last executing test programs: 27.853847989s ago: executing program 0 (id=1362): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) connect$rose(r0, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x200}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_TDLS_MGMT(r1, 0x0, 0x400c5) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0x5, @mcast1, 0x6}}, 0x0, 0x0, 0x41, 0x0, "44d4726a7989a769a7100b1a21d8dd85f80af0e6984f1acd3513893520b99014d4bc47ff7d04f963f7fb9487dfd2b673683ba8b46863a63dfcfd8d3dba3d99fa6d11f74cd3349c92e459b826b36c6c41"}, 0xd8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000f80)={{r1, &(0x7f0000000680)='\x00', 0x2ae980, &(0x7f00000006c0)={@_ha_fsid={[0x5, 0x40]}, {0x9, 0x7, 0x4, 0xfffffffffffffff9}}, 0x6, &(0x7f0000000700), 0x0}, 0x5, &(0x7f0000000e80)=[{0x3, 0x9, 0x0, 0x0, 0x0, 0x1a}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x1, 0x7, &(0x7f0000000b00)='/&:#*^\x00', 0x0}, {0x2, 0xa, 0x0, &(0x7f0000000c80)="b9cf967c8daeab3096e83bdf77db75aa6160892eec484e4939d9c20c5a789ff193f521d97645b3b15c098f47dd96d489a61b9899577c6c60bb523a99c5c2e7c30b20ca52ed97425654e7ac10144530ac656ef7143e17f15a39b99b97c23f331576a6d81740f32163e1e034061e89bbd039b88486f771a4bcc8599fa670be64d61057d141", 0x84, 0x2}, {0x3, 0x1, 0x0, &(0x7f0000000e40)="10b887609fc1", 0x6, 0x10}]}) accept4$netrom(0xffffffffffffffff, &(0x7f0000002b00)={{}, [@null, @remote, @null, @null, @rose, @default, @null, @bcast]}, 0x0, 0x800) r2 = epoll_create1(0x80000) r3 = gettid() accept4$ax25(0xffffffffffffffff, &(0x7f0000002bc0)={{0x3, @rose}, [@rose, @netrom, @null, @remote, @bcast, @remote, @null, @rose]}, &(0x7f0000002c40)=0x48, 0x80000) openat$cgroup(0xffffffffffffffff, &(0x7f0000002c80)='syz0\x00', 0x200002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000000640)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc, &(0x7f0000002a80)=[{&(0x7f0000001000)={0x14, 0x2c, 0x100, 0x70bd28, 0x25dfdbff, "", [@generic, @nested={0x4, 0xf, 0x0, 0x1, [@generic]}]}, 0x14}, {0x0}, {0x0}, {&(0x7f0000001800)={0x3c, 0x25, 0x300, 0x70bd27, 0x25dfdbfb, "", [@typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xac}, @nested={0x4, 0x87}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x10000}, @typed={0x4, 0x1a}]}, 0x3c}], 0x4, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc8, 0x880}, 0x2000c080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000003100)={0x7fff, [], 0x2, "b70e165d4d94b5"}) 26.973423552s ago: executing program 0 (id=1378): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x1}, 0x2a) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x5}, 0x1c) 26.890784386s ago: executing program 0 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x25, 0x101, 0x70bd25, 0xfefffffb, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r9}, &(0x7f0000000700), &(0x7f0000000740)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000180), &(0x7f0000000000), 0x2}, 0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @var={0x7, 0x0, 0x0, 0xe, 0x1, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @enum={0x0, 0x9, 0x0, 0x6, 0x4, [{0x5, 0x6}, {0x7, 0x5}, {0x10, 0x4}, {0x1, 0x923}, {0x9, 0x7}, {0x9, 0x7fffffff}, {0xd, 0x6}, {0x5, 0x1}, {0xf, 0x1}]}, @restrict={0xd}]}, {0x0, [0x61, 0x30, 0x30]}}, &(0x7f0000001480)=""/4096, 0xb1, 0x1000, 0x0, 0x4, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8) socket$key(0xf, 0x3, 0x2) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)={0x2, 0xa, 0x80, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbfd}, 0x10}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x2, 0x90, 0x202, r9, 0x8001, '\x00', r2, r10, 0x3, 0x0, 0x2, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r12, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x110e22fff6) close(r13) 25.889826855s ago: executing program 0 (id=1397): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7848, 0x0) 25.847628888s ago: executing program 0 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000007c40)=""/4086, 0xff6}, {&(0x7f0000005700)=""/4089, 0xff9}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000008c40)=""/4092, 0xffc}, {&(0x7f0000002700)=""/194, 0xc2}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/55, 0x37}], 0x7}, 0x0) 25.566728531s ago: executing program 0 (id=1404): getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="213ff2fe85bff9d1f37538e486dd6306ce22667f88"], 0x66) 25.453397947s ago: executing program 32 (id=1404): getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="213ff2fe85bff9d1f37538e486dd6306ce22667f88"], 0x66) 14.305369416s ago: executing program 4 (id=1464): syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629", 0x82}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c584171", 0xa3}, {&(0x7f0000002840)="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", 0xdf9}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab", 0x4c}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99", 0x40}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d4b1c9c788b1d70d0485447b3b2c683f8cdf37f5d5fcf837d48d671dbad0b918fcbc5633f56e4329d259d716c5f1fc663bbd106e9e3962ab76b0619d5329b39605552c5ed6e56d92fa515eb4bbb20defc655176a41edc1a4dc32b950579b8832ad92cc97914467ed3c7b24cf13032503e7d4a7332", 0xf0}, {&(0x7f0000000e00)="bf83903af3912b25320771861a97d9099887b5133b772fd4b99cb75c05cc6056c51d5bb95835f9b0158c4cfee49435eee968d62cc9e3f2170f885492ef045fe78a057d2f5d22250b0d1832e4e7d9caf59cb596b09bdb792e92381b57fa01c34b662c00464d755260824c4afcf590616c92c6de993cbafa", 0x77}, {0x0}], 0x9, 0xfffffffd, 0x2000008) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.387067811s ago: executing program 4 (id=1469): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='f', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x40081271, 0x3) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) 9.031654696s ago: executing program 4 (id=1474): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x10}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8.94649605s ago: executing program 4 (id=1476): shutdown(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0xb, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r3, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}}, 0x0) 8.417542346s ago: executing program 5 (id=1479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Captur'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 6.934254879s ago: executing program 1 (id=1481): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='f', @ANYBLOB=',rootm', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x40081271, 0x3) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) 6.843337823s ago: executing program 5 (id=1482): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='f', @ANYBLOB=',roo', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x40081271, 0x3) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) 5.266863201s ago: executing program 4 (id=1484): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r0, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") syz_open_dev$usbmon(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x80) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x3) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x15, 0x0, &(0x7f0000000100)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 4.306740468s ago: executing program 2 (id=1490): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) msgsnd(r2, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 4.25969809s ago: executing program 5 (id=1491): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.974966285s ago: executing program 2 (id=1492): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r1}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) msgget$private(0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000004c0)={0x3, 0x2, 0x2, 0x0, 0x6}) 3.965924825s ago: executing program 5 (id=1493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5, [{0x9, 0x72, 0xb, 0xffffffff, 0xfffffffb, 0xfff}]}, [{0x7, 0x8, 0x2, 0x80000001, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff0, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x7fffffff, 0x3, 0x7}, {0x101, 0x9, 0x410, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5352, 0x74d77b97, 0xfffffd8b, 0x0, 0x1}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x5, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x94, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x6, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xa6, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x205}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x0, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x7, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0xfff, 0x101, 0x5, 0xfffffc01, 0x800}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0x0, 0x2}, {0x8, 0x7, 0x8, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x3}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x9, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x2, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0x1, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x8000052, 0x8, 0x8, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0x7}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x3, 0x4, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb5c, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0x9}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x1ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x4, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x80000001, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x6, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0xb, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x7, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0x6, 0x80000000, 0x2, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0xd8, 0xe, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x9, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x9}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x4, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x7, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x5}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, 0x0, 0x4) 3.762154315s ago: executing program 1 (id=1494): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1'}, 0xb) msgsnd(0x0, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 3.390480323s ago: executing program 3 (id=1495): memfd_secret(0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.309042547s ago: executing program 1 (id=1496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000003, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b554", 0x7, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 2.422601461s ago: executing program 2 (id=1497): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071194700000000008510000002000000850000005b00000095000000000000009500a504000000006c0ec1084c0d7eb3105f3248024beab8ff4642b3ef414c3725c43e7da9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x84000000) sendmsg$rds(r3, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, 0xf, 0x6, 0xb81, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x3f, 0x2, 0x0, 0x0, "e543c064a9c2e134c87737179c3f3b506af8a3eff69f95b903fd3256eb7ab9415da023b615fcd93168b1a961f755810516c4907f950522da4e3718013d9d8bf2"}}}}, 0x0) 2.262638239s ago: executing program 5 (id=1498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.262150349s