d4e58c7e00675a42887b989084a30807a50c8f4057fd658e546ed609933576822cca3cbdd98f743924eafde1ccd3a9157d72839227cf1d1c47f818fec162907ed1604d0d37c09205c6b1d69fb2ce41ce3b7e9cc4a36f4d9c28ee4c6830322a5399c7ec3a042c49cd8f98fba2428bb8082358b085dcfb2ccb050b1ecdbb3a2d3dc8988e725e8ce3a3bc6448eaa11a391fb2b4c0ec9ebc6c6c8588979fe39e5f66ae37556e5ff01dad78de1196f4fced6f7c024181151fdd870a707abbba71f9da973dc7d60fec89d8d7000ef7a0f7a470c4b67b1ea79b74fbc5f28869f04074e991741fa85a705f8b2cce9f6e3e8e734783aceeefd7a68b8d13b0374013943f03f1b44f820a4b65706a3f66c8e24cac602e2e5cc9766cb7213b8a4da0eaab074d9f9a70b6ebb07dba961b9315d8b3621c1fe0a16cdfdf27ad9df371af2084077e661c26369e8e592893d2e66f4c258fbe94048e76d3d42cb7844d6039cffb14e777bcff6c27b3331f3276632cf7a991361cca21ec3e674adb04d09d6941cd771ef3c838fee6975552dfa75ce437fc11caae5a9560acde3be8228220c1ede838bd5587fcf0e692c80adf91aafb1d6479525a95b883516a018a2db64ec35f41983621294e06c9779d0b45963f9793b59f75ff5aae1a2bfa1ff38c7639dc12dca2ade9fb0f5ba83fe2b023c0cf242f865aefb94608cdb957449d95d11376f3cb8582076bd5c21769066c81afc0ca79f9625acc8d8009f2f6e22dd51d2c0433f0b7cfa5cab741ec00dbb6195ef3b1c183cd94489168b0c8c4ea954ad98461d70cec416dbf9169a72204f81eff4a49710da2bd0b40fef06e29a1933e37e679ba1268649410729ede2e26b5332cdde4ecc7f2c9f4070d57598d31977e087ff6627e3bce004977fb6ba2907fb5f2c26a4cfae2e491776a50be03a39d4af8a61e56d87ae32afb57dd313ee4029a0921e3803fa6743bf25c9060342ef0e92c09eb2d37c8131a46cfccaf9b2781231968914f0749bb9ed1bf2b01e632a2165453eac1c0f3580e7ddcfca71faddc67d550dae65bfc6562bad79e08149c6848bb50b2b27eecf9271eb468bdd704cd6bb7680863e12b018448ecfae1e4f000dcfc6b7b4c63c4098894538ff67ccfc92de414dd0be8618c8610e96edd50fca1a891b8e402367d6f185839b33128401753ea37b2f04a547ffe5c9f691032bf18a8463f5dedb00194715ac3094bd39a1bc294f0c8c666828682e0e9f90b955f623f80cdc89fe415926474bde917d747d7a3112e48b9c49a5baeb1b657ca93503e6337a1e2ee44695900b7be08ef172c47603157f243e6870ee7b", 0x1000}], 0x4}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x800, @mcast2, 0x3}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000480)="184be7dd4dd3c22fe23fa762c51b082ba5eb6264d83c7d095b25749124973489be6d38ba1b2a3ee79dae2f7d05e98974ec32f0951ed5fabce20d01f6c09e3b67e273bd1479eefa205c2bf612283ba7ac74a0c174c2ad25fb6627ef035a71c840f30dbe9b35426be8f8a06705c3f67b037b9ae965b77956c919ec011207267b5e87a5d2636a52125f31a85b5e5f877513", 0x90}, {&(0x7f0000000540)="c5bdbc41ea6d216af30c86900a947500ace21f154c5f02df17f28fea934c97e2638514a22c5f9e74b68b123429f5c5d885e23cd3586be026c82a12772f5559616080b302b6d79cf8b6f2dad8122e08101749a0fb82c3290ba5a7f46b", 0x5c}, {&(0x7f00000016c0)="c4b2b2f6a484059d81339951def3fb9d16f1b253e82c801953ac169d742ab8fc08c7e2e55379ea0b46a3c2f242acfa541aab7c4fe289e9965e4940aff91af6451c6b6ad0a711fa8cee59", 0x4a}, {&(0x7f00000005c0)="c277e799335444", 0x7}, {&(0x7f0000001740)="25fc1088813ded3a5ef4eeb8e5eac5190fa30844bec5bb9ce93c7b62dd9fd51aca5210699faf755d02433f8212123559f27d2e8218042a683b603f9065f3374a62b3859dbc32a686757565d455989d3da1f43219d507fc52ca97750a4c8bef09bc2277c3d33e44d0d1b59936285814b42cff72f534ddba51d3b0abc494aa90026f688e40a7a1744d5c9bc90b66d7066aefe19c07ce8ea633faa060454aaa93b9028e833a55d0b6ed2e22572cf6d08f3ffccac7cff601f71689732ce0c195343e", 0xc0}, {&(0x7f0000001800)="2ba52e68f13cf73c38fe3179aaf496cddd288200c601a1c2b2fd4ad023200e2dd63d10709141e9aab7f730717b5c5ad54c552f1d585fb60be701f26227daf37259c2c625adc95a7c460b2be43af55b12854c125539213c42c27b15cc04c07169244ce96ba7ff4d15b7dfe7fbfb8e5c77a79e286de396bd5e69c1fab0e4896f83170c8df15c58d07f158b21d6444c597324d923141a438aee53ce76f4c833b41c6ec1827c9c", 0xa5}], 0x6, &(0x7f0000001f00)=ANY=[@ANYBLOB="1400000000000000290000ff2207310d38003400"/30], 0x18}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="31528e6cebdca11051b51b31c269713759553a", 0x13}, {&(0x7f00000019c0)="1b5dc47c03816fb5bb06281920bf061b1dc509aec54e40237de1468e90c05e1c873517b5", 0x24}, {&(0x7f0000001a00)="0acb5f642beddb047742422f921e13bd56b9894e8ff9ecf84183eef4d2b2121fb85fcf232dcac2d9780b569c59d0bdc0e05558d75927622176b4b3216d1bd60008ae4f3f79a159324ab279f39a860201cab70650681c1169018b85f800a90d8cc438b5c1c3c3bb0ccf2e37acfd8ea171b0f977ca5142e91e2716f5ffd74b64345b66f9e4bfc2abc9659968d0915ad79d26a0b81fb30001272e10", 0x9a}, {&(0x7f0000001ac0)="d2e28d1a1fce04d8f58c25c3b48ce2fb415ce2f561c65e730e3243d33d9490046c3cf8da337d1e65d98ea136c20661bd69092a1b9802703495cdeffeee", 0x3d}, {&(0x7f0000001b00)="334ab4db6d9b9f94b67ac9cd1753a82730881f2ce8628c9e8e85945cb4ba03aba3f868162b7933102505cbaba8773fd4d79cba6e48103035e087112dcf57f75c919109f1", 0x44}, {&(0x7f0000001b80)="213fa5b18ceb14f0643b4152c759d31c7fc994cd405012c08c3b6dc58e6efc8cd1fa88a86b20486d24fb9f1155d8643c6d9cf986291a42b9f0654dd1f7ccaf1dd9db49f22a96c0c453944e3832f2a0a7feba00f40a01a7e1a0945b7f9a33fa3eccf2049b1b71e61820e6793a716cd78a25a86d62c1950ae42deb2f24f355be107f6a0be8282173facf30453c50e1447cce3271d230ef98c7d75653e12e07b60080af50f5bee909985176d66145c39f241eb2ee46801ebd01f01ae0b1c84406e606f2f437b0f89fbaf4b4b661c0685ff7f864358f55efee97f480", 0xda}, {&(0x7f0000001c80)="50fc7cd0287dd963d2a983375fbf662998a716474e7e28fbf39b8e3895548546817a62bea2cb63b33e210c128d54fa7b288dc9155aa8c9cdeab091f4e5abf60dcd82ed3d3fd0afeb065ac186db7b914270b48a1c9259a42fa038fe911b96a9ddb53d902a49a170c86b4ad5d70322a48b811a3e17c6d48a75198b937665b306980215ce71c19479ff619e01b25e543bd4f20a54662f147b50ce935334f7e781e8c1ab512c7fdbb7153b88a56a2fecfadcf9a5262d90d40d74ae1973a3dcbd097405a3083f893f4100679b965578c804dba6d2084269cd780bb4e9e1e4b5aa32c73fa75ee7c97b53e0e9ee4f5cc7b707518164bae608192247", 0xf8}, {&(0x7f0000001d80)="8dd742d1808f6d37ed8489f943e2d2e9d85062990ebfaf708b036c5116f763adf073589a99a6b70cefd6f0b5ea025459f841bf701d49f2aff88c92c95289a9653f5d422f6816c82180902476e12092d7c17d04d8de6f5a207bc2d32c64a60905647e4492bcbba4c4af225d054da6df0cd62dd504f2ede57371b15bce402062a667690d14d8ff5c3b7ebc7861768909f0cfb8b87b606b1f9598058fd5ca12222b3c1f23e3aad17fdc4eeed7809b993bb84ed3083d594dfe19ed260504d258f4780ab801e4c68b177f017783ffa435736d07f215f0fc14ada1c3407d4a42", 0xdd}], 0x8, &(0x7f0000002200)=[@dstopts={{0x30, 0x29, 0x37, {0x16, 0x3, '\x00', [@enc_lim, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x84, 0x6, 0x2, 0x6, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x73}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd257}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @tclass={{0x14}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x16, 0x14, '\x00', [@generic={0x3b, 0x87, "58642afd28dbec2a49f99b36ff0d2a406423e56d2b63d1ec132e4b58f8e93518a12ab21c866d4fa4153c150e0c622c7534bb64883c65c971962686464b261afdd57aafc648e2595cd468b57adb24d3a806b8b066545e5b9c6ea8930621d497cdd3e47ce5f296de28628e96ce701d2dcb7c2d5c8c65e0c92e46d502f81830c8e9d3bbf8adf311e2"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x44fe}, @ra={0x5, 0x2, 0x6f}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0xfff}]}}}], 0x1d8}}], 0x3, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 8.187702927s ago: executing program 2 (id=2493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 8.077981812s ago: executing program 0 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001200ffff2cbd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="29110100b2130000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 8.026644564s ago: executing program 4 (id=2495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0x7, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.005563276s ago: executing program 1 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x7, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240088a5}, 0x4028040) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.838958414s ago: executing program 0 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r10, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 6.633578885s ago: executing program 3 (id=2498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ffaa1e0000000000711095200b0000000000000000000100"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200000, 0x140) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000002fc0)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, &(0x7f00000030c0)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r5, 0x1, 0xb, &(0x7f0000000040)=""/68, &(0x7f00000001c0)=0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 5.423782026s ago: executing program 3 (id=2499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0xa}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x10000000, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 4.438025226s ago: executing program 2 (id=2500): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001cc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r2, 0x19}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="10", 0x1}], 0x1}, 0x0) 4.408388587s ago: executing program 0 (id=2501): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x10001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xab, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 4.331238331s ago: executing program 0 (id=2502): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @empty}}}}) 4.228697126s ago: executing program 4 (id=2503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4624, @local}}, 0x0, 0x0, 0x4f, 0x0, "023d9f9842360fd6efdad82a610a0c4996ec3f91ef1e30c2a7f7f9cdf978cefc34f4d0a02ca0585556b03580f09a14fe5fa56785ae9fda917b42837b6ad2191f8d3618ba00"}, 0xd8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.200411238s ago: executing program 1 (id=2504): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60000100, 0x0) 4.027826027s ago: executing program 1 (id=2505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xb}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000e0}, 0x4890) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.027533547s ago: executing program 4 (id=2506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.7866887s ago: executing program 0 (id=2507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001200ffff2cbd7000fbdbdfcf8ca4", @ANYRES32=0x0, @ANYBLOB="29110100b2130000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 1.680642715s ago: executing program 0 (id=2508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00602fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.652075067s ago: executing program 3 (id=2509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ffaa1e0000000000711095200b0000000000000000000100"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200000, 0x140) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000002fc0)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, &(0x7f00000030c0)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r5, 0x1, 0xb, &(0x7f0000000040)=""/68, &(0x7f00000001c0)=0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 1.651447597s ago: executing program 4 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.599942399s ago: executing program 2 (id=2511): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.599736939s ago: executing program 1 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x34, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) 1.422823648s ago: executing program 2 (id=2513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0x7, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.422514988s ago: executing program 1 (id=2514): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r6, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 169.717701ms ago: executing program 3 (id=2515): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60000100, 0x0) 0s ago: executing program 3 (id=2516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x7, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240088a5}, 0x4028040) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ctivated: batadv_slave_1 [ 200.486173][ T6579] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.497095][ T6579] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.507300][ T6579] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.517787][ T6579] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.657265][ T6596] device syzkaller0 entered promiscuous mode [ 201.022884][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 203.218046][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.226274][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.240636][ T4320] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.410728][ T4320] usb 5-1: device descriptor read/64, error -71 [ 204.279712][ T4320] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.439682][ T4320] usb 5-1: device descriptor read/64, error -71 [ 204.566534][ T4320] usb usb5-port1: attempt power cycle [ 204.580994][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.650848][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.980757][ T4320] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.020267][ T4320] usb 5-1: device descriptor read/8, error -71 [ 205.189783][ T6626] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.200231][ T6626] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.211219][ T6626] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.221980][ T6626] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.290218][ T4320] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 205.330430][ T4320] usb 5-1: device descriptor read/8, error -71 [ 205.331561][ T6669] binder: 6668:6669 ioctl 4018620d 0 returned -22 [ 205.402195][ T6626] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.412875][ T6626] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.425870][ T6626] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.436493][ T6626] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.453555][ T6647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.783'. [ 205.465069][ T4320] usb usb5-port1: unable to enumerate USB device [ 205.654985][ T6676] netlink: 64 bytes leftover after parsing attributes in process `syz.3.794'. [ 206.175925][ T6678] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 206.639959][ T6692] sctp: [Deprecated]: syz.0.797 (pid 6692) Use of int in max_burst socket option. [ 206.639959][ T6692] Use struct sctp_assoc_value instead [ 206.685858][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 206.739164][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 206.818318][ T6692] device macvtap2 entered promiscuous mode [ 206.882564][ T6692] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 206.910797][ T6697] device macvtap2 left promiscuous mode [ 206.926068][ T6705] binder: 6704:6705 ioctl 4018620d 0 returned -22 [ 207.094448][ T6709] binder: BINDER_SET_CONTEXT_MGR already set [ 207.125792][ T6709] binder: 6708:6709 ioctl 4018620d 200000004a80 returned -16 [ 208.159563][ T125] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 208.175650][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 208.361402][ T125] usb 3-1: config 0 has no interfaces? [ 208.378073][ T125] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.422961][ T125] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 208.485627][ T125] usb 3-1: Product: syz [ 208.501986][ T125] usb 3-1: Manufacturer: syz [ 208.519399][ T125] usb 3-1: SerialNumber: syz [ 208.549833][ T125] usb 3-1: config 0 descriptor?? [ 208.639892][ T6745] binder: 6744:6745 ioctl 4018620d 0 returned -22 [ 208.704014][ T6747] sctp: [Deprecated]: syz.0.816 (pid 6747) Use of int in max_burst socket option. [ 208.704014][ T6747] Use struct sctp_assoc_value instead [ 208.803201][ T4358] usb 3-1: USB disconnect, device number 17 [ 208.824884][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 208.872224][ T6747] device macvtap3 entered promiscuous mode [ 208.905614][ T6747] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 209.036612][ T6756] binder: BINDER_SET_CONTEXT_MGR already set [ 209.079523][ T6756] binder: 6755:6756 ioctl 4018620d 200000004a80 returned -16 [ 209.623804][ T6776] device syzkaller0 entered promiscuous mode [ 209.699479][ T4358] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.899670][ T4358] usb 2-1: Using ep0 maxpacket: 8 [ 209.907732][ T4358] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 209.946252][ T4358] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 209.963591][ T6781] binder: BINDER_SET_CONTEXT_MGR already set [ 209.971036][ T6781] binder: 6780:6781 ioctl 4018620d 200000000480 returned -16 [ 209.980380][ T4358] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 209.996183][ T4358] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.042727][ T4358] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.067370][ T4358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.107194][ T4358] usbtmc 2-1:16.0: bulk endpoints not found [ 210.250614][ T6785] sctp: [Deprecated]: syz.4.831 (pid 6785) Use of int in max_burst socket option. [ 210.250614][ T6785] Use struct sctp_assoc_value instead [ 210.316705][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 210.346966][ T6787] tipc: Started in network mode [ 210.356434][ T6787] tipc: Node identity 721ce99d3e9f, cluster identity 4711 [ 210.364422][ T6787] tipc: Enabled bearer , priority 0 [ 210.375819][ T6787] device syzkaller0 entered promiscuous mode [ 210.455408][ T6790] tipc: Resetting bearer [ 210.550331][ T6786] tipc: Resetting bearer [ 210.588752][ T6786] tipc: Disabling bearer [ 211.053731][ T4319] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 211.271196][ T4319] usb 3-1: config 0 has no interfaces? [ 211.281956][ T4319] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 211.309448][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 211.324640][ T6816] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 211.339538][ T4319] usb 3-1: Product: syz [ 211.345151][ T4319] usb 3-1: Manufacturer: syz [ 211.381563][ T4319] usb 3-1: SerialNumber: syz [ 211.392576][ T6816] netlink: 'syz.4.839': attribute type 2 has an invalid length. [ 211.426229][ T4319] usb 3-1: config 0 descriptor?? [ 211.647033][ T4319] usb 3-1: USB disconnect, device number 18 [ 211.680450][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 212.454207][ T4319] usb 2-1: USB disconnect, device number 13 [ 212.753357][ T6837] sctp: [Deprecated]: syz.1.848 (pid 6837) Use of int in max_burst socket option. [ 212.753357][ T6837] Use struct sctp_assoc_value instead [ 212.835898][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 213.541928][ T125] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 213.579631][ T4319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 213.629351][ T6868] device syzkaller1 entered promiscuous mode [ 213.682285][ T6870] sctp: [Deprecated]: syz.0.863 (pid 6870) Use of int in max_burst socket option. [ 213.682285][ T6870] Use struct sctp_assoc_value instead [ 213.706759][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 213.779565][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 213.791012][ T125] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 213.810069][ T4319] usb 4-1: config 0 has no interfaces? [ 213.818170][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 213.834737][ T125] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 213.846662][ T4319] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.856521][ T125] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.871203][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.880542][ T4319] usb 4-1: Product: syz [ 213.884826][ T125] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.895177][ T4319] usb 4-1: Manufacturer: syz [ 213.901017][ T4319] usb 4-1: SerialNumber: syz [ 213.906317][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.923967][ T4319] usb 4-1: config 0 descriptor?? [ 213.954509][ T125] usbtmc 3-1:16.0: bulk endpoints not found [ 214.023960][ T6879] binder: 6878:6879 ioctl c0306201 0 returned -14 [ 214.146689][ T4319] usb 4-1: USB disconnect, device number 5 [ 214.183631][ T6883] mac80211_hwsim hwsim4 ªªªªª;: renamed from wlan0 [ 214.340171][ T6885] netlink: 248 bytes leftover after parsing attributes in process `syz.4.869'. [ 214.378106][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 214.402325][ T6889] tipc: Started in network mode [ 214.409168][ T6889] tipc: Node identity b24c845f8236, cluster identity 4711 [ 214.418152][ T6889] tipc: Enabled bearer , priority 0 [ 214.435939][ T6888] tipc: Disabling bearer [ 214.464158][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 214.633958][ T6900] sctp: [Deprecated]: syz.0.874 (pid 6900) Use of int in max_burst socket option. [ 214.633958][ T6900] Use struct sctp_assoc_value instead [ 214.838381][ T6909] binder: 6908:6909 ioctl c0306201 0 returned -14 [ 214.991775][ T6915] binder: 6913:6915 ioctl c0306201 0 returned -14 [ 215.016534][ T6918] netlink: 248 bytes leftover after parsing attributes in process `syz.3.882'. [ 215.035045][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 215.196398][ T6920] tipc: Enabled bearer , priority 0 [ 215.209090][ T6919] tipc: Disabling bearer [ 215.387634][ T6926] sctp: [Deprecated]: syz.3.886 (pid 6926) Use of int in max_burst socket option. [ 215.387634][ T6926] Use struct sctp_assoc_value instead [ 215.958436][ T6950] netlink: 248 bytes leftover after parsing attributes in process `syz.4.894'. [ 215.975380][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 216.139748][ T4319] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 216.266632][ T4358] usb 3-1: USB disconnect, device number 19 [ 216.278107][ T6955] device syzkaller0 entered promiscuous mode [ 216.342001][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.360308][ T4319] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.379024][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.396209][ T4319] usb 4-1: Product: syz [ 216.401246][ T4319] usb 4-1: Manufacturer: syz [ 216.406565][ T4319] usb 4-1: SerialNumber: syz [ 216.418862][ T4319] usb 4-1: config 0 descriptor?? [ 216.446624][ T4319] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 216.521612][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.556744][ T6960] sctp: [Deprecated]: syz.2.898 (pid 6960) Use of int in max_burst socket option. [ 216.556744][ T6960] Use struct sctp_assoc_value instead [ 216.636044][ T4319] usb 4-1: USB disconnect, device number 6 [ 217.505293][ T6979] binder: 6978:6979 ioctl c0306201 0 returned -14 [ 218.396133][ T6993] netlink: 212 bytes leftover after parsing attributes in process `syz.3.905'. [ 218.406715][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 218.416377][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 218.427655][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 218.700553][ T6937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.776379][ T7001] sctp: [Deprecated]: syz.3.909 (pid 7001) Use of int in max_burst socket option. [ 218.776379][ T7001] Use struct sctp_assoc_value instead [ 219.619452][ T4319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.825532][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.840486][ T4319] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.850400][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 219.860147][ T4319] usb 1-1: Product: syz [ 219.865529][ T4319] usb 1-1: Manufacturer: syz [ 219.870709][ T4319] usb 1-1: SerialNumber: syz [ 219.877566][ T4319] usb 1-1: config 0 descriptor?? [ 219.904288][ T4319] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 219.929054][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 219.944775][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.951283][ T7001] device macvtap1 entered promiscuous mode [ 219.977420][ T7001] device bond0 entered promiscuous mode [ 219.984908][ T7001] device bond_slave_0 entered promiscuous mode [ 220.002736][ T7001] device bond_slave_1 entered promiscuous mode [ 220.014214][ T7001] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 220.027407][ T7002] device macvtap1 left promiscuous mode [ 220.050944][ T7002] device bond0 left promiscuous mode [ 220.056887][ T7002] device bond_slave_0 left promiscuous mode [ 220.076517][ T7002] device bond_slave_1 left promiscuous mode [ 220.122529][ T128] usb 1-1: USB disconnect, device number 5 [ 220.158869][ T7020] netlink: 212 bytes leftover after parsing attributes in process `syz.1.916'. [ 220.174378][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 220.219461][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 220.241599][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 220.256616][ T7023] fuse: Unknown parameter 'grou00000000000000000000' [ 220.761969][ T7047] sctp: [Deprecated]: syz.2.928 (pid 7047) Use of int in max_burst socket option. [ 220.761969][ T7047] Use struct sctp_assoc_value instead [ 220.794795][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 220.812592][ T7047] device macvtap2 entered promiscuous mode [ 220.819417][ T7047] device bond0 entered promiscuous mode [ 220.829499][ T7047] device bond_slave_0 entered promiscuous mode [ 220.842113][ T7047] device bond_slave_1 entered promiscuous mode [ 220.875085][ T7047] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 220.900607][ T7049] device macvtap2 left promiscuous mode [ 220.906394][ T7049] device bond0 left promiscuous mode [ 220.938459][ T7049] device bond_slave_0 left promiscuous mode [ 220.945964][ T7049] device bond_slave_1 left promiscuous mode [ 221.075593][ T7055] fuse: Unknown parameter 'grou00000000000000000000' [ 221.252943][ T7061] device syzkaller0 entered promiscuous mode [ 221.366136][ T7067] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.335211][ T125] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 222.535471][ T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.564031][ T125] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.572795][ T7090] fuse: Unknown parameter 'grou00000000000000000000' [ 222.590550][ T125] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.603013][ T125] usb 4-1: Product: syz [ 222.607322][ T125] usb 4-1: Manufacturer: syz [ 222.612494][ T125] usb 4-1: SerialNumber: syz [ 222.634814][ T125] usb 4-1: config 0 descriptor?? [ 222.725585][ T125] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 222.744977][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.850676][ T7094] device vlan2 entered promiscuous mode [ 222.863478][ T125] usb 4-1: USB disconnect, device number 7 [ 222.880374][ T7094] device bridge0 entered promiscuous mode [ 223.761892][ T7112] __nla_validate_parse: 6 callbacks suppressed [ 223.761910][ T7112] netlink: 212 bytes leftover after parsing attributes in process `syz.3.954'. [ 223.801074][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 224.201717][ T7124] fuse: Unknown parameter 'group_i00000000000000000000' [ 225.460336][ T7144] netlink: 212 bytes leftover after parsing attributes in process `syz.1.967'. [ 225.478737][ T125] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 225.510175][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 225.638767][ T7151] fuse: Unknown parameter 'group_i00000000000000000000' [ 225.671386][ T125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.696724][ T125] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.711964][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.735385][ T125] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.783964][ T125] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 225.807466][ T125] usb 3-1: Product: syz [ 225.829480][ T125] usb 3-1: Manufacturer: syz [ 225.845761][ T125] usb 3-1: SerialNumber: syz [ 225.885592][ T125] usb 3-1: config 0 descriptor?? [ 225.997964][ T125] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 226.028444][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.133630][ T4320] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 226.164876][ T125] usb 3-1: USB disconnect, device number 20 [ 226.339504][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 226.351165][ T4320] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 226.394845][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.416642][ T4320] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 226.433003][ T4320] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 226.462329][ T4320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.503228][ T4320] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 226.518415][ T4320] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 226.527688][ T4320] usb 2-1: Product: syz [ 226.532548][ T4320] usb 2-1: Manufacturer: syz [ 226.538101][ T4320] usb 2-1: SerialNumber: syz [ 226.551816][ T4320] usb 2-1: config 0 descriptor?? [ 226.571073][ T4320] ldusb 2-1:0.0: Interrupt in endpoint not found [ 226.674568][ T7180] netlink: 212 bytes leftover after parsing attributes in process `syz.4.980'. [ 226.746858][ T7182] fuse: Unknown parameter 'group_i00000000000000000000' [ 226.775301][ T4320] usb 2-1: USB disconnect, device number 14 [ 226.955528][ T7185] device syzkaller0 entered promiscuous mode [ 228.058175][ T7207] netlink: 212 bytes leftover after parsing attributes in process `syz.2.991'. [ 228.071369][ T7207] netlink: 84 bytes leftover after parsing attributes in process `syz.2.991'. [ 229.113511][ T7213] fuse: Unknown parameter 'group_id00000000000000000000' [ 230.204757][ T7205] device vlan2 entered promiscuous mode [ 230.228509][ T7205] device bridge0 entered promiscuous mode [ 230.749394][ T4358] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 231.069403][ T4358] usb 4-1: Using ep0 maxpacket: 32 [ 231.076865][ T4358] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 231.089384][ T4358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.100402][ T4358] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 231.125873][ T4358] usb 4-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 231.458513][ T4358] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.614545][ T4358] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 231.797541][ T4358] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 231.808022][ T4358] usb 4-1: Product: syz [ 231.812678][ T4358] usb 4-1: Manufacturer: syz [ 231.817345][ T4358] usb 4-1: SerialNumber: syz [ 231.825141][ T4358] usb 4-1: config 0 descriptor?? [ 231.842655][ T4358] ldusb 4-1:0.0: Interrupt in endpoint not found [ 232.058696][ T4358] usb 4-1: USB disconnect, device number 8 [ 232.076780][ T7247] fuse: Unknown parameter 'group_id00000000000000000000' [ 232.639380][ T7258] device syzkaller0 entered promiscuous mode [ 234.238221][ T7280] fuse: Unknown parameter 'group_id00000000000000000000' [ 235.131458][ T7289] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 235.953457][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 236.293917][ T7307] loop2: detected capacity change from 0 to 1024 [ 236.565562][ T7307] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1019: lblock 2 mapped to illegal pblock 2 (length 1) [ 236.583139][ T7307] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 236.593557][ T7307] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.1019: lblock 0 mapped to illegal pblock 48 (length 1) [ 236.614826][ T7307] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 236.624573][ T7307] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.1019: Failed to acquire dquot type 0 [ 236.638159][ T7307] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 236.654126][ T7307] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.1019: mark_inode_dirty error [ 236.669754][ T7307] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 236.682974][ T7307] EXT4-fs (loop2): 1 orphan inode deleted [ 236.689554][ T7307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 237.355880][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.365004][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.555095][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 