ago: executing program 3 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.112245256s ago: executing program 3 (id=1500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)}, 0x8bb3a321ef809a) 1.993013812s ago: executing program 1 (id=1501): sendto$inet(0xffffffffffffffff, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20004010, 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.896472047s ago: executing program 5 (id=1502): sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20004010, 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.895808717s ago: executing program 2 (id=1503): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) msgsnd(r2, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 1.810544601s ago: executing program 3 (id=1504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 1.530573445s ago: executing program 3 (id=1505): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 1.388017982s ago: executing program 2 (id=1506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x803, 0x10001, 0x5, 0x80, 0x404}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 857.731958ms ago: executing program 4 (id=1507): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) msgsnd(r4, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 786.500871ms ago: executing program 1 (id=1508): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) msgsnd(r2, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 474.659647ms ago: executing program 3 (id=1509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}}, 0x24}}, 0x800) 64.386337ms ago: executing program 1 (id=1510): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 0s ago: executing program 2 (id=1511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000003, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000", 0xb, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): dge_slave_0) entered disabled state [ 60.219163][ T4199] device bridge_slave_0 entered promiscuous mode [ 60.233563][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.241289][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.249768][ T4199] device bridge_slave_1 entered promiscuous mode [ 60.258445][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.268532][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.276111][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.303506][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.315323][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.322678][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.350142][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.368519][ T4185] team0: Port device team_slave_0 added [ 60.383249][ T4185] team0: Port device team_slave_1 added [ 60.391147][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.407396][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.414682][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.443654][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.501674][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.513480][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.529418][ T4187] team0: Port device team_slave_0 added [ 60.536050][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.545275][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.571773][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.592985][ T4191] device hsr_slave_0 entered promiscuous mode [ 60.600733][ T4191] device hsr_slave_1 entered promiscuous mode [ 60.616540][ T4187] team0: Port device team_slave_1 added [ 60.623344][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.630616][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.657601][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.703012][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.710035][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.717297][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.726238][ T4186] Cannot create hsr debugfs directory [ 60.734870][ T4199] team0: Port device team_slave_0 added [ 60.746091][ T4199] team0: Port device team_slave_1 added [ 60.781505][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.789065][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.817460][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.853985][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.861421][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.891587][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.912631][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.920954][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.928648][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.936477][ T4185] Cannot create hsr debugfs directory [ 60.957958][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.965382][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.992702][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.023849][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.031977][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.059958][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.088639][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 61.088639][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 61.126292][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.134315][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.141367][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.149132][ T4187] Cannot create hsr debugfs directory [ 61.168054][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 61.182468][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 61.196013][ T4199] device hsr_slave_0 entered promiscuous mode [ 61.203180][ T4199] device hsr_slave_1 entered promiscuous mode [ 61.210224][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.219371][ T4199] Cannot create hsr debugfs directory [ 61.248002][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 61.459956][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.475078][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.485018][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.507024][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.547124][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.557223][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.582560][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.592624][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.645259][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.656104][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.670631][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.682624][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.770693][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.789972][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.801192][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.817298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.829822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.839836][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.864649][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.881177][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.895774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.905917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.915757][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.923551][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.934169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.944999][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.970614][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.980922][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.992608][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.001582][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.011173][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.023102][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.032255][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.040088][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.061461][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.071481][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.080831][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.088131][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.108983][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.121978][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.141347][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.150490][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.161243][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.170689][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.180900][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.189939][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.199979][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.209460][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.218391][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.227379][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.236665][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.249055][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.256524][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.264815][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.276542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.286525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.296567][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.329035][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.335961][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.346683][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.360527][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.371290][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.381851][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.393998][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.404597][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.416794][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.441998][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.451039][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.464828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.475412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.509077][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.521198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.532702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.553328][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.563932][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.573167][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.583287][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.590694][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.601971][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.626257][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.674417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.685701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.698868][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.707244][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.716963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.726665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.762021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.779596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.795523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.805147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.816785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.835703][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.867186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.875712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.884088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.893572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.901984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.911566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.920873][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.928726][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.937528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.946573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.956625][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.963987][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.972001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.981593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.998708][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.006230][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.016625][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.026573][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.036422][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.045189][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.053380][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.070510][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.081448][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.092014][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.103911][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.116245][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.128762][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.147160][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.161903][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.169072][ T1106] Bluetooth: hci0: command 0x041b tx timeout [ 63.169177][ T1106] Bluetooth: hci2: command 0x041b tx timeout [ 63.183127][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.193850][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.203689][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.212448][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.241901][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.251119][ T1106] Bluetooth: hci1: command 0x041b tx timeout [ 63.264658][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.274196][ T1106] Bluetooth: hci3: command 0x041b tx timeout [ 63.289546][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.300285][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.309078][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.318778][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.328826][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 63.357933][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.367340][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.380944][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.388357][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.398867][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.410354][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.419233][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.426651][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.435141][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.446035][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.455280][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.465865][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.495139][ T4191] device veth0_vlan entered promiscuous mode [ 63.506890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.518232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.530608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.539774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.548761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.557222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.566917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.575729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.584166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.592996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.604318][ T4186] device veth0_vlan entered promiscuous mode [ 63.626238][ T4186] device veth1_vlan entered promiscuous mode [ 63.641980][ T4191] device veth1_vlan entered promiscuous mode [ 63.674132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.692332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.706693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.716704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.728070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.736247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.751910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.766766][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.795197][ T4186] device veth0_macvtap entered promiscuous mode [ 63.818027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.834848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.844401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.855473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.865173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.876192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.886000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.898080][ T4186] device veth1_macvtap entered promiscuous mode [ 63.916593][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.937963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.947463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.957527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.969192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.978698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.990449][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.004598][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.025716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.036833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.047521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.056181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.068391][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.077590][ T4191] device veth0_macvtap entered promiscuous mode [ 64.101703][ T4185] device veth0_vlan entered promiscuous mode [ 64.128694][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.136921][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.162685][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.174108][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.187165][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.199885][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.209897][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.219253][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.228772][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.257715][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.273567][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.284986][ T4191] device veth1_macvtap entered promiscuous mode [ 64.300171][ T4185] device veth1_vlan entered promiscuous mode [ 64.342465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.351812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.360833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.368865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.410915][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.422326][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.433913][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.445967][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.455169][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.465375][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.474780][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.484187][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.493929][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.525406][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.536901][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.549289][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.561043][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.570375][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.579290][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.588541][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.613612][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.624015][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.674526][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.684523][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.696289][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.706296][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.716352][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.725306][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.734985][ T4199] device veth0_vlan entered promiscuous mode [ 64.750746][ T4185] device veth0_macvtap entered promiscuous mode [ 64.782389][ T4199] device veth1_vlan entered promiscuous mode [ 64.788683][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.799347][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.815724][ T4185] device veth1_macvtap entered promiscuous mode [ 64.825435][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.835008][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.844180][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.854808][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.864545][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.879288][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.916547][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.924864][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.940306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.953026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.962708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.971663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.980224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.988532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.006380][ T4187] device veth0_vlan entered promiscuous mode [ 65.044169][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.047034][ T4187] device veth1_vlan entered promiscuous mode [ 65.059041][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.066621][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.080556][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.091166][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.100662][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.112568][ T4199] device veth0_macvtap entered promiscuous mode [ 65.137443][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.148176][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.150973][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.156230][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.167240][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.193521][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.205727][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.221657][ T4199] device veth1_macvtap