237.751542][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 237.763122][ T27] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 237.780456][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.798115][ T27] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 237.815535][ T27] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 237.842415][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 237.865955][ T27] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 237.885842][ T27] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 237.898024][ T27] usb 2-1: Product: syz [ 237.910694][ T27] usb 2-1: Manufacturer: syz [ 237.917925][ T27] usb 2-1: SerialNumber: syz [ 237.952738][ T27] usb 2-1: config 0 descriptor?? [ 237.977301][ T27] ldusb 2-1:0.0: Interrupt in endpoint not found [ 238.108734][ T30] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.124836][ T30] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 238.155333][ T30] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 238.180437][ T4316] usb 2-1: USB disconnect, device number 15 [ 238.227720][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 238.238700][ T4277] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 238.256423][ T4277] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 238.276104][ T4277] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 238.362683][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.399382][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.688612][ T7284] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.698801][ T7284] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.708442][ T7284] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.718358][ T7284] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.806305][ T7284] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.815841][ T7284] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.825673][ T7284] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.834873][ T7284] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.876565][ T7284] device bond0 left promiscuous mode [ 238.885049][ T7284] device bond_slave_0 left promiscuous mode [ 238.891680][ T7284] device bond_slave_1 left promiscuous mode [ 238.908637][ T7288] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1017'. [ 238.933012][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 238.949817][ T7295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1017'. [ 238.988647][ T7295] device gretap1 entered promiscuous mode [ 239.913769][ T7337] loop4: detected capacity change from 0 to 512 [ 240.034907][ T7337] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1029: inode #1: comm syz.4.1029: iget: illegal inode # [ 240.090406][ T7337] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1029: error while reading EA inode 1 err=-117 [ 240.104820][ T7337] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1029: inode #1: comm syz.4.1029: iget: illegal inode # [ 240.123002][ T7337] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1029: error while reading EA inode 1 err=-117 [ 240.138095][ T7337] EXT4-fs (loop4): 1 orphan inode deleted [ 240.144442][ T7337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.201351][ T7353] fuse: Bad value for 'fd' [ 241.225975][ T7355] device syzkaller0 entered promiscuous mode [ 241.237579][ T7355] 0: reclassify loop, rule prio 0, protocol 700 [ 241.489478][ T4358] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 241.515420][ T7359] device syzkaller0 entered promiscuous mode [ 241.716586][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 241.744572][ T4358] usb 1-1: Using ep0 maxpacket: 32 [ 241.757813][ T4358] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 241.777567][ T4358] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 241.781921][ T7369] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.801080][ T4358] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 241.821262][ T4358] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 241.853706][ T7371] loop4: detected capacity change from 0 to 1024 [ 241.870439][ T4358] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.871288][ T7371] EXT4-fs: Ignoring removed bh option [ 241.885434][ T7371] EXT4-fs: Ignoring removed oldalloc option [ 241.894864][ T7371] EXT4-fs: Ignoring removed nobh option [ 241.898675][ T4358] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 241.917961][ T4358] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 241.959275][ T4358] usb 1-1: Product: syz [ 241.967141][ T7371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.973280][ T4358] usb 1-1: Manufacturer: syz [ 241.990607][ T4358] usb 1-1: SerialNumber: syz [ 242.013636][ T4358] usb 1-1: config 0 descriptor?? [ 242.022374][ T4358] ldusb 1-1:0.0: Interrupt in endpoint not found [ 242.048465][ T7371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 242.256705][ T4358] usb 1-1: USB disconnect, device number 6 [ 242.399429][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 242.859489][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 242.894118][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 242.909625][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.925773][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.938184][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.957560][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.968253][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.298383][ T27] usb 4-1: usb_control_msg returned -32 [ 243.317353][ T27] usbtmc 4-1:16.0: can't read capabilities [ 243.358526][ T27] usb 4-1: USB disconnect, device number 9 [ 243.971316][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 244.367245][ T7393] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.655056][ T7396] fuse: Bad value for 'fd' [ 245.589427][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 245.609778][ T7379] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.619274][ T7379] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.629586][ T7379] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.638836][ T7379] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.654838][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 245.664862][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1045'. [ 245.706921][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 245.819556][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 246.087602][ T7400] device bridge1 entered promiscuous mode [ 246.470340][ T7400] bridge1: port 1(macvtap3) entered blocking state [ 246.576078][ T7400] bridge1: port 1(macvtap3) entered disabled state [ 246.590036][ T7400] device bridge1 left promiscuous mode [ 246.874810][ T7409] device syzkaller0 entered promiscuous mode [ 247.189499][ T125] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 247.379526][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 247.395829][ T125] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 247.408645][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 247.419206][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.430876][ T125] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.445051][ T125] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.457843][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.690453][ T125] usb 3-1: usb_control_msg returned -71 [ 247.696536][ T125] usbtmc 3-1:16.0: can't read capabilities [ 247.715287][ T125] usb 3-1: USB disconnect, device number 21 [ 249.786488][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 249.798789][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 249.814448][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 250.439545][ T7492] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 250.471883][ T7492] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 250.544989][ T125] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 250.672979][ T7495] device syzkaller0 entered promiscuous mode [ 250.739845][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 250.750502][ T125] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 250.794353][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 250.811695][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.824857][ T125] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.848467][ T125] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.858214][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.040064][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 251.084897][ T7503] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.086513][ T125] usb 5-1: usb_control_msg returned -32 [ 251.094252][ T7503] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.110140][ T7503] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.119244][ T7503] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.133539][ T125] usbtmc 5-1:16.0: can't read capabilities [ 251.175665][ T125] usb 5-1: USB disconnect, device number 12 [ 251.235119][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 251.254892][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 251.455556][ T7511] device syzkaller0 entered promiscuous mode [ 251.751674][ T7521] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 251.770184][ T7521] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 251.829901][ T7520] device syzkaller0 entered promiscuous mode [ 254.233614][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 254.244216][ T7539] tipc: Enabling of bearer rejected, failed to enable media [ 254.254838][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 254.265694][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 254.290314][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 254.317114][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 254.583736][ T7570] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 254.603747][ T7570] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.789630][ T4346] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 254.979629][ T4346] usb 3-1: Using ep0 maxpacket: 8 [ 254.995629][ T4346] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 255.025025][ T4346] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 255.055971][ T4346] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.078762][ T7587] device syzkaller0 entered promiscuous mode [ 255.088049][ T4346] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.109822][ T4346] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.130766][ T4346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.157257][ T7592] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 255.225831][ T7592] netlink: 'syz.4.1103': attribute type 2 has an invalid length. [ 255.363613][ T4346] usb 3-1: usb_control_msg returned -32 [ 255.373926][ T4346] usbtmc 3-1:16.0: can't read capabilities [ 255.409159][ T4346] usb 3-1: USB disconnect, device number 22 [ 255.821777][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.828600][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.900603][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 257.919489][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 257.939557][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 257.983285][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 258.443730][ T7635] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1121'. [ 258.571761][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 258.582322][ T7642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1121'. [ 258.596813][ T7642] device gretap1 entered promiscuous mode [ 259.209711][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 259.246392][ T7655] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.256421][ T7655] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.266700][ T7655] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.277098][ T7655] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.309471][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 259.514434][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 261.058157][ T7690] device syzkaller0 entered promiscuous mode [ 261.359458][ T7629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.381479][ T7650] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 261.390935][ T7650] netlink: 'syz.3.1124': attribute type 2 has an invalid length. [ 261.800312][ T7702] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 262.671283][ T7714] loop4: detected capacity change from 0 to 512 [ 262.812643][ T7714] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1147: inode #1: comm syz.4.1147: iget: illegal inode # [ 262.868396][ T7714] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1147: error while reading EA inode 1 err=-117 [ 262.886643][ T7714] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1147: inode #1: comm syz.4.1147: iget: illegal inode # [ 262.901623][ T7714] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1147: error while reading EA inode 1 err=-117 [ 262.906110][ T7724] tipc: Enabled bearer , priority 0 [ 262.929511][ T7714] EXT4-fs (loop4): 1 orphan inode deleted [ 262.936744][ T7714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 262.962694][ T7725] tipc: Enabled bearer , priority 0 [ 262.983220][ T7722] tipc: Disabling bearer [ 263.017880][ T7724] device syzkaller0 entered promiscuous mode [ 263.077105][ T7724] tipc: Resetting bearer [ 263.141121][ T7723] tipc: Resetting bearer [ 263.230920][ T7723] tipc: Disabling bearer [ 263.570025][ T7744] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 263.799005][ T7744] netlink: 'syz.2.1155': attribute type 2 has an invalid length. [ 264.257626][ T7752] __nla_validate_parse: 6 callbacks suppressed [ 264.257646][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1160'. [ 265.369123][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 265.551141][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.559459][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.975063][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.013217][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.654509][ T7752] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.666121][ T7752] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.675987][ T7752] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.687722][ T7752] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.821718][ T7752] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.831212][ T7752] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.841143][ T7752] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.850650][ T7752] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.869263][ T7752] device gretap1 left promiscuous mode [ 266.909518][ T7770] tipc: Enabling of bearer rejected, failed to enable media [ 266.954068][ T7780] device ipvlan2 entered promiscuous mode [ 266.976626][ T7780] bridge0: port 3(ipvlan2) entered blocking state [ 266.994035][ T7780] bridge0: port 3(ipvlan2) entered disabled state [ 267.136034][ T7789] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 268.005830][ T7796] loop3: detected capacity change from 0 to 512 [ 268.195147][ T7796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1174: inode #1: comm syz.3.1174: iget: illegal inode # [ 268.475760][ T7796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1174: error while reading EA inode 1 err=-117 [ 269.130871][ T7796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1174: inode #1: comm syz.3.1174: iget: illegal inode # [ 269.176602][ T7796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1174: error while reading EA inode 1 err=-117 [ 269.226777][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 269.243552][ T7796] EXT4-fs (loop3): 1 orphan inode deleted [ 269.257556][ T7817] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.267261][ T7817] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.277090][ T7817] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.286906][ T7817] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.309027][ T7796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 269.341406][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 269.628071][ T7830] tipc: Enabled bearer , priority 0 [ 269.734970][ T7830] device syzkaller0 entered promiscuous mode [ 269.742406][ T7830] tipc: Resetting bearer [ 269.774318][ T7832] device syzkaller1 entered promiscuous mode [ 269.782779][ T7825] tipc: Resetting bearer [ 271.797961][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 274.460211][ T7825] tipc: Disabling bearer [ 274.489444][ T7298] tipc: Node number set to 813335647 [ 274.650937][ T7877] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 274.950987][ T7886] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1200'. [ 275.849161][ T7904] loop2: detected capacity change from 0 to 512 [ 275.880169][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 275.924543][ T7898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1200'. [ 275.946066][ T7898] device gretap1 entered promiscuous mode [ 276.092122][ T7904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1203: inode #1: comm syz.2.1203: iget: illegal inode # [ 276.123323][ T7904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1203: error while reading EA inode 1 err=-117 [ 276.252640][ T7904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1203: inode #1: comm syz.2.1203: iget: illegal inode # [ 276.495102][ T7904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1203: error while reading EA inode 1 err=-117 [ 276.790959][ T7904] EXT4-fs (loop2): 1 orphan inode deleted [ 276.808638][ T7904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 277.065944][ T7924] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1210'. [ 277.091604][ T7920] tipc: Enabled bearer , priority 0 [ 277.208056][ T7931] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 277.218903][ T7920] device syzkaller0 entered promiscuous mode [ 277.249771][ T7920] tipc: Resetting bearer [ 277.267087][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1210'. [ 277.295692][ T7929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1210'. [ 277.378603][ T7919] tipc: Resetting bearer [ 278.631768][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 280.532875][ T7919] tipc: Disabling bearer [ 280.544347][ T7943] tipc: Enabled bearer , priority 0 [ 280.571553][ T7950] tipc: Resetting bearer [ 280.622621][ T7941] tipc: Disabling bearer [ 280.883236][ T7973] fuse: Unknown parameter 'user_i00000000000000000000' [ 281.769092][ T7987] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 281.960743][ T7992] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1228'. [ 282.559366][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1228'. [ 282.711683][ T8000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1228'. [ 284.005941][ T8025] tipc: Enabling of bearer rejected, failed to enable media [ 284.707083][ T8030] overlayfs: failed to resolve './file0': -2 [ 285.133202][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 285.152167][ T8053] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.162385][ T8053] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.172063][ T8053] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.181713][ T8053] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.221477][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 285.279787][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 286.925643][ T8079] netlink: 'syz.1.1251': attribute type 3 has an invalid length. [ 287.095332][ T8082] fuse: Unknown parameter 'user_id00000000000000000000' [ 287.370605][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.443701][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.501573][ T8079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.980909][ T8096] netlink: 804 bytes leftover after parsing attributes in process `syz.0.1258'. [ 288.029154][ T8094] device syzkaller0 entered promiscuous mode [ 288.168017][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1260'. [ 288.184594][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1260'. [ 288.199057][ T8102] device syzkaller0 entered promiscuous mode [ 288.376801][ T8110] binder: 8109:8110 ioctl c0306201 0 returned -14 [ 288.528991][ T8112] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1267'. [ 288.610663][ T8118] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.648131][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1267'. [ 288.669462][ T8118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1267'. [ 289.587287][ T8141] tipc: Enabled bearer , priority 0 [ 289.607823][ T8141] device syzkaller0 entered promiscuous mode [ 289.637251][ T8143] device syzkaller1 entered promiscuous mode [ 289.732704][ T8137] tipc: Resetting bearer [ 289.810680][ T8137] tipc: Disabling bearer [ 290.066416][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 290.085147][ T8152] binder: 8151:8152 ioctl c0306201 0 returned -14 [ 290.092698][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 290.111211][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 290.220264][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 290.414430][ T8165] binder: 8163:8165 ioctl c0306201 0 returned -14 [ 291.506199][ T8181] tipc: Started in network mode [ 291.526381][ T8181] tipc: Node identity c26efc5f274e, cluster identity 4711 [ 291.547908][ T8181] tipc: Enabled bearer , priority 0 [ 291.607234][ T8181] device syzkaller0 entered promiscuous mode [ 291.889683][ T8178] tipc: Resetting bearer [ 292.318645][ T8178] tipc: Disabling bearer [ 292.688978][ T7298] tipc: Node number set to 3844144223 [ 293.076837][ T8213] __nla_validate_parse: 1 callbacks suppressed [ 293.076856][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 293.174897][ T8215] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1305'. [ 293.186615][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 293.230643][ T8222] device syzkaller0 entered promiscuous mode [ 293.259917][ T8225] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 293.380618][ T8225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1305'. [ 293.434894][ T8225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1305'. [ 293.548838][ T8235] tipc: Enabled bearer , priority 0 [ 293.561250][ T8235] device syzkaller0 entered promiscuous mode [ 293.622422][ T8234] tipc: Resetting bearer [ 293.692819][ T8234] tipc: Disabling bearer [ 294.253894][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 294.303038][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1320'. [ 294.333932][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 294.406042][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 294.452449][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 294.505036][ T8263] device syzkaller0 entered promiscuous mode [ 294.577106][ T8265] device syzkaller1 entered promiscuous mode [ 294.588201][ T8268] fuse: Unknown parameter 'group_id00000000000000000000' [ 294.766715][ T8274] tipc: Enabled bearer , priority 0 [ 294.780610][ T8274] device syzkaller0 entered promiscuous mode [ 294.863312][ T8273] tipc: Resetting bearer [ 294.927437][ T8273] tipc: Disabling bearer [ 295.262592][ T8290] loop2: detected capacity change from 0 to 512 [ 295.345014][ T8290] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1332: inode #1: comm syz.2.1332: iget: illegal inode # [ 295.550238][ T8290] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1332: error while reading EA inode 1 err=-117 [ 296.179798][ T8290] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1332: inode #1: comm syz.2.1332: iget: illegal inode # [ 296.225310][ T8290] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1332: error while reading EA inode 1 err=-117 [ 296.255267][ T8298] device syzkaller0 entered promiscuous mode [ 296.309915][ T8290] EXT4-fs (loop2): 1 orphan inode deleted [ 296.316663][ T8290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 297.946184][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 299.289508][ T8308] __nla_validate_parse: 2 callbacks suppressed [ 299.289529][ T8308] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1335'. [ 299.317399][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 299.342494][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1335'. [ 299.359851][ T8320] netlink: 'syz.3.1336': attribute type 3 has an invalid length. [ 299.402461][ T8335] netlink: 'syz.2.1338': attribute type 4 has an invalid length. [ 299.431557][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 299.660220][ T8346] tipc: Enabled bearer , priority 0 [ 299.668725][ T8346] device syzkaller0 entered promiscuous mode [ 299.731787][ T8343] tipc: Resetting bearer [ 299.785319][ T8343] tipc: Disabling bearer [ 299.829557][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 299.996222][ T8354] loop3: detected capacity change from 0 to 1024 [ 300.015365][ T8354] EXT4-fs: Ignoring removed bh option [ 300.022673][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 300.041334][ T27] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 300.069381][ T8354] EXT4-fs: Ignoring removed oldalloc option [ 300.075642][ T8354] EXT4-fs: Ignoring removed nobh option [ 300.089701][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 300.113556][ T8354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.136608][ T27] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 300.165394][ T8354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 300.169411][ T27] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 300.379194][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.406278][ T27] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 300.430822][ T27] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 300.449400][ T27] usb 1-1: Product: syz [ 300.454083][ T27] usb 1-1: Manufacturer: syz [ 300.459126][ T27] usb 1-1: SerialNumber: syz [ 300.551289][ T27] usb 1-1: config 0 descriptor?? [ 300.559077][ T27] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 300.606731][ T27] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 300.629388][ T8354] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.1345: Allocating blocks 497-513 which overlap fs metadata [ 300.649452][ T8354] EXT4-fs (loop3): pa ffff8880713f1b60: logic 256, phys. 385, len 8 [ 300.658746][ T8354] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 300.860489][ T27] usb 1-1: USB disconnect, device number 7 [ 300.877796][ T27] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 301.775125][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 301.873667][ T8383] netlink: 'syz.1.1353': attribute type 4 has an invalid length. [ 301.919434][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'. [ 302.102429][ T8389] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 302.149489][ T8389] netlink: 'syz.4.1352': attribute type 2 has an invalid length. [ 302.451214][ T8402] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1358'. [ 302.496760][ T8402] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1358'. [ 302.708564][ T8407] fuse: Bad value for 'user_id' [ 302.904749][ T8413] loop3: detected capacity change from 0 to 1024 [ 302.946324][ T8413] EXT4-fs: Ignoring removed bh option [ 302.971295][ T8413] EXT4-fs: Ignoring removed oldalloc option [ 303.048815][ T8413] EXT4-fs: Ignoring removed nobh option [ 303.097750][ T8413] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.403139][ T8413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 304.232294][ T8426] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.1363: Allocating blocks 497-513 which overlap fs metadata [ 304.335123][ T8428] fuse: Unknown parameter 'fd0x0000000000000004' [ 304.825559][ T8426] EXT4-fs (loop3): pa ffff888073b99540: logic 256, phys. 385, len 8 [ 304.833965][ T8426] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 304.850350][ T4320] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 305.069426][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 305.077168][ T4320] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 305.128629][ T4320] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.189607][ T4320] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 305.284002][ T4320] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.364276][ T4320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 305.406685][ T8436] tipc: Enabled bearer , priority 0 [ 305.430483][ T4320] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.482541][ T4320] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.506183][ T8436] tipc: Resetting bearer [ 305.533537][ T4320] usb 2-1: Product: syz [ 305.538119][ T4320] usb 2-1: Manufacturer: syz [ 305.560399][ T4320] usb 2-1: SerialNumber: syz [ 305.574600][ T8435] tipc: Disabling bearer [ 305.593601][ T8441] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1372'. [ 305.596028][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 305.620435][ T8441] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1372'. [ 305.621146][ T4320] usb 2-1: config 0 descriptor?? [ 305.640586][ T4320] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.669846][ T4320] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 305.862453][ T4320] usb 2-1: USB disconnect, device number 16 [ 305.868677][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 305.891470][ T8447] fuse: Bad value for 'user_id' [ 305.897395][ T4320] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 306.066829][ T8455] fuse: Unknown parameter 'fd0x0000000000000004' [ 306.071340][ T8456] loop2: detected capacity change from 0 to 1024 [ 306.100842][ T8456] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1376: lblock 2 mapped to illegal pblock 2 (length 1) [ 306.117042][ T8456] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 306.125873][ T8456] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.1376: lblock 0 mapped to illegal pblock 48 (length 1) [ 306.146377][ T8456] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 306.156781][ T8456] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.1376: Failed to acquire dquot type 0 [ 306.171913][ T8456] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 306.187868][ T8456] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.1376: mark_inode_dirty error [ 306.201218][ T8456] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 306.208581][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 306.212182][ T8456] EXT4-fs (loop2): 1 orphan inode deleted [ 306.212218][ T8456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 306.255003][ T6563] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 306.283515][ T8457] device erspan0 entered promiscuous mode [ 306.316642][ T6563] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 306.327938][ T6563] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 0 [ 306.466391][ T8468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1381'. [ 307.079723][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 307.292960][ T4277] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 307.323075][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1381'. [ 307.359695][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1381'. [ 307.370044][ T4277] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 307.384701][ T4277] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 307.417129][ T8471] device gretap1 entered promiscuous mode [ 307.464643][ T8479] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1384'. [ 307.528182][ T8479] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1384'. [ 307.596331][ T8484] loop2: detected capacity change from 