entered promiscuous mode [ 65.240766][ T4187] device veth0_macvtap entered promiscuous mode [ 65.248847][ T1106] Bluetooth: hci2: command 0x040f tx timeout [ 65.250876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.255367][ T1106] Bluetooth: hci0: command 0x040f tx timeout [ 65.270486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.281131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.289795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.298050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.307346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.317091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.326455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.335776][ T1106] Bluetooth: hci3: command 0x040f tx timeout [ 65.337220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.351366][ T1106] Bluetooth: hci1: command 0x040f tx timeout [ 65.367686][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.381677][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.392336][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.404042][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.415143][ T1106] Bluetooth: hci4: command 0x040f tx timeout [ 65.421649][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.441868][ T4187] device veth1_macvtap entered promiscuous mode [ 65.457985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.467303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.477734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.491427][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.503720][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.530342][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.551639][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.565895][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.579748][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.590285][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.622878][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.634280][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.654263][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.681617][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.696242][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.707353][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.765562][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.783524][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.794292][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.817812][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.817830][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.817846][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.884219][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.897231][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.909913][ T4275] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 65.915602][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.930349][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.950505][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.965427][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.981467][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.992712][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.006957][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.023820][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.039280][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.052051][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.078146][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.088353][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.126004][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.140633][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.151949][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.162978][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.173270][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.185132][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.195510][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.206670][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.219654][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.232295][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.241880][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.252655][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.261851][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.274854][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.285140][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.307054][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.316407][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.325679][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.335470][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.546172][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.581970][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.614999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.719005][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.727390][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.777000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.840554][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.864845][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.892555][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.914471][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.942821][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.984651][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.105487][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.114824][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.118871][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.131896][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.132178][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.169622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.329093][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 67.335932][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 67.408905][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 67.416689][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 67.488118][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 67.569006][ T4325] binder: 4322:4325 ioctl c0306201 0 returned -14 [ 67.942284][ T4333] device syzkaller0 entered promiscuous mode [ 68.540850][ T4366] device syzkaller0 entered promiscuous mode [ 68.548503][ T4370] Zero length message leads to an empty skb [ 68.591117][ T4370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.860649][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 68.934467][ T4389] device syzkaller0 entered promiscuous mode [ 69.442090][ T4419] binder: 4418:4419 ioctl c0306201 0 returned -14 [ 69.923507][ T4435] input: syz0 as /devices/virtual/input/input5 [ 70.402944][ T4442] loop0: detected capacity change from 0 to 2048 [ 70.616301][ T4445] device syzkaller0 entered promiscuous mode [ 70.693307][ T4451] device syzkaller0 entered promiscuous mode [ 70.715255][ T4458] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.239836][ T4477] device syzkaller0 entered promiscuous mode [ 71.606623][ T4485] atomic_op ffff888077ece998 conn xmit_atomic 0000000000000000 [ 71.698718][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.707213][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.823138][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 71.856402][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 72.140940][ T4498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 72.211498][ T4502] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 72.329267][ T4508] binder: 4507:4508 ioctl c0306201 0 returned -14 [ 72.758873][ T4517] device syzkaller0 entered promiscuous mode [ 73.504231][ T4543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.533816][ T4543] bond0: (slave rose0): Enslaving as an active interface with an up link [ 73.594821][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 73.713832][ T4568] loop0: detected capacity change from 0 to 2048 [ 73.955333][ T4574] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.264309][ T4585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 74.408757][ T4590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.453745][ T4551] loop4: detected capacity change from 0 to 40427 [ 74.502051][ T4551] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 74.531077][ T4551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 74.646971][ T4551] F2FS-fs (loop4): invalid crc value [ 74.657679][ T4596] device syzkaller0 entered promiscuous mode [ 74.784619][ T4551] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 74.995705][ T4551] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 75.010543][ T4551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.123732][ T4551] attempt to access beyond end of device [ 75.123732][ T4551] loop4: rw=2049, want=53344, limit=40427 [ 75.368366][ T4617] attempt to access beyond end of device [ 75.368366][ T4617] loop4: rw=2049, want=53472, limit=40427 [ 75.505464][ T4614] device syzkaller0 entered promiscuous mode [ 75.727609][ T4629] device syzkaller0 entered promiscuous mode [ 75.762983][ T4199] attempt to access beyond end of device [ 75.762983][ T4199] loop4: rw=2049, want=45104, limit=40427 [ 76.079287][ T4641] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 77.100424][ T4665] loop0: detected capacity change from 0 to 4096 [ 77.212461][ T4671] device syzkaller0 entered promiscuous mode [ 77.238488][ T4665] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 77.381746][ T4665] ntfs3: loop0: Failed to load $Extend. [ 77.472894][ T4688] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 77.853089][ T4700] ======================================================= [ 77.853089][ T4700] WARNING: The mand mount option has been deprecated and [ 77.853089][ T4700] and is ignored by this kernel. Remove the mand [ 77.853089][ T4700] option from the mount to silence this warning. [ 77.853089][ T4700] ======================================================= [ 78.666302][ T4713] device syzkaller0 entered promiscuous mode [ 78.914894][ T4723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 79.693858][ T4740] device syzkaller0 entered promiscuous mode [ 79.961503][ T4752] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 80.001119][ T4759] binder: 4758:4759 ioctl c0306201 0 returned -14 [ 80.120853][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 80.158348][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 80.254316][ T4768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 80.342751][ T4763] netlink: 'syz.3.109': attribute type 4 has an invalid length. [ 80.628897][ T4781] loop0: detected capacity change from 0 to 4096 [ 81.306962][ T4781] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 81.401001][ T4781] ntfs3: loop0: Failed to load $Extend. [ 81.471583][ T4791] fuse: Bad value for 'group_id' [ 81.574765][ T4795] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 81.906764][ T21] cfg80211: failed to load regulatory.db [ 82.214011][ T4810] device syzkaller0 entered promiscuous mode [ 82.845915][ T4818] device syzkaller0 entered promiscuous mode [ 83.244025][ T4846] tipc: Started in network mode [ 83.268051][ T4846] tipc: Node identity c2349235f787, cluster identity 4711 [ 83.303481][ T4846] tipc: Enabled bearer , priority 0 [ 83.453487][ T4844] device syzkaller0 entered promiscuous mode [ 83.542609][ T4846] tipc: Resetting bearer [ 83.555253][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.566128][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.852501][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.897496][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.940721][ T4860] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.994262][ T4843] tipc: Resetting bearer [ 84.023713][ T4843] tipc: Disabling bearer [ 84.028820][ T4862] loop2: detected capacity change from 0 to 4096 [ 84.088090][ T4862] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.132926][ T4862] ntfs3: loop2: Failed to load $Extend. [ 84.359565][ T4865] device syzkaller0 entered promiscuous mode [ 84.609039][ T4876] device syzkaller0 entered promiscuous mode [ 84.980171][ T4890] device syzkaller0 entered promiscuous mode [ 85.028595][ T4893] device syzkaller1 entered promiscuous mode [ 85.398278][ T4900] loop3: detected capacity change from 0 to 256 [ 86.948297][ T4909] device syzkaller0 entered promiscuous mode [ 87.155579][ T4919] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.264132][ T4917] device syzkaller0 entered promiscuous mode [ 87.371327][ T4926] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 87.813438][ T4939] loop4: detected capacity change from 0 to 256 [ 88.525833][ T4941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.673735][ T4950] device syzkaller0 entered promiscuous mode [ 88.743036][ T4924] loop3: detected capacity change from 0 to 40427 [ 88.771018][ T4924] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 88.801435][ T4924] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 88.830724][ T4924] F2FS-fs (loop3): invalid crc value [ 88.891301][ T4924] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 88.984505][ T4924] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 88.998533][ T4924] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.059826][ T4924] attempt to access beyond end of device [ 89.059826][ T4924] loop3: rw=2049, want=53344, limit=40427 [ 89.378023][ T4972] attempt to access beyond end of device [ 89.378023][ T4972] loop3: rw=2049, want=53472, limit=40427 [ 89.664522][ T4967] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 89.871065][ T4191] attempt to access beyond end of device [ 89.871065][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 89.919699][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.183'. [ 89.997958][ T4987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.184'. [ 90.033374][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 90.300397][ T4990] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 90.666003][ T5004] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 90.768833][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 90.784197][ T5007] netlink: 'syz.2.191': attribute type 4 has an invalid length. [ 91.285633][ T5014] loop1: detected capacity change from 0 to 40427 [ 91.317460][ T5014] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 91.324964][ T5014] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 91.364021][ T5014] F2FS-fs (loop1): invalid crc value [ 91.413136][ T5014] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 91.472024][ T5014] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 91.481433][ T5014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.522621][ T5014] attempt to access beyond end of device [ 91.522621][ T5014] loop1: rw=2049, want=53344, limit=40427 [ 91.540553][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.550178][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.834599][ T5031] attempt to access beyond end of device [ 91.834599][ T5031] loop1: rw=2049, want=53472, limit=40427 [ 92.215006][ T4187] attempt to access beyond end of device [ 92.215006][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 92.532380][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.579467][ T5022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.914454][ T5022] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.924480][ T5022] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.934141][ T5022] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.943663][ T5022] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.463338][ T5067] device syzkaller0 entered promiscuous mode [ 93.671779][ T5075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.207'. [ 93.757025][ T5077] device syzkaller0 entered promiscuous mode [ 94.545875][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.553438][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.196166][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.230135][ T5081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.518162][ T5081] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.527529][ T5081] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.537240][ T5081] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.546987][ T5081] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.787657][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 96.009712][ T5128] device syzkaller0 entered promiscuous mode [ 96.127870][ T5133] loop3: detected capacity change from 0 to 256 [ 97.074982][ T5142] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 97.142232][ T5144] device syzkaller0 entered promiscuous mode [ 97.680998][ T5165] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.785995][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.238'. [ 97.831410][ T5172] netlink: 'syz.4.238': attribute type 4 has an invalid length. [ 98.163672][ T5184] tipc: Started in network mode [ 98.169447][ T5184] tipc: Node identity b2a0a0a06934, cluster identity 4711 [ 98.188618][ T5184] tipc: Enabled bearer , priority 0 [ 98.197704][ T5184] device syzkaller0 entered promiscuous mode [ 98.205276][ T5185] tipc: Started in network mode [ 98.211145][ T5185] tipc: Node identity 1232d00ea83d, cluster identity 4711 [ 98.219864][ T5185] tipc: Enabled bearer , priority 0 [ 98.228336][ T5185] device syzkaller0 entered promiscuous mode [ 98.243616][ T5184] tipc: Resetting bearer [ 98.258725][ T5185] tipc: Resetting bearer [ 98.265790][ T5182] tipc: Resetting bearer [ 98.278647][ T5182] tipc: Disabling bearer [ 98.286915][ T5183] tipc: Resetting bearer [ 98.302018][ T5183] tipc: Disabling bearer [ 98.456037][ T5191] device syzkaller1 entered promiscuous mode [ 99.658887][ T5221] fuse: Unknown parameter 'grou00000000000000000000' [ 99.700170][ T5223] tipc: Started in network mode [ 99.722843][ T5223] tipc: Node identity 66fe9459c6a, cluster identity 4711 [ 99.746207][ T5223] tipc: Enabled bearer , priority 0 [ 99.838567][ T5230] device syzkaller0 entered promiscuous mode [ 99.996463][ T5224] device syzkaller0 entered promiscuous mode [ 100.038567][ T5230] tipc: Resetting bearer [ 100.068918][ T5219] tipc: Resetting bearer [ 100.091710][ T5219] tipc: Disabling bearer [ 100.237010][ T5246] device syzkaller0 entered promiscuous mode [ 100.314560][ T5246] tipc: Enabled bearer , priority 0 [ 100.394371][ T5245] tipc: Resetting bearer [ 100.432573][ T5245] tipc: Disabling bearer [ 100.852187][ T5256] netlink: 64 bytes leftover after parsing attributes in process `syz.0.265'. [ 101.277062][ T5262] netlink: 6 bytes leftover after parsing attributes in process `syz.3.266'. [ 101.307699][ T5264] netlink: 'syz.2.267': attribute type 3 has an invalid length. [ 101.348727][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.265'. [ 101.358063][ T5256] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.365354][ T5258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'. [ 101.509215][ T5258] device gretap1 entered promiscuous mode [ 101.827328][ T5280] fuse: Unknown parameter 'grou00000000000000000000' [ 102.605085][ T5289] atomic_op ffff88814c43c198 conn xmit_atomic 0000000000000000 [ 103.802307][ T5304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 105.203023][ T5325] fuse: Unknown parameter 'grou00000000000000000000' [ 105.420893][ T5337] device syzkaller0 entered promiscuous mode [ 105.438300][ T5337] 0: reclassify loop, rule prio 0, protocol 800 [ 106.521925][ T5358] device syzkaller0 entered promiscuous mode [ 107.091744][ T5378] atomic_op ffff8880621f4198 conn xmit_atomic 0000000000000000 [ 107.608949][ T5387] fuse: Unknown parameter 'group_i00000000000000000000' [ 108.144736][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.152876][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.577346][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.609780][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.782576][ T5390] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.792586][ T5390] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.803288][ T5390] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.813062][ T5390] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.873961][ T5404] device syzkaller0 entered promiscuous mode [ 109.024069][ T5427] device syzkaller0 entered promiscuous mode [ 109.085342][ T5435] netlink: 104 bytes leftover after parsing attributes in process `syz.4.316'. [ 109.185045][ T5441] netlink: 768 bytes leftover after parsing attributes in process `syz.0.320'. [ 109.556231][ T5449] loop0: detected capacity change from 0 to 256 [ 109.668755][ T5452] atomic_op ffff88807e8f7998 conn xmit_atomic 0000000000000000 [ 110.531900][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.539877][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.976693][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.018311][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.316294][ T5456] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.326406][ T5456] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.336380][ T5456] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.346798][ T5456] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.472765][ T5474] device syzkaller0 entered promiscuous mode [ 111.524959][ T5476] device syzkaller0 entered promiscuous mode [ 111.769755][ T5488] device syzkaller0 entered promiscuous mode [ 111.948998][ T5491] loop1: detected capacity change from 0 to 256 [ 112.527683][ T5507] device syzkaller0 entered promiscuous mode [ 112.696958][ T5513] device syzkaller0 entered promiscuous mode [ 112.859465][ T5515] device syzkaller0 entered promiscuous mode [ 113.023591][ T5523] device syzkaller0 entered promiscuous mode [ 113.200187][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 113.247366][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 113.286146][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 113.317914][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 113.539222][ T5547] device syzkaller0 entered promiscuous mode [ 113.686293][ T5552] device syzkaller0 entered promiscuous mode [ 113.708709][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 113.904284][ T5564] device syzkaller0 entered promiscuous mode [ 113.999619][ T5567] device syzkaller0 entered promiscuous mode [ 114.040945][ T5568] device syzkaller0 entered promiscuous mode [ 114.743454][ T5591] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 114.969654][ T5598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.376'. [ 115.053457][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 