0 to 512 [ 307.700590][ T8484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1382: inode #1: comm syz.2.1382: iget: illegal inode # [ 307.778511][ T8484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1382: error while reading EA inode 1 err=-117 [ 307.844362][ T8484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1382: inode #1: comm syz.2.1382: iget: illegal inode # [ 307.915564][ T8484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1382: error while reading EA inode 1 err=-117 [ 307.977490][ T8484] EXT4-fs (loop2): 1 orphan inode deleted [ 308.019656][ T8484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 308.346864][ T8483] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.359051][ T8483] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.373506][ T8483] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.389338][ T8483] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.644527][ T8492] tipc: Enabled bearer , priority 0 [ 309.498599][ T8507] tipc: Resetting bearer [ 309.536200][ T8518] fuse: Unknown parameter 'fd0x0000000000000004' [ 309.538507][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 309.560681][ T8486] tipc: Disabling bearer [ 310.042382][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'. [ 310.070441][ T8530] device syzkaller0 entered promiscuous mode [ 310.528455][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 311.151469][ T8552] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 313.037226][ T8544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1399'. [ 313.059675][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 313.075402][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1399'. [ 313.125665][ T8554] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.136432][ T8554] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.147293][ T8554] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.157939][ T8554] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.256051][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 313.454833][ T8571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1406'. [ 313.649976][ T8577] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1408'. [ 313.668285][ T8579] fuse: Bad value for 'fd' [ 314.141443][ T8592] device syzkaller0 entered promiscuous mode [ 314.148358][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 314.165489][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 314.176414][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'. [ 314.345939][ T8598] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1417'. [ 314.495345][ T8601] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 314.785811][ T8611] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.796070][ T8611] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.805862][ T8611] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.815188][ T8611] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.595498][ T8640] device syzkaller0 entered promiscuous mode [ 316.162230][ T8647] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.171692][ T8647] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.181898][ T8647] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.191990][ T8647] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.540138][ T8664] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.617512][ T8668] netlink: 'syz.0.1442': attribute type 4 has an invalid length. [ 317.044789][ T8676] loop2: detected capacity change from 0 to 1024 [ 317.262050][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.270640][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.302869][ T8676] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1444: lblock 2 mapped to illegal pblock 2 (length 1) [ 317.323609][ T8676] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 317.333561][ T8676] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.1444: lblock 0 mapped to illegal pblock 48 (length 1) [ 317.351433][ T8676] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 317.362033][ T8676] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.1444: Failed to acquire dquot type 0 [ 317.375387][ T8676] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 317.387770][ T8676] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.1444: mark_inode_dirty error [ 317.402334][ T8676] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 317.414143][ T8676] EXT4-fs (loop2): 1 orphan inode deleted [ 317.420527][ T8676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.457213][ T5113] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.715931][ T5113] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 317.824300][ T5113] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 0 [ 318.976310][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 318.993467][ T4277] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 319.043025][ T4277] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 319.104300][ T4277] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 319.444306][ T8712] device syzkaller0 entered promiscuous mode [ 319.553219][ T8717] syz.0.1458 uses obsolete (PF_INET,SOCK_PACKET) [ 319.714802][ T8721] __nla_validate_parse: 15 callbacks suppressed [ 319.714821][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 319.766930][ T8721] device macvtap2 entered promiscuous mode [ 319.785513][ T8721] device erspan0 entered promiscuous mode [ 319.819419][ T8722] netlink: 'syz.3.1459': attribute type 4 has an invalid length. [ 319.875080][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 321.125479][ T8750] device syzkaller0 entered promiscuous mode [ 321.227237][ T8754] device syzkaller0 entered promiscuous mode [ 321.286215][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 321.314669][ T8759] device macvtap3 entered promiscuous mode [ 321.352503][ T8760] netlink: 'syz.3.1473': attribute type 4 has an invalid length. [ 321.366036][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 321.496791][ T8762] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.507771][ T8762] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.517826][ T8762] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.527938][ T8762] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.751065][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 323.252047][ T8787] binder: BINDER_SET_CONTEXT_MGR already set [ 323.258609][ T8787] binder: 8786:8787 ioctl 4018620d 200000004a80 returned -16 [ 323.526895][ T8800] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.538474][ T8800] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.549209][ T8800] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.559082][ T8800] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.627220][ T8804] device syzkaller0 entered promiscuous mode [ 323.667621][ T8800] netlink: 'syz.2.1487': attribute type 13 has an invalid length. [ 323.686363][ T8800] netlink: 'syz.2.1487': attribute type 17 has an invalid length. [ 323.858412][ T8800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.868431][ T8800] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.885200][ T8800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.350408][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 326.419924][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 326.439781][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 326.507500][ T8834] netlink: 'syz.0.1496': attribute type 4 has an invalid length. [ 326.549438][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 326.673455][ T8842] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1501'. [ 326.793834][ T8849] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 326.877232][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'. [ 327.091918][ T8849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1501'. [ 327.134685][ T8853] loop2: detected capacity change from 0 to 512 [ 327.210077][ T8853] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1502: inode #1: comm syz.2.1502: iget: illegal inode # [ 327.243138][ T8853] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1502: error while reading EA inode 1 err=-117 [ 327.265435][ T8853] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1502: inode #1: comm syz.2.1502: iget: illegal inode # [ 327.297156][ T8853] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1502: error while reading EA inode 1 err=-117 [ 327.321403][ T8853] EXT4-fs (loop2): 1 orphan inode deleted [ 327.327729][ T8853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 327.752744][ T8868] device bridge_slave_1 left promiscuous mode [ 327.787157][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.831300][ T8868] device bridge_slave_0 left promiscuous mode [ 327.838092][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.057823][ T8870] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.067442][ T8870] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.077248][ T8870] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.089776][ T8870] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.441980][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 329.087104][ T8898] netlink: 'syz.2.1512': attribute type 4 has an invalid length. [ 329.129397][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 329.149673][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1513'. [ 329.341066][ T8913] fuse: Bad value for 'rootmode' [ 329.608323][ T8925] binder: 8924:8925 ioctl c0306201 0 returned -14 [ 329.761468][ T8929] tipc: Enabled bearer , priority 0 [ 329.806901][ T8929] device syzkaller0 entered promiscuous mode [ 329.814089][ T8929] tipc: Resetting bearer [ 329.833668][ T8928] tipc: Resetting bearer [ 330.233799][ T8934] loop4: detected capacity change from 0 to 1024 [ 330.261827][ T8934] EXT4-fs: Ignoring removed bh option [ 330.267986][ T8934] EXT4-fs: Ignoring removed oldalloc option [ 330.280203][ T8934] EXT4-fs: Ignoring removed nobh option [ 330.304018][ T8934] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 330.410373][ T8934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 330.763648][ T8943] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.1526: Allocating blocks 497-513 which overlap fs metadata [ 330.779326][ T8943] EXT4-fs (loop4): pa ffff8880713f1a80: logic 256, phys. 385, len 8 [ 330.788644][ T8943] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 331.278220][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 331.357812][ T8954] binder: 8953:8954 ioctl c0306201 0 returned -14 [ 333.632980][ T8928] tipc: Disabling bearer [ 333.650034][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'. [ 335.290300][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1551'. [ 335.956956][ T9037] device syzkaller0 entered promiscuous mode [ 337.213303][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 337.456091][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 337.508660][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 337.578152][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 337.588624][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 337.599428][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 337.609205][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 337.622450][ T9076] device syzkaller0 entered promiscuous mode [ 337.772685][ T9085] fuse: Unknown parameter 'use00000000000000000000' [ 338.570469][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 338.846649][ T9117] device syzkaller0 entered promiscuous mode [ 339.369730][ T4284] Bluetooth: hci4: command 0x0405 tx timeout [ 341.166877][ T9151] loop2: detected capacity change from 0 to 512 [ 341.190068][ T9151] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1594: inode #1: comm syz.2.1594: iget: illegal inode # [ 341.210809][ T9151] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1594: error while reading EA inode 1 err=-117 [ 341.237818][ T9151] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1594: inode #1: comm syz.2.1594: iget: illegal inode # [ 341.260788][ T9151] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1594: error while reading EA inode 1 err=-117 [ 341.319762][ T9151] EXT4-fs (loop2): 1 orphan inode deleted [ 341.351558][ T9151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 341.516254][ T9158] device syzkaller0 entered promiscuous mode [ 344.264681][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 345.955637][ T9192] __nla_validate_parse: 5 callbacks suppressed [ 345.955763][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1604'. [ 346.210886][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1612'. [ 346.304514][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 346.374731][ T9223] device macvtap1 entered promiscuous mode [ 346.386739][ T9223] device bond0 entered promiscuous mode [ 346.393920][ T9223] device bond_slave_0 entered promiscuous mode [ 346.407797][ T9223] device bond_slave_1 entered promiscuous mode [ 346.421029][ T9223] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 346.608971][ T9241] loop3: detected capacity change from 0 to 512 [ 346.665552][ T9241] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1617: inode #1: comm syz.3.1617: iget: illegal inode # [ 346.674964][ T9243] device syzkaller0 entered promiscuous mode [ 346.722107][ T9241] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1617: error while reading EA inode 1 err=-117 [ 346.749058][ T9248] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 346.767808][ T9241] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1617: inode #1: comm syz.3.1617: iget: illegal inode # [ 346.804414][ T9241] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1617: error while reading EA inode 1 err=-117 [ 346.836130][ T9248] netlink: 'syz.1.1615': attribute type 2 has an invalid length. [ 346.850437][ T9241] EXT4-fs (loop3): 1 orphan inode deleted [ 346.857397][ T9241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 347.830437][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 349.575186][ T9309] loop1: detected capacity change from 0 to 512 [ 349.661925][ T9309] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1633: inode #1: comm syz.1.1633: iget: illegal inode # [ 349.712326][ T9309] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1633: error while reading EA inode 1 err=-117 [ 349.745933][ T9309] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1633: inode #1: comm syz.1.1633: iget: illegal inode # [ 349.768268][ T9309] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1633: error while reading EA inode 1 err=-117 [ 349.782424][ T9309] EXT4-fs (loop1): 1 orphan inode deleted [ 349.789737][ T9309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 350.738702][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 350.916056][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 350.970381][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 351.177260][ T9337] netlink: 'syz.1.1636': attribute type 1 has an invalid length. [ 351.227253][ T9330] device syzkaller0 entered promiscuous mode [ 351.248352][ T9337] netlink: 'syz.1.1636': attribute type 2 has an invalid length. [ 351.268721][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 352.009710][ T9355] loop3: detected capacity change from 0 to 512 [ 352.057560][ T9355] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1645: inode #1: comm syz.3.1645: iget: illegal inode # [ 352.133877][ T9355] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1645: error while reading EA inode 1 err=-117 [ 352.199005][ T9355] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1645: inode #1: comm syz.3.1645: iget: illegal inode # [ 352.225843][ T9355] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1645: error while reading EA inode 1 err=-117 [ 352.290837][ T9355] EXT4-fs (loop3): 1 orphan inode deleted [ 352.296832][ T9355] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 352.941085][ T9359] loop1: detected capacity change from 0 to 512 [ 352.994070][ T9359] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1646: inode #1: comm syz.1.1646: iget: illegal inode # [ 353.058272][ T9359] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1646: error while reading EA inode 1 err=-117 [ 353.085188][ T9359] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1646: inode #1: comm syz.1.1646: iget: illegal inode # [ 353.127599][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 353.200184][ T9359] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1646: error while reading EA inode 1 err=-117 [ 353.222960][ T9359] EXT4-fs (loop1): 1 orphan inode deleted [ 353.234885][ T9359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 354.105620][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 354.477733][ T9383] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 355.183641][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1651'. [ 355.207938][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1651'. [ 355.219449][ T9383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1651'. [ 355.343861][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1654'. [ 355.379847][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1654'. [ 355.461594][ T9400] device syzkaller0 entered promiscuous mode [ 355.775570][ T9422] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 356.072205][ T9422] netlink: 'syz.1.1656': attribute type 2 has an invalid length. [ 356.731220][ T9436] device syzkaller0 entered promiscuous mode [ 356.807823][ T9440] device syzkaller0 entered promiscuous mode [ 359.431550][ T9455] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 359.441245][ T9457] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 359.547536][ T9468] device syzkaller0 entered promiscuous mode [ 359.878892][ T9480] netlink: 'syz.2.1676': attribute type 3 has an invalid length. [ 360.615111][ T9480] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 360.695176][ T9480] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 360.764278][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.047633][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.086846][ T9484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.139611][ T9490] netlink: 'syz.0.1679': attribute type 3 has an invalid length. [ 361.232797][ T9490] device erspan0 left promiscuous mode [ 361.253795][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.263153][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.272523][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.281642][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.306300][ T9490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.534168][ T9506] device syzkaller0 entered promiscuous mode [ 361.677234][ T9512] device syzkaller0 entered promiscuous mode [ 361.866678][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 361.886647][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 361.914188][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 362.320404][ T9530] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 362.329030][ T9530] netlink: 'syz.4.1692': attribute type 2 has an invalid length. [ 363.332893][ T9543] netlink: 'syz.4.1695': attribute type 3 has an invalid length. [ 363.468197][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.478369][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.500336][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.508798][ T9543] device team0 left promiscuous mode [ 363.521404][ T9543] device team_slave_0 left promiscuous mode [ 363.528118][ T9543] device team_slave_1 left promiscuous mode [ 363.551212][ T9543] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.633891][ T9543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.990029][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 364.003507][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 364.186331][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 365.525558][ T9589] netlink: 'syz.3.1711': attribute type 3 has an invalid length. [ 365.743802][ T9589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 365.897963][ T9589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.203124][ T9589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.480351][ T9589] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.551182][ T9589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.942210][ T9607] device syzkaller0 entered promiscuous mode [ 366.971456][ T9609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.089922][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1720'. [ 370.586725][ T9660] netlink: 'syz.2.1729': attribute type 4 has an invalid length. [ 370.614502][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 371.130680][ T9675] device syzkaller0 entered promiscuous mode [ 371.385030][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'. [ 371.886543][ T9695] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 371.945489][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 372.356519][ T9701] device syzkaller0 entered promiscuous mode [ 375.610964][ T9714] device syzkaller0 entered promiscuous mode [ 375.641812][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 375.882143][ T9739] tipc: Enabled bearer , priority 0 [ 375.914363][ T9739] device syzkaller0 entered promiscuous mode [ 376.003900][ T9739] tipc: Resetting bearer [ 376.013742][ T9738] tipc: Resetting bearer [ 376.048530][ T9738] tipc: Disabling bearer [ 376.529976][ T9761] netlink: 804 bytes leftover after parsing attributes in process `syz.2.1765'. [ 376.847279][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 376.887282][ T9776] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 376.920112][ T9776] netlink: 'syz.3.1766': attribute type 2 has an invalid length. [ 377.263221][ T9783] device syzkaller0 entered promiscuous mode [ 378.708849][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.715898][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.538550][ T9811] netlink: 804 bytes leftover after parsing attributes in process `syz.3.1779'. [ 381.412420][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 381.429699][ T9821] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1784'. [ 381.473933][ T9822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1784'. [ 381.489451][ T9822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1784'. [ 383.858357][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 384.323347][ T9859] loop4: detected capacity change from 0 to 512 [ 384.346151][ T9859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1795: inode #1: comm syz.4.1795: iget: illegal inode # [ 384.360613][ T9859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1795: error while reading EA inode 1 err=-117 [ 384.374191][ T9859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1795: inode #1: comm syz.4.1795: iget: illegal inode # [ 384.388598][ T9859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1795: error while reading EA inode 1 err=-117 [ 384.402942][ T9859] EXT4-fs (loop4): 1 orphan inode deleted [ 384.409416][ T9859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 384.754513][ T9874] loop1: detected capacity change from 0 to 512 [ 384.814353][ T9874] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1798: inode #1: comm syz.1.1798: iget: illegal inode # [ 384.832407][ T9874] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1798: error while reading EA inode 1 err=-117 [ 384.867470][ T9874] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1798: inode #1: comm syz.1.1798: iget: illegal inode # [ 384.927307][ T9874] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1798: error while reading EA inode 1 err=-117 [ 384.950052][ T9874] EXT4-fs (loop1): 1 orphan inode deleted [ 384.956286][ T9874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 387.786687][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 387.830218][ T9889] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1801'. [ 387.896510][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 387.988000][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1801'. [ 388.029567][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1801'. [ 388.074071][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'. [ 388.100033][ T9903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.131431][ T9903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.141385][ T9903] bond2: (slave bond3): Enslaving as an active interface with an up link [ 388.154331][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1806'. [ 388.378683][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 388.513043][ T9903] bond2 (unregistering): (slave bond3): Releasing backup interface [ 388.548597][ T9903] bond2 (unregistering): Released all slaves [ 389.031690][ T9924] netlink: 'syz.2.1812': attribute type 16 has an invalid length. [ 389.088928][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 389.109466][ T9924] netlink: 'syz.2.1812': attribute type 16 has an invalid length. [ 389.129384][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 389.152595][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 389.275810][ T9927] loop4: detected capacity change from 0 to 512 [ 389.367710][ T9927] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1813: inode #1: comm syz.4.1813: iget: illegal inode # [ 389.414355][ T9927] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1813: error while reading EA inode 1 err=-117 [ 389.513393][ T9927] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1813: inode #1: comm syz.4.1813: iget: illegal inode # [ 389.764001][ T9927] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1813: error while reading EA inode 1 err=-117 [ 391.374733][ T9927] EXT4-fs (loop4): 1 orphan inode deleted [ 391.380853][ T9927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 392.128608][ T9957] netlink: 'syz.2.1824': attribute type 3 has an invalid length. [ 392.194601][ T9957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.363138][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 394.854496][ T9997] loop3: detected capacity change from 0 to 512 [ 394.915868][ T9997] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1836: inode #1: comm syz.3.1836: iget: illegal inode # [ 394.939693][ T9997] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1836: error while reading EA inode 1 err=-117 [ 394.953788][ T9997] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1836: inode #1: comm syz.3.1836: iget: illegal inode # [ 394.992246][ T9997] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1836: error while reading EA inode 1 err=-117 [ 395.035336][ T9997] EXT4-fs (loop3): 1 orphan inode deleted [ 395.065614][T10006] loop4: detected capacity change from 0 to 512 [ 395.076002][ T9997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 395.148089][T10006] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1840: inode #1: comm syz.4.1840: iget: illegal inode # [ 395.199787][T10006] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1840: error while reading EA inode 1 err=-117 [ 395.285071][T10006] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1840: inode #1: comm syz.4.1840: iget: illegal inode # [ 395.311097][T10006] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1840: error while reading EA inode 1 err=-117 [ 395.324827][T10006] EXT4-fs (loop4): 1 orphan inode deleted [ 395.331144][T10006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 396.404633][T10018] loop1: detected capacity change from 0 to 1024 [ 396.418886][T10018] EXT4-fs: Ignoring removed bh option [ 396.426271][T10018] EXT4-fs: Ignoring removed oldalloc option [ 396.437627][T10018] EXT4-fs: Ignoring removed nobh option [ 396.498577][T10018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 396.533667][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 396.662913][T10018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.686755][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 398.632415][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 398.790820][T10056] loop1: detected capacity change from 0 to 512 [ 398.882057][T10056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1855: inode #1: comm syz.1.1855: iget: illegal inode # [ 398.930241][T10056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1855: error while reading EA inode 1 err=-117 [ 398.942771][T10063] device syzkaller0 entered promiscuous mode [ 398.960862][T10056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1855: inode #1: comm syz.1.1855: iget: illegal inode # [ 398.981597][T10056] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1855: error while reading EA inode 1 err=-117 [ 399.012716][T10056] EXT4-fs (loop1): 1 orphan inode deleted [ 399.033791][T10056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 400.583933][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 401.962457][T10117] device syzkaller0 entered promiscuous mode [ 403.061041][T10133] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1882'. [ 403.267248][T10146] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 403.362998][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1882'. [ 403.383699][T10146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1882'. [ 404.049010][T10167] device syzkaller0 entered promiscuous mode [ 405.663919][T10203] device syzkaller0 entered promiscuous mode [ 405.990099][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 406.000827][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 406.107169][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 406.151855][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 406.355361][T10238] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 406.476200][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 406.484822][T10238] netlink: 'syz.2.1913': attribute type 2 has an invalid length. [ 406.499164][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 407.034496][T10252] device syzkaller0 entered promiscuous mode [ 407.430462][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1926'. [ 409.022724][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1941'. [ 409.563601][T10330] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 409.594119][T10330] netlink: 'syz.4.1945': attribute type 2 has an invalid length. [ 410.682954][T10342] loop2: detected capacity change from 0 to 512 [ 410.727659][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1953'. [ 410.772113][T10342] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1952: inode #1: comm syz.2.1952: iget: illegal inode # [ 410.881901][T10342] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1952: error while reading EA inode 1 err=-117 [ 410.900738][T10342] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1952: inode #1: comm syz.2.1952: iget: illegal inode # [ 410.925379][T10342] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1952: error while reading EA inode 1 err=-117 [ 410.957363][T10342] EXT4-fs (loop2): 1 orphan inode deleted [ 410.979335][T10342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 411.001161][T10352] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1956'. [ 411.277409][T10359] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.357958][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1956'. [ 411.379568][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1956'. [ 411.593939][T10362] device syzkaller0 entered promiscuous mode [ 412.364143][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 414.586422][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 414.928694][T10404] loop1: detected capacity change from 0 to 512 [ 414.956755][T10404] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1971: inode #1: comm syz.1.1971: iget: illegal inode # [ 415.006437][T10404] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1971: error while reading EA inode 1 err=-117 [ 415.057235][T10404] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1971: inode #1: comm syz.1.1971: iget: illegal inode # [ 415.099431][T10404] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1971: error while reading EA inode 1 err=-117 [ 415.114215][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 415.137470][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 415.153695][T10404] EXT4-fs (loop1): 1 orphan inode deleted [ 415.159821][T10404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 415.175334][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 415.503956][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'. [ 416.690077][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 416.851475][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 416.890825][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 416.937555][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 416.996212][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 417.916701][T10464] device syzkaller0 entered promiscuous mode [ 419.147648][T10483] loop1: detected capacity change from 0 to 512 [ 419.216164][T10483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1997: inode #1: comm syz.1.1997: iget: illegal inode # [ 419.230534][T10483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1997: error while reading EA inode 1 err=-117 [ 419.251718][T10483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1997: inode #1: comm syz.1.1997: iget: illegal inode # [ 419.269499][T10483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1997: error while reading EA inode 1 err=-117 [ 419.340079][T10483] EXT4-fs (loop1): 1 orphan inode deleted [ 419.345847][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2002'. [ 419.346504][T10483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 420.303828][T10504] tipc: Enabled bearer , priority 0 [ 420.354514][T10506] device syzkaller0 entered promiscuous mode [ 420.403720][T10504] tipc: Resetting bearer [ 420.417755][T10503] tipc: Resetting bearer [ 420.443295][T10503] tipc: Disabling bearer [ 420.531451][T10512] device syzkaller0 entered promiscuous mode [ 420.577509][T10519] device syzkaller0 entered promiscuous mode [ 420.821257][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 421.058723][T10531] __nla_validate_parse: 4 callbacks suppressed [ 421.058742][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 421.089876][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2016'. [ 421.101481][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 421.112963][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2016'. [ 421.128410][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 421.149087][T10535] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2017'. [ 421.281809][T10539] loop1: detected capacity change from 0 to 512 [ 421.304307][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2017'. [ 421.327374][T10544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2017'. [ 421.421242][T10539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2018: inode #1: comm syz.1.2018: iget: illegal inode # [ 421.439943][T10539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2018: error while reading EA inode 1 err=-117 [ 421.470355][T10539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2018: inode #1: comm syz.1.2018: iget: illegal inode # [ 421.572790][T10539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2018: error while reading EA inode 1 err=-117 [ 421.604835][T10539] EXT4-fs (loop1): 1 orphan inode deleted [ 421.629416][T10539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 421.707795][T10561] loop2: detected capacity change from 0 to 512 [ 421.748609][T10563] device syzkaller0 entered promiscuous mode [ 421.827674][T10561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.2024: inode #1: comm syz.2.2024: iget: illegal inode # [ 421.844495][T10561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2024: error while reading EA inode 1 err=-117 [ 421.860377][T10561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.2024: inode #1: comm syz.2.2024: iget: illegal inode # [ 421.880155][T10561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2024: error while reading EA inode 1 err=-117 [ 421.902861][T10561] EXT4-fs (loop2): 1 orphan inode deleted [ 421.909160][T10561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 421.984612][T10567] device syzkaller0 entered promiscuous mode [ 423.094610][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 423.116576][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2028'. [ 423.143929][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2028'. [ 423.183307][T10576] device syzkaller0 entered promiscuous mode [ 423.194450][T10576] 0: reclassify loop, rule prio 0, protocol 800 [ 423.646667][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 424.568484][T10555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.945580][T10597] device syzkaller0 entered promiscuous mode [ 425.287101][T10612] device syzkaller0 entered promiscuous mode [ 427.800204][T10633] netlink: 'syz.4.2044': attribute type 3 has an invalid length. [ 427.860651][T10638] device vlan2 entered promiscuous mode [ 427.866782][T10638] device veth0 entered promiscuous mode [ 427.907308][T10647] loop2: detected capacity change from 0 to 1024 [ 427.960356][T10647] EXT4-fs: Ignoring removed bh option [ 427.968209][T10647] EXT4-fs: Ignoring removed oldalloc option [ 427.988114][T10647] EXT4-fs: Ignoring removed nobh option [ 428.046665][T10647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.136223][T10652] device syzkaller0 entered promiscuous mode [ 428.156191][T10647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 428.561300][T10663] __nla_validate_parse: 5 callbacks suppressed [ 428.561320][T10663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2052'. [ 428.926131][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2052'. [ 428.976462][T10663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2052'. [ 430.546315][T10683] tipc: Enabled bearer , priority 0 [ 430.570293][T10683] device syzkaller0 entered promiscuous mode [ 430.583050][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 430.634529][T10683] tipc: Resetting bearer [ 430.696119][T10682] tipc: Resetting bearer [ 430.766939][T10682] tipc: Disabling bearer [ 430.935153][T10689] device syzkaller0 entered promiscuous mode [ 430.992258][T10692] device syzkaller0 entered promiscuous mode [ 431.000022][T10702] netlink: 'syz.1.2061': attribute type 3 has an invalid length. [ 437.964558][T10711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.974781][T10711] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.001298][T10711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.458118][T10758] device syzkaller0 entered promiscuous mode [ 440.180113][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.191446][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.505517][T10792] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 442.831943][T10779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2076'. [ 442.843117][T10786] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2078'. [ 442.863524][T10790] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 442.873705][T10792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2078'. [ 442.899950][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2078'. [ 443.017026][T10804] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2080'. [ 443.063424][T10806] netlink: 'syz.2.2081': attribute type 3 has an invalid length. [ 443.107695][T10809] device syzkaller0 entered promiscuous mode [ 443.214656][T10806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.313585][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2080'. [ 443.354527][T10817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2080'. [ 444.557112][T10844] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2092'. [ 444.738722][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2091'. [ 445.625483][T10857] device syzkaller0 entered promiscuous mode [ 449.091266][T10869] device syzkaller0 entered promiscuous mode [ 449.146574][T10889] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2102'. [ 449.162161][T10894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2102'. [ 449.190108][T10894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2102'. [ 449.249027][T10896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2103'. [ 450.365427][T10916] netlink: 'syz.3.2110': attribute type 3 has an invalid length. [ 450.572627][T10916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 450.642494][T10916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.696972][T10921] device syzkaller0 entered promiscuous mode [ 450.817587][T10923] device syzkaller0 entered promiscuous mode [ 453.181588][T10933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2116'. [ 453.205521][T10940] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2117'. [ 453.218053][T10942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2116'. [ 453.234086][T10942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2116'. [ 453.449068][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 455.380707][T10978] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2126'. [ 457.141623][T10981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2128'. [ 457.246087][T10990] device syzkaller0 entered promiscuous mode [ 457.693017][T11013] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 460.615695][T11010] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2135'. [ 460.631809][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2135'. [ 460.645170][T11013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2135'. [ 460.660065][T11037] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2141'. [ 460.684472][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2141'. [ 460.749800][T11042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2141'. [ 460.790976][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2142'. [ 460.819445][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2142'. [ 460.861923][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2142'. [ 460.886189][T11048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2143'. [ 460.958877][T11053] device syzkaller0 entered promiscuous mode [ 462.259183][T11075] device syzkaller0 entered promiscuous mode [ 462.276937][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 464.606190][T11093] device syzkaller0 entered promiscuous mode [ 464.614681][T11106] netlink: 'syz.2.2158': attribute type 4 has an invalid length. [ 467.424439][T11129] device syzkaller0 entered promiscuous mode [ 467.898131][T11154] __nla_validate_parse: 8 callbacks suppressed [ 467.898266][T11154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2164'. [ 470.971769][T11154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2164'. [ 470.981292][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 471.132400][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 471.264923][T11206] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2173'. [ 471.400095][T11205] device syzkaller0 entered promiscuous mode [ 471.453138][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2173'. [ 471.484133][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2173'. [ 471.653804][T11216] device gretap1 entered promiscuous mode [ 472.702421][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'. [ 474.719314][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'. [ 474.734528][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'. [ 474.792488][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 474.995050][T11257] device syzkaller0 entered promiscuous mode [ 475.156200][T11263] tipc: Enabled bearer , priority 0 [ 475.164391][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'. [ 475.360004][T11263] device syzkaller0 entered promiscuous mode [ 475.410726][T11261] tipc: Resetting bearer [ 475.988272][T11261] tipc: Disabling bearer [ 476.202323][T11288] device syzkaller0 entered promiscuous mode [ 476.256150][T11290] netlink: 816 bytes leftover after parsing attributes in process `syz.0.2194'. [ 476.467944][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'. [ 477.638476][T11308] device syzkaller0 entered promiscuous mode [ 478.429509][T11315] device syzkaller0 entered promiscuous mode [ 482.926109][T11333] netlink: 'syz.2.2208': attribute type 6 has an invalid length. [ 482.934438][T11333] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2208'. [ 482.980828][T11350] device syzkaller0 entered promiscuous mode [ 486.506556][T11408] device syzkaller0 entered promiscuous mode [ 486.554974][T11410] device syzkaller0 entered promiscuous mode [ 486.616880][T11410] tipc: Enabled bearer , priority 0 [ 486.626002][T11409] tipc: Resetting bearer [ 486.744190][T11409] tipc: Disabling bearer [ 486.789001][T11420] device syzkaller0 entered promiscuous mode [ 486.864737][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2223'. [ 487.175044][T11438] device syzkaller0 entered promiscuous mode [ 487.401561][T11448] tipc: Enabled bearer , priority 0 [ 487.627868][T11448] device syzkaller0 entered promiscuous mode [ 487.724989][T11456] tipc: Resetting bearer [ 487.777615][T11447] tipc: Resetting bearer [ 487.836732][T11447] tipc: Disabling bearer [ 487.936386][T11459] device syzkaller0 entered promiscuous mode [ 487.944391][T11459] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 488.064696][T11472] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 488.088818][T11472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.098683][T11477] netlink: 'syz.0.2238': attribute type 3 has an invalid length. [ 488.134949][T11472] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 488.179372][T11472] netlink: 'syz.4.2237': attribute type 2 has an invalid length. [ 488.250311][T11473] bond2: (slave ip6gretap1): making interface the new active one [ 488.291854][T11473] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 488.337185][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 488.384565][T11483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.416443][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 489.146585][T11517] netlink: 'syz.3.2249': attribute type 1 has an invalid length. [ 489.362057][T11517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.486629][T11526] bond2: (slave veth3): Enslaving as an active interface with a down link [ 489.523582][T11529] bond2: (slave dummy0): making interface the new active one [ 489.542985][T11529] device dummy0 entered promiscuous mode [ 489.573641][T11529] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 489.625241][T11530] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2249'. [ 489.690653][T11530] bond2: (slave dummy0): Releasing active interface [ 489.726176][T11530] device dummy0 left promiscuous mode [ 489.816671][T11545] netlink: 804 bytes leftover after parsing attributes in process `syz.0.2256'. [ 490.207734][T11560] device syzkaller0 entered promiscuous mode [ 491.299356][T11596] tipc: Enabled bearer , priority 0 [ 491.367309][T11596] tipc: Resetting bearer [ 491.407081][T11595] tipc: Disabling bearer [ 493.312813][T11652] tipc: Enabled bearer , priority 0 [ 493.381751][T11652] tipc: Resetting bearer [ 493.437355][T11651] tipc: Disabling bearer [ 496.201525][T11721] device syzkaller0 entered promiscuous mode [ 501.581237][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.587889][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.658888][T11785] netlink: 