116.248795][ T5605] loop2: detected capacity change from 0 to 131072 [ 116.265748][ T5613] device syzkaller0 entered promiscuous mode [ 116.320327][ T5605] XFS: ikeep mount option is deprecated. [ 116.477946][ T5605] XFS (loop2): Mounting V5 Filesystem [ 116.747263][ T5605] XFS (loop2): Starting recovery (logdev: internal) [ 116.792465][ T5605] XFS (loop2): Ending recovery (logdev: internal) [ 117.516800][ T4185] XFS (loop2): Unmounting Filesystem [ 117.605953][ T5610] loop3: detected capacity change from 0 to 40427 [ 117.669906][ T5542] ODEBUG: Out of memory. ODEBUG disabled [ 117.763314][ T5610] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 117.777886][ T5610] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 117.809375][ T5610] F2FS-fs (loop3): invalid crc value [ 117.872726][ T5610] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 118.135692][ T5610] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 118.163108][ T5610] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.248500][ T5610] attempt to access beyond end of device [ 118.248500][ T5610] loop3: rw=2049, want=53344, limit=40427 [ 118.482078][ T5610] attempt to access beyond end of device [ 118.482078][ T5610] loop3: rw=2049, want=53472, limit=40427 [ 118.673026][ T4191] attempt to access beyond end of device [ 118.673026][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 119.290202][ T5653] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 119.669493][ T5657] device syzkaller0 entered promiscuous mode [ 120.469894][ T5542] Set syz1 is full, maxelem 65536 reached [ 120.549741][ T5668] device syzkaller0 entered promiscuous mode [ 121.450898][ T5677] loop1: detected capacity change from 0 to 131072 [ 121.498643][ T5677] XFS: ikeep mount option is deprecated. [ 121.667261][ T5698] device syzkaller0 entered promiscuous mode [ 121.751091][ T5677] XFS (loop1): Mounting V5 Filesystem [ 121.892220][ T5677] XFS (loop1): Starting recovery (logdev: internal) [ 121.918053][ T5677] XFS (loop1): Ending recovery (logdev: internal) [ 122.142877][ T5712] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 122.694563][ T4187] XFS (loop1): Unmounting Filesystem [ 123.377679][ T5741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 123.418976][ T5741] netlink: 'syz.2.411': attribute type 4 has an invalid length. [ 123.505684][ T5746] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 124.217158][ T5760] loop2: detected capacity change from 0 to 131072 [ 124.238859][ T5760] XFS: ikeep mount option is deprecated. [ 124.356397][ T5760] XFS (loop2): Mounting V5 Filesystem [ 124.491608][ T5777] device syzkaller0 entered promiscuous mode [ 124.509456][ T5760] XFS (loop2): Starting recovery (logdev: internal) [ 124.535010][ T5760] XFS (loop2): Ending recovery (logdev: internal) [ 125.221074][ T4185] XFS (loop2): Unmounting Filesystem [ 125.397091][ T5792] device syzkaller0 entered promiscuous mode [ 125.682804][ T5805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.423'. [ 125.743603][ T5805] netlink: 'syz.4.423': attribute type 4 has an invalid length. [ 125.932129][ T5807] device syzkaller0 entered promiscuous mode [ 126.408043][ T5818] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 126.895502][ T5852] device syzkaller0 entered promiscuous mode [ 126.925301][ T5856] tipc: Enabled bearer , priority 0 [ 126.977195][ T5856] device syzkaller0 entered promiscuous mode [ 126.988951][ T5854] tipc: Resetting bearer [ 127.010063][ T5854] tipc: Disabling bearer [ 127.054300][ T5867] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 127.108725][ T5869] netlink: 48 bytes leftover after parsing attributes in process `syz.2.436'. [ 127.233711][ T5873] device syzkaller0 entered promiscuous mode [ 127.599769][ T5881] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 127.936054][ T5892] device syzkaller0 entered promiscuous mode [ 127.965472][ T5893] device syzkaller0 entered promiscuous mode [ 129.069147][ T5904] tipc: Started in network mode [ 129.074987][ T5904] tipc: Node identity f26199ac18f8, cluster identity 4711 [ 129.083397][ T5904] tipc: Enabled bearer , priority 0 [ 129.091370][ T5904] device syzkaller0 entered promiscuous mode [ 129.116886][ T5903] tipc: Resetting bearer [ 129.149581][ T5903] tipc: Disabling bearer [ 129.277159][ T5900] device syzkaller0 entered promiscuous mode [ 129.716717][ T5912] device syzkaller0 entered promiscuous mode [ 129.883408][ T5928] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 130.056230][ T5932] atomic_op ffff88807cce4998 conn xmit_atomic 0000000000000000 [ 131.054377][ T5946] device syzkaller0 entered promiscuous mode [ 131.191032][ T5961] tipc: Enabled bearer , priority 0 [ 131.216909][ T5961] tipc: Resetting bearer [ 131.263505][ T5959] tipc: Disabling bearer [ 131.746640][ T5976] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 132.733993][ T5965] loop3: detected capacity change from 0 to 40427 [ 132.873747][ T5965] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 132.887594][ T6007] device syzkaller0 entered promiscuous mode [ 132.896259][ T5965] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 132.965281][ T5965] F2FS-fs (loop3): invalid crc value [ 133.023859][ T5965] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 133.082555][ T6011] device syzkaller0 entered promiscuous mode [ 133.092272][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.101699][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.399183][ T5965] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 133.419769][ T6025] tipc: Enabling of bearer rejected, failed to enable media [ 133.445193][ T5965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.541110][ T5965] attempt to access beyond end of device [ 133.541110][ T5965] loop3: rw=2049, want=53344, limit=40427 [ 133.645432][ T5965] attempt to access beyond end of device [ 133.645432][ T5965] loop3: rw=2049, want=53472, limit=40427 [ 133.994535][ T4191] attempt to access beyond end of device [ 133.994535][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 134.052505][ T6036] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 134.355800][ T6050] device syzkaller0 entered promiscuous mode [ 134.514423][ T6050] tipc: Enabled bearer , priority 0 [ 134.574787][ T6049] tipc: Resetting bearer [ 134.619143][ T6049] tipc: Disabling bearer [ 134.741458][ T6041] loop1: detected capacity change from 0 to 131072 [ 134.788695][ T6041] XFS: ikeep mount option is deprecated. [ 134.841654][ T6061] device syzkaller0 entered promiscuous mode [ 134.966844][ T6041] XFS (loop1): Mounting V5 Filesystem [ 135.159607][ T6041] XFS (loop1): Starting recovery (logdev: internal) [ 135.165427][ T6082] device syzkaller0 entered promiscuous mode [ 135.202054][ T6041] XFS (loop1): Ending recovery (logdev: internal) [ 135.223365][ T6041] overlayfs: failed to resolve './bus': -2 [ 135.812497][ T6100] device vlan2 entered promiscuous mode [ 136.015510][ T4187] XFS (loop1): Unmounting Filesystem [ 136.036461][ T6107] device syzkaller0 entered promiscuous mode [ 136.485898][ T6121] device syzkaller0 entered promiscuous mode [ 136.920044][ T6135] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 137.097988][ T6144] device syzkaller0 entered promiscuous mode [ 137.632131][ T6168] device syzkaller0 entered promiscuous mode [ 138.457880][ T6171] device syzkaller0 entered promiscuous mode [ 138.963382][ T6207] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 139.010086][ T6209] device syzkaller0 entered promiscuous mode [ 139.236834][ T6211] device syzkaller0 entered promiscuous mode [ 140.238457][ T6246] loop0: detected capacity change from 0 to 2048 [ 140.334758][ T6254] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.677686][ T6266] device syzkaller0 entered promiscuous mode [ 141.144483][ T6282] device syzkaller0 entered promiscuous mode [ 141.507064][ T6307] device syzkaller0 entered promiscuous mode [ 141.565224][ T6311] device syzkaller0 entered promiscuous mode [ 141.621753][ T6316] device syzkaller0 entered promiscuous mode [ 141.649664][ T6316] tipc: Enabled bearer , priority 0 [ 141.659762][ T6314] tipc: Resetting bearer [ 141.711516][ T6314] tipc: Disabling bearer [ 141.847367][ T6325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.540'. [ 141.858420][ T6325] netlink: 'syz.4.540': attribute type 4 has an invalid length. [ 141.982215][ T6327] device syzkaller0 entered promiscuous mode [ 142.098268][ T6330] device syzkaller0 entered promiscuous mode [ 142.430039][ T6333] device syzkaller0 entered promiscuous mode [ 142.469262][ T6335] device syzkaller0 entered promiscuous mode [ 142.682944][ T6342] device syzkaller0 entered promiscuous mode [ 142.752503][ T6360] device syzkaller0 entered promiscuous mode [ 142.808882][ T6367] device syzkaller0 entered promiscuous mode [ 142.974561][ T6377] tipc: Enabled bearer , priority 0 [ 143.034402][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 143.058157][ T6366] tipc: Resetting bearer [ 143.103311][ T6366] tipc: Disabling bearer [ 143.117018][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 143.323445][ T6393] device syzkaller0 entered promiscuous mode [ 144.401350][ T6416] device syzkaller0 entered promiscuous mode [ 144.428643][ T6436] device syzkaller0 entered promiscuous mode [ 144.508220][ T6441] fuse: Bad value for 'fd' [ 144.574605][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 144.609045][ T6443] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 144.647201][ T6446] device syzkaller0 entered promiscuous mode [ 144.663588][ T6446] tipc: Enabled bearer , priority 0 [ 144.729779][ T6445] tipc: Resetting bearer [ 144.804400][ T6445] tipc: Disabling bearer [ 145.184547][ T6477] device syzkaller0 entered promiscuous mode [ 145.199015][ T6479] device syzkaller0 entered promiscuous mode [ 145.321521][ T6481] device syzkaller0 entered promiscuous mode [ 145.754316][ T6491] device syzkaller0 entered promiscuous mode [ 145.844301][ T6493] device syzkaller0 entered promiscuous mode [ 145.934864][ T6504] device syzkaller0 entered promiscuous mode [ 145.967544][ T6504] tipc: Enabled bearer , priority 0 [ 146.044259][ T6503] tipc: Resetting bearer [ 146.071571][ T6503] tipc: Disabling bearer [ 146.185191][ T6520] fuse: Invalid rootmode [ 146.225515][ T6519] loop0: detected capacity change from 0 to 2048 [ 146.240204][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 146.263959][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'. [ 146.306071][ T6525] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.219664][ T6565] device syzkaller0 entered promiscuous mode [ 147.246798][ T6566] device syzkaller0 entered promiscuous mode [ 147.271492][ T6567] device syzkaller0 entered promiscuous mode [ 147.626188][ T6590] device syzkaller0 entered promiscuous mode [ 147.665438][ T6593] loop1: detected capacity change from 0 to 2048 [ 147.737612][ T6594] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.141870][ T6599] fuse: Invalid rootmode [ 148.309011][ T6602] device vlan3 entered promiscuous mode [ 148.551508][ T6610] device syzkaller0 entered promiscuous mode [ 148.583769][ T6612] device syzkaller0 entered promiscuous mode [ 149.127237][ T6631] device syzkaller0 entered promiscuous mode [ 149.136085][ T6627] device syzkaller0 entered promiscuous mode [ 149.153526][ T6637] tipc: Enabled