'syz.0.2325': attribute type 13 has an invalid length. [ 502.672405][T11785] netlink: 'syz.0.2325': attribute type 17 has an invalid length. [ 504.228704][T11785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.259536][T11785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.290207][T11785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.299746][T11785] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.322633][T11785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.842436][T11796] Set syz1 is full, maxelem 65536 reached [ 507.405930][T11843] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 507.607374][T11854] device syzkaller0 entered promiscuous mode [ 514.278165][T11947] device syzkaller0 entered promiscuous mode [ 514.363242][T11949] device syzkaller0 entered promiscuous mode [ 517.815572][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 517.826084][T11995] netlink: 'syz.0.2373': attribute type 4 has an invalid length. [ 517.835257][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 518.012854][T12011] device syzkaller0 entered promiscuous mode [ 518.418801][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'. [ 518.431389][T12031] netlink: 'syz.4.2385': attribute type 4 has an invalid length. [ 518.459592][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 519.376268][T12042] device syzkaller0 entered promiscuous mode [ 519.521460][T12052] device syzkaller0 entered promiscuous mode [ 522.793482][T12097] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2401'. [ 523.992821][T12129] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2407'. [ 524.024823][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2411'. [ 525.188085][T12146] device syzkaller0 entered promiscuous mode [ 528.482019][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 528.532431][T12189] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 528.558300][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 528.578359][T12189] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 528.629783][T12189] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 528.777877][T12198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.807220][T12198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.834036][T12198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.066482][T12224] tipc: Enabled bearer , priority 0 [ 532.079979][T12219] device syzkaller0 entered promiscuous mode [ 532.117945][T12212] tipc: Resetting bearer [ 532.190837][T12212] tipc: Disabling bearer [ 532.268714][T12246] device syzkaller0 entered promiscuous mode [ 532.298669][T12244] device syzkaller0 entered promiscuous mode [ 532.433141][T12246] tipc: Enabled bearer , priority 0 [ 532.448301][T12245] tipc: Resetting bearer [ 532.519518][T12245] tipc: Disabling bearer [ 532.809906][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2436'. [ 537.879161][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2452'. [ 538.091902][T12338] device syzkaller0 entered promiscuous mode [ 539.310903][T12370] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 539.381663][T12370] netlink: 'syz.2.2460': attribute type 2 has an invalid length. [ 542.555470][T12353] netlink: 'syz.0.2458': attribute type 3 has an invalid length. [ 542.567502][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 542.575502][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 542.586182][T12362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.614915][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2463'. [ 542.631685][T12396] netlink: 'syz.3.2463': attribute type 4 has an invalid length. [ 542.644723][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 542.689321][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 546.185957][T12442] netlink: 'syz.3.2475': attribute type 3 has an invalid length. [ 546.194826][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2476'. [ 546.245630][T12445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.326805][T12451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 546.357700][T12451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.392139][T12445] tipc: Enabling of bearer rejected, failed to enable media [ 546.418158][T12456] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 546.444543][T12450] device syzkaller0 entered promiscuous mode [ 546.455200][T12456] netlink: 'syz.1.2474': attribute type 2 has an invalid length. [ 546.466239][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 546.490271][T12459] netlink: 'syz.2.2478': attribute type 4 has an invalid length. [ 546.561032][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'. [ 546.723723][T12445] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 546.752665][T12445] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 547.047926][T12448] syz.4.2476 (12448) used greatest stack depth: 18096 bytes left [ 550.533083][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 550.768866][T12464] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 550.787246][T12464] bond3 (unregistering): Released all slaves [ 550.824870][T12479] tipc: Enabling of bearer rejected, failed to enable media [ 551.078740][T12503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2485'. [ 551.101143][T12503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2485'. [ 551.167000][T12506] device syzkaller0 entered promiscuous mode [ 553.602860][T12509] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 553.614594][T12509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 553.626314][T12509] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 553.684713][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 553.927987][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 553.995126][T12529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.068619][T12540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2494'. [ 554.152672][T12536] device syzkaller0 entered promiscuous mode [ 554.176788][T12540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2494'. [ 554.290342][T12551] netlink: 'syz.3.2492': attribute type 1 has an invalid length. [ 554.298835][T12551] netlink: 'syz.3.2492': attribute type 2 has an invalid length. [ 557.602812][T12554] device syzkaller0 entered promiscuous mode [ 557.615233][T12557] tipc: Enabled bearer , priority 0 [ 557.628384][T12563] device syzkaller0 entered promiscuous mode [ 557.657601][T12575] tipc: Resetting bearer [ 557.743586][T12548] tipc: Resetting bearer [ 557.766706][T12548] tipc: Disabling bearer [ 560.322985][T12638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 560.332866][T12638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.367389][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2507'. [ 560.379017][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2507'. [ 560.627051][T12650] device syzkaller0 entered promiscuous mode [ 560.643836][T12648] device syzkaller0 entered promiscuous mode [ 563.024861][ C0] ------------[ cut here ]------------ [ 563.031335][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 563.039813][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.043315][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 563.049437][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.059741][ C0] Modules linked in: [ 563.070712][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 563.078092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.089269][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 563.095789][ C0] Code: ef e8 88 b6 bd fd 4c 8b 45 00 48 c7 c7 80 16 df 8a 48 c7 c6 40 13 df 8a 48 c7 c2 e0 17 df 8a 8b 0c 24 4d 89 e9 e8 e4 1b 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 65 4a 0a [ 563.116392][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010246 [ 563.122662][ C0] RAX: f2547554d7fc9d00 RBX: ffffffff96efa4a0 RCX: ffffffff8c8bc740 [ 563.131291][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 563.139756][ C0] RBP: ffffffff8a8dedc0 R08: ffffffff90af73a7 R09: 1ffffffff215ee74 [ 563.148189][ C0] R10: dffffc0000000000 R11: fffffbfff215ee75 R12: ffff8880596ba600 [ 563.156714][ C0] R13: ffffffff892b51e0 R14: ffff8880596ba000 R15: ffff8880596ba490 [ 563.165150][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 563.174827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.181827][ C0] CR2: 00007f9a4c08ae9c CR3: 000000005b871000 CR4: 00000000003506f0 [ 563.190193][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 563.199210][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 563.208095][ C0] Call Trace: [ 563.211608][ C0] [ 563.214823][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 563.220961][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 563.226541][ C0] __kmem_cache_free+0xb6/0x1f0 [ 563.231720][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 563.236870][ C0] ? call_timer_fn+0x194/0x670 [ 563.242188][ C0] call_timer_fn+0x1ac/0x670 [ 563.246821][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 563.252006][ C0] ? call_timer_fn+0xcf/0x670 [ 563.256880][ C0] ? __run_timers+0x800/0x800 [ 563.262006][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 563.267675][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 563.273358][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 563.279064][ C0] __run_timers+0x53e/0x800 [ 563.283829][ C0] ? detach_timer+0x350/0x350 [ 563.288546][ C0] ? lock_chain_count+0x20/0x20 [ 563.293686][ C0] run_timer_softirq+0x63/0xf0 [ 563.299344][ C0] handle_softirqs+0x2a1/0x930 [ 563.304116][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 563.309242][ C0] ? do_softirq+0x210/0x210 [ 563.314155][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 563.320144][ C0] __irq_exit_rcu+0x13b/0x230 [ 563.324941][ C0] ? irq_exit_rcu+0x20/0x20 [ 563.329809][ C0] irq_exit_rcu+0x5/0x20 [ 563.334344][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 563.340331][ C0] [ 563.343586][ C0] [ 563.346808][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 563.353162][ C0] RIP: 0010:default_idle+0xb/0x10 [ 563.358404][ C0] Code: 48 89 df e8 47 c2 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 eb 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 563.381338][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 563.388093][ C0] RAX: f2547554d7fc9d00 RBX: ffffffff8a37c257 RCX: f2547554d7fc9d00 [ 563.396849][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 563.405134][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 563.414100][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 563.422814][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 563.431225][ C0] ? default_idle_call+0x77/0xc0 [ 563.436547][ C0] default_idle_call+0x84/0xc0 [ 563.441378][ C0] do_idle+0x3a2/0x680 [ 563.445829][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 563.451436][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 563.456752][ C0] ? asm_sysvec_error_interrupt+0x10/0x20 [ 563.462802][ C0] ? schedule_idle+0x57/0x90 [ 563.467673][ C0] cpu_startup_entry+0x3f/0x60 [ 563.472878][ C0] rest_init+0x2dc/0x300 [ 563.477412][ C0] ? time_init+0x33/0x33 [ 563.481881][ C0] arch_call_rest_init+0xa/0xa [ 563.486935][ C0] start_kernel+0x493/0x53c [ 563.491554][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 563.498188][ C0] [ 563.501273][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 563.508729][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 563.516068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.526390][ C0] Call Trace: [ 563.529776][ C0] [ 563.532997][ C0] dump_stack_lvl+0x188/0x24e [ 563.538100][ C0] ? memcpy+0x3c/0x60 [ 563.542268][ C0] ? show_regs_print_info+0x12/0x12 [ 563.547818][ C0] ? load_image+0x400/0x400 [ 563.552432][ C0] panic+0x2e5/0x730 [ 563.556411][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 563.561180][ C0] ? secondary_startup_64_no_verify+0xcf/0xdb [ 563.567475][ C0] __warn+0x2f8/0x4f0 [ 563.571609][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 563.577435][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 563.583445][ C0] report_bug+0x2ba/0x4f0 [ 563.588065][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 563.594099][ C0] handle_bug+0x3a/0x70 [ 563.598467][ C0] exc_invalid_op+0x16/0x40 [ 563.603154][ C0] asm_exc_invalid_op+0x16/0x20 [ 563.608268][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 563.615095][ C0] Code: ef e8 88 b6 bd fd 4c 8b 45 00 48 c7 c7 80 16 df 8a 48 c7 c6 40 13 df 8a 48 c7 c2 e0 17 df 8a 8b 0c 24 4d 89 e9 e8 e4 1b 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 65 4a 0a [ 563.635755][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010246 [ 563.642701][ C0] RAX: f2547554d7fc9d00 RBX: ffffffff96efa4a0 RCX: ffffffff8c8bc740 [ 563.651281][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 563.659522][ C0] RBP: ffffffff8a8dedc0 R08: ffffffff90af73a7 R09: 1ffffffff215ee74 [ 563.667871][ C0] R10: dffffc0000000000 R11: fffffbfff215ee75 R12: ffff8880596ba600 [ 563.677195][ C0] R13: ffffffff892b51e0 R14: ffff8880596ba000 R15: ffff8880596ba490 [ 563.686005][ C0] ? rose_transmit_link+0x730/0x730 [ 563.691455][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 563.696941][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 563.702163][ C0] __kmem_cache_free+0xb6/0x1f0 [ 563.707371][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 563.712937][ C0] ? call_timer_fn+0x194/0x670 [ 563.717789][ C0] call_timer_fn+0x1ac/0x670 [ 563.722479][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 563.727677][ C0] ? call_timer_fn+0xcf/0x670 [ 563.732446][ C0] ? __run_timers+0x800/0x800 [ 563.737146][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 563.742621][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 563.748262][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 563.753496][ C0] __run_timers+0x53e/0x800 [ 563.758195][ C0] ? detach_timer+0x350/0x350 [ 563.763336][ C0] ? lock_chain_count+0x20/0x20 [ 563.768326][ C0] run_timer_softirq+0x63/0xf0 [ 563.773540][ C0] handle_softirqs+0x2a1/0x930 [ 563.778739][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 563.784026][ C0] ? do_softirq+0x210/0x210 [ 563.788712][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 563.794099][ C0] __irq_exit_rcu+0x13b/0x230 [ 563.798855][ C0] ? irq_exit_rcu+0x20/0x20 [ 563.803374][ C0] irq_exit_rcu+0x5/0x20 [ 563.807791][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 563.814917][ C0] [ 563.818140][ C0] [ 563.821419][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 563.827784][ C0] RIP: 0010:default_idle+0xb/0x10 [ 563.833188][ C0] Code: 48 89 df e8 47 c2 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 eb 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 563.852976][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 563.859093][ C0] RAX: f2547554d7fc9d00 RBX: ffffffff8a37c257 RCX: f2547554d7fc9d00 [ 563.867596][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 563.876009][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 563.884325][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 563.892654][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 563.901161][ C0] ? default_idle_call+0x77/0xc0 [ 563.906629][ C0] default_idle_call+0x84/0xc0 [ 563.912035][ C0] do_idle+0x3a2/0x680 [ 563.916359][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 563.922094][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 563.927377][ C0] ? asm_sysvec_error_interrupt+0x10/0x20 [ 563.933538][ C0] ? schedule_idle+0x57/0x90 [ 563.938303][ C0] cpu_startup_entry+0x3f/0x60 [ 563.943082][ C0] rest_init+0x2dc/0x300 [ 563.947576][ C0] ? time_init+0x33/0x33 [ 563.951809][ C0] arch_call_rest_init+0xa/0xa [ 563.956829][ C0] start_kernel+0x493/0x53c [ 563.961537][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 563.967919][ C0] [ 563.971611][ C0] Kernel Offset: disabled [ 563.976257][ C0] Rebooting in 86400 seconds..