bearer , priority 0 [ 149.199351][ T6626] tipc: Resetting bearer [ 149.222357][ T6626] tipc: Disabling bearer [ 149.243830][ T6639] device syzkaller0 entered promiscuous mode [ 149.368602][ T6650] loop1: detected capacity change from 0 to 2048 [ 149.423229][ T6655] netlink: 104 bytes leftover after parsing attributes in process `syz.3.619'. [ 149.447229][ T6656] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.516704][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 149.554650][ T6658] netlink: 'syz.2.620': attribute type 4 has an invalid length. [ 149.606933][ T6660] device syzkaller0 entered promiscuous mode [ 149.633284][ T6662] device syzkaller0 entered promiscuous mode [ 149.691758][ T6665] device syzkaller0 entered promiscuous mode [ 149.768126][ T6667] device syzkaller0 entered promiscuous mode [ 150.044312][ T6681] device syzkaller0 entered promiscuous mode [ 150.105680][ T6645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.253479][ T6687] loop2: detected capacity change from 0 to 4096 [ 150.332392][ T6687] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 150.387001][ T6687] ntfs3: loop2: Failed to load $Extend. [ 150.467218][ T6704] device syzkaller0 entered promiscuous mode [ 150.560610][ T6706] device syzkaller0 entered promiscuous mode [ 150.976111][ T6728] loop1: detected capacity change from 0 to 2048 [ 151.096325][ T6732] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.558904][ T6738] device syzkaller0 entered promiscuous mode [ 152.245905][ T6771] tipc: Enabled bearer , priority 0 [ 152.293636][ T6770] tipc: Disabling bearer [ 152.318491][ T6779] atomic_op ffff888074bea998 conn xmit_atomic 0000000000000000 [ 152.345086][ T6778] device syzkaller0 entered promiscuous mode [ 152.399496][ T6781] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 152.991153][ T6799] loop2: detected capacity change from 0 to 2048 [ 153.122205][ T6808] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.237634][ T6803] device syzkaller0 entered promiscuous mode [ 153.268698][ T6806] device syzkaller0 entered promiscuous mode [ 153.456715][ T6815] fuse: Bad value for 'rootmode' [ 154.041840][ T6840] device syzkaller0 entered promiscuous mode [ 154.051601][ T6838] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 154.450117][ T6855] device syzkaller0 entered promiscuous mode [ 154.458542][ T6863] loop2: detected capacity change from 0 to 2048 [ 154.523661][ T6868] netlink: 224 bytes leftover after parsing attributes in process `syz.1.675'. [ 154.595485][ T6869] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.275078][ T6889] tipc: Enabled bearer , priority 0 [ 155.317462][ T6895] binder: 6894:6895 ioctl c0306201 0 returned -14 [ 155.356819][ T6889] tipc: Resetting bearer [ 155.381478][ T6897] device syzkaller0 entered promiscuous mode [ 155.392128][ T6888] tipc: Disabling bearer [ 155.626559][ T6909] loop0: detected capacity change from 0 to 2048 [ 155.664748][ T6903] device syzkaller0 entered promiscuous mode [ 155.692512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 155.716912][ T6911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.018819][ T6914] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 156.501771][ T6933] tipc: Enabling of bearer rejected, failed to enable media [ 156.695008][ T6940] device syzkaller0 entered promiscuous mode [ 156.757544][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'. [ 156.784701][ T6938] Illegal XDP return value 4294967285, expect packet loss! [ 156.896698][ T6947] binder: 6945:6947 ioctl c0306201 0 returned -14 [ 157.018991][ T6956] netlink: 104 bytes leftover after parsing attributes in process `syz.0.705'. [ 157.022590][ T6943] device syzkaller0 entered promiscuous mode [ 157.118946][ T6952] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 157.428336][ T6972] device vlan2 entered promiscuous mode [ 157.538498][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.713'. [ 157.587039][ T6978] loop0: detected capacity change from 0 to 4096 [ 157.595247][ T6979] netlink: 'syz.1.713': attribute type 4 has an invalid length. [ 157.758961][ T6978] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 157.831178][ T6978] ntfs3: loop0: Failed to load $Extend. [ 157.865003][ T6988] device syzkaller0 entered promiscuous mode [ 158.263531][ T6992] device syzkaller0 entered promiscuous mode [ 158.445710][ T7007] fuse: Unknown parameter 'use00000000000000000000' [ 158.498237][ T7004] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 159.143685][ T7029] atomic_op ffff88802b402198 conn xmit_atomic 0000000000000000 [ 159.453426][ T7047] device syzkaller0 entered promiscuous mode [ 159.463576][ T7046] tipc: Enabled bearer , priority 0 [ 159.472209][ T7048] device syzkaller0 entered promiscuous mode [ 159.535960][ T7046] tipc: Resetting bearer [ 159.564681][ T7045] tipc: Resetting bearer [ 159.582458][ T7045] tipc: Disabling bearer [ 159.685013][ T7052] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 159.832196][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.743'. [ 159.983853][ T7062] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 160.011149][ T7064] atomic_op ffff88807e8cb998 conn xmit_atomic 0000000000000000 [ 160.258353][ T7074] device syzkaller0 entered promiscuous mode [ 161.152181][ T7095] device syzkaller0 entered promiscuous mode [ 161.275950][ T7103] loop1: detected capacity change from 0 to 2048 [ 161.325618][ T7106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.848324][ T7113] atomic_op ffff88807e8cd998 conn xmit_atomic 0000000000000000 [ 162.196922][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'. [ 162.247166][ T7119] netlink: 'syz.0.759': attribute type 4 has an invalid length. [ 162.356003][ T7125] device syzkaller0 entered promiscuous mode [ 162.385591][ T7123] tipc: Enabled bearer , priority 0 [ 162.479901][ T7122] tipc: Disabling bearer [ 162.596301][ T7107] loop3: detected capacity change from 0 to 40427 [ 162.620164][ T7139] device syzkaller0 entered promiscuous mode [ 162.678201][ T7107] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 162.686871][ T7107] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 162.724362][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.768'. [ 162.769401][ T7107] F2FS-fs (loop3): invalid crc value [ 162.829477][ T7107] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 162.992002][ T7151] loop2: detected capacity change from 0 to 2048 [ 163.055782][ T7107] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 163.078067][ T7107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.088240][ T7157] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.280105][ T7158] atomic_op ffff88807e065198 conn xmit_atomic 0000000000000000 [ 164.156406][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'. [ 164.283316][ T7172] device syzkaller0 entered promiscuous mode [ 164.435200][ T7186] tipc: Enabled bearer , priority 0 [ 164.476539][ T7186] tipc: Resetting bearer [ 164.495854][ T7185] tipc: Disabling bearer [ 164.855037][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 165.020999][ T7205] atomic_op ffff888077775998 conn xmit_atomic 0000000000000000 [ 165.399680][ T4191] attempt to access beyond end of device [ 165.399680][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 165.848222][ T7227] device syzkaller0 entered promiscuous mode [ 166.159465][ T4238] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77 [ 166.494642][ T7268] device vlan3 entered promiscuous mode [ 166.829560][ T7274] atomic_op ffff888074a5d998 conn xmit_atomic 0000000000000000 [ 167.048865][ T7243] loop4: detected capacity change from 0 to 40427 [ 167.131386][ T7243] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 167.165000][ T7243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 167.207780][ T7243] F2FS-fs (loop4): invalid crc value [ 167.281153][ T7243] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 167.517371][ T7243] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 167.542788][ T7243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.616467][ T7243] attempt to access beyond end of device [ 167.616467][ T7243] loop4: rw=2049, want=53344, limit=40427 [ 167.937149][ T7291] attempt to access beyond end of device [ 167.937149][ T7291] loop4: rw=2049, want=53472, limit=40427 [ 168.126012][ T7290] loop3: detected capacity change from 0 to 4096 [ 168.269070][ T7290] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 168.333501][ T7290] ntfs3: loop3: Failed to load $Extend. [ 168.917323][ T7294] overlayfs: failed to resolve './file1': -2 [ 169.698789][ T4199] attempt to access beyond end of device [ 169.698789][ T4199] loop4: rw=2049, want=45104, limit=40427 [ 170.194519][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.823'. [ 170.236350][ T7343] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 170.421397][ T7351] overlayfs: failed to resolve './file1': -2 [ 171.316663][ T7375] device syzkaller0 entered promiscuous mode [ 171.547259][ T7377] tipc: Enabling of bearer rejected, failed to enable media [ 173.144018][ T7433] device syzkaller0 entered promiscuous mode [ 173.413847][ T7445] tipc: Enabling of bearer rejected, failed to enable media [ 173.549311][ T7457] tipc: Enabled bearer , priority 0 [ 173.586145][ T7454] tipc: Disabling bearer [ 174.714268][ T7480] loop0: detected capacity change from 0 to 4096 [ 174.990787][ T7480] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 175.025181][ T7480] ntfs3: loop0: Failed to load $Extend. [ 175.038844][ T7489] atomic_op ffff88807961f198 conn xmit_atomic 0000000000000000 [ 175.099057][ T7485] device syzkaller0 entered promiscuous mode [ 175.641549][ T7495] device syzkaller0 entered promiscuous mode [ 176.135579][ T7506] device syzkaller0 entered promiscuous mode [ 176.156492][ T7511] tipc: Enabling of bearer rejected, failed to enable media [ 176.668686][ T7535] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 176.710286][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 176.864496][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.890598][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.925146][ T7542] loop3: detected capacity change from 0 to 4096 [ 176.933118][ T7537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.074803][ T7542] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 177.116084][ T7542] ntfs3: loop3: Failed to load $Extend. [ 177.195766][ T7544] device syzkaller0 entered promiscuous mode [ 177.235879][ T7537] syz.2.869 (7537) used greatest stack depth: 19984 bytes left [ 177.976048][ T7554] device syzkaller0 entered promiscuous mode [ 178.068617][ T7558] device syzkaller0 entered promiscuous mode [ 178.630482][ T7584] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 178.947672][ T7591] device syzkaller0 entered promiscuous mode [ 179.324511][ T7605] device syzkaller0 entered promiscuous mode [ 179.591283][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'. [ 179.608628][ T7612] netlink: 'syz.0.893': attribute type 4 has an invalid length. [ 179.747771][ T7614] loop3: detected capacity change from 0 to 256 [ 180.398469][ T7624] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.643713][ T7633] device syzkaller0 entered promiscuous mode [ 180.746920][ T7492] Set syz1 is full, maxelem 65536 reached [ 180.815804][ T7640] device syzkaller0 entered promiscuous mode [ 181.048107][ T7648] device syzkaller0 entered promiscuous mode [ 181.076799][ T7650] device syzkaller0 entered promiscuous mode [ 181.139512][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.907'. [ 181.216129][ T7658] netlink: 'syz.4.907': attribute type 4 has an invalid length. [ 181.248116][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 181.258163][ T1106] Bluetooth: hci1: command 0x0406 tx timeout [ 181.288501][ T1106] Bluetooth: hci3: command 0x0406 tx timeout [ 181.393924][ T7666] fuse: Unknown parameter '00000000000000000000003' [ 181.439324][ T7669] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 181.449501][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 181.690382][ T7684] device syzkaller0 entered promiscuous mode [ 182.359835][ T7699] device syzkaller0 entered promiscuous mode [ 182.400578][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 182.424322][ T7706] netlink: 'syz.4.921': attribute type 4 has an invalid length. [ 182.613890][ T7708] device syzkaller0 entered promiscuous mode [ 182.804769][ T7721] device syzkaller0 entered promiscuous mode [ 183.177962][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 183.258209][ T7748] atomic_op ffff88814cb7a998 conn xmit_atomic 0000000000000000 [ 183.515705][ T7749] netlink: 'syz.0.934': attribute type 4 has an invalid length. [ 184.133193][ T7753] device syzkaller0 entered promiscuous mode [ 184.359866][ T7762] device syzkaller0 entered promiscuous mode [ 184.804907][ T7794] device syzkaller0 entered promiscuous mode [ 185.457932][ T7806] atomic_op ffff888077302998 conn xmit_atomic 0000000000000000 [ 185.482245][ T7803] loop3: detected capacity change from 0 to 256 [ 185.857253][ T7812] loop1: detected capacity change from 0 to 2048 [ 185.943085][ T7819] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.962024][ T7821] tipc: Enabling of bearer rejected, failed to enable media [ 186.068352][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.949'. [ 186.140432][ T7823] netlink: 'syz.3.949': attribute type 4 has an invalid length. [ 186.975624][ T7840] device syzkaller0 entered promiscuous mode [ 187.098847][ T7845] device syzkaller0 entered promiscuous mode [ 187.177420][ T7848] device syzkaller0 entered promiscuous mode [ 187.426584][ T7858] loop0: detected capacity change from 0 to 256 [ 188.224999][ T7861] device syzkaller0 entered promiscuous mode [ 188.256312][ T7867] device syzkaller0 entered promiscuous mode [ 188.472664][ T7869] atomic_op ffff888026d17998 conn xmit_atomic 0000000000000000 [ 189.183409][ T7873] loop2: detected capacity change from 0 to 2048 [ 189.277060][ T7876] device syzkaller0 entered promiscuous mode [ 189.298128][ T7879] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.434396][ T7880] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 190.081362][ T7883] tipc: Enabled bearer , priority 0 [ 190.166134][ T7881] tipc: Disabling bearer [ 190.354418][ T7893] device syzkaller0 entered promiscuous mode [ 190.380460][ T7891] device syzkaller0 entered promiscuous mode [ 190.424478][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.974'. [ 190.437424][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.446057][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.900025][ T7909] loop4: detected capacity change from 0 to 256 [ 191.601000][ T7906] device syzkaller0 entered promiscuous mode [ 191.672990][ T7918] device syzkaller0 entered promiscuous mode [ 192.008340][ T7927] loop4: detected capacity change from 0 to 2048 [ 192.047058][ T7929] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.097933][ T7931] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.293593][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.878454][ T7940] device syzkaller0 entered promiscuous mode [ 193.273817][ T7945] device syzkaller0 entered promiscuous mode [ 193.311244][ T7948] device syzkaller0 entered promiscuous mode [ 193.463022][ T7961] tipc: Enabled bearer , priority 0 [ 193.484000][ T7961] tipc: Resetting bearer [ 193.514574][ T7960] tipc: Disabling bearer [ 193.835985][ T7967] loop0: detected capacity change from 0 to 256 [ 194.530246][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.536848][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.574091][ T7973] device syzkaller0 entered promiscuous mode [ 194.596676][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 194.616569][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 194.655440][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 194.829874][ T7983] loop1: detected capacity change from 0 to 2048 [ 194.868163][ T7986] device syzkaller0 entered promiscuous mode [ 194.927182][ T7988] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.859777][ T7995] device syzkaller0 entered promiscuous mode [ 197.052654][ T8021] device syzkaller0 entered promiscuous mode [ 197.159417][ T8025] loop2: detected capacity change from 0 to 256 [ 197.863002][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 197.949402][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 197.995630][ T8036] device syzkaller0 entered promiscuous mode [ 198.092360][ T8039] loop3: detected capacity change from 0 to 2048 [ 198.174558][ T8044] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.403251][ T8047] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 199.679748][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'. [ 200.018180][ T8074] loop1: detected capacity change from 0 to 4096 [ 200.113435][ T8074] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 200.142675][ T8077] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 200.205284][ T8074] ntfs3: loop1: Failed to load $Extend. [ 200.219984][ T8079] loop2: detected capacity change from 0 to 2048 [ 200.422799][ T8082] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.511686][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 201.511733][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 202.744355][ T8098] device syzkaller0 entered promiscuous mode [ 202.783020][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 203.140203][ T8123] device syzkaller0 entered promiscuous mode [ 203.172056][ T8121] loop4: detected capacity change from 0 to 2048 [ 203.262321][ T8127] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.491702][ T8133] device syzkaller0 entered promiscuous mode [ 204.564700][ T8137] loop0: detected capacity change from 0 to 256 [ 204.827843][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1048'. [ 205.108987][ T8146] device syzkaller0 entered promiscuous mode [ 205.611672][ T8168] device syzkaller0 entered promiscuous mode [ 205.731108][ T8172] device syzkaller0 entered promiscuous mode [ 206.833355][ T8180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1060'. [ 206.960222][ T8180] netlink: 'syz.4.1060': attribute type 4 has an invalid length. [ 206.981863][ T8185] device syzkaller0 entered promiscuous mode [ 207.293777][ T8189] loop3: detected capacity change from 0 to 256 [ 208.016632][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 208.052527][ T8196] device syzkaller0 entered promiscuous mode [ 208.597543][ T8205] device syzkaller0 entered promiscuous mode [ 209.415724][ T8216] device syzkaller0 entered promiscuous mode [ 209.564808][ T8223] device syzkaller0 entered promiscuous mode [ 209.692614][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1077'. [ 209.709638][ T8226] device syzkaller0 entered promiscuous mode [ 209.730480][ T8228] netlink: 'syz.3.1077': attribute type 4 has an invalid length. [ 209.832239][ T8230] device syzkaller0 entered promiscuous mode [ 211.241340][ T8260] device syzkaller0 entered promiscuous mode [ 211.396331][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1088'. [ 211.983633][ T8263] device syzkaller0 entered promiscuous mode [ 212.160638][ T8281] netlink: 'syz.4.1090': attribute type 8 has an invalid length. [ 212.289960][ T8292] device syzkaller0 entered promiscuous mode [ 213.606458][ T8318] device syzkaller0 entered promiscuous mode [ 213.643627][ T8320] netlink: 'syz.4.1106': attribute type 29 has an invalid length. [ 213.702726][ T8320] netlink: 'syz.4.1106': attribute type 29 has an invalid length. [ 213.730672][ T8326] netlink: 'syz.4.1106': attribute type 29 has an invalid length. [ 213.743584][ T8325] device syzkaller0 entered promiscuous mode [ 213.793400][ T8323] device syzkaller0 entered promiscuous mode [ 213.890854][ T8333] device syzkaller0 entered promiscuous mode [ 214.266184][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1114'. [ 215.264713][ T8361] device syzkaller0 entered promiscuous mode [ 215.427295][ T8369] device syzkaller0 entered promiscuous mode [ 215.541632][ T8374] device syzkaller0 entered promiscuous mode [ 216.503268][ T8385] netlink: 996 bytes leftover after parsing attributes in process `syz.1.1130'. [ 216.855875][ T8372] loop4: detected capacity change from 0 to 40427 [ 216.946445][ T8387] device syzkaller0 entered promiscuous mode [ 217.036034][ T8372] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 217.043227][ T8372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 217.086370][ T8372] F2FS-fs (loop4): invalid crc value [ 217.108674][ T8393] device syzkaller0 entered promiscuous mode [ 217.144145][ T8372] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 217.274973][ T8372] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 217.282466][ T8372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.471596][ T8400] device syzkaller0 entered promiscuous mode [ 217.511333][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1137'. [ 217.538910][ T8403] fuse: Bad value for 'fd' [ 218.036505][ T8412] device syzkaller0 entered promiscuous mode [ 218.194347][ T4199] attempt to access beyond end of device [ 218.194347][ T4199] loop4: rw=2049, want=45104, limit=40427 [ 218.652841][ T8423] device syzkaller0 entered promiscuous mode [ 218.950743][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1142'. [ 219.639669][ T8435] device syzkaller0 entered promiscuous mode [ 219.713815][ T8437] device syzkaller0 entered promiscuous mode [ 219.738109][ T8437] tipc: Enabled bearer , priority 0 [ 219.773138][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1148'. [ 219.792750][ T8436] tipc: Resetting bearer [ 219.810659][ T8436] tipc: Disabling bearer [ 219.826384][ T8439] netlink: 'syz.3.1148': attribute type 4 has an invalid length. [ 220.163230][ T8449] device syzkaller0 entered promiscuous mode [ 220.759755][ T8444] loop0: detected capacity change from 0 to 131072 [ 220.835509][ T8459] device syzkaller0 entered promiscuous mode [ 220.843625][ T8444] XFS: ikeep mount option is deprecated. [ 220.903726][ T8444] XFS (loop0): Mounting V5 Filesystem [ 221.038060][ T8444] XFS (loop0): Starting recovery (logdev: internal) [ 221.184065][ T8444] XFS (loop0): Ending recovery (logdev: internal) [ 221.795721][ T8444] overlayfs: failed to resolve './bus': -2 [ 222.306453][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1163'. [ 222.320453][ T8491] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 222.598367][ T4186] XFS (loop0): Unmounting Filesystem [ 222.673676][ T8505] device syzkaller0 entered promiscuous mode [ 222.861519][ T8509] device syzkaller0 entered promiscuous mode [ 222.912638][ T8509] tipc: Enabled bearer , priority 0 [ 222.934223][ T8508] tipc: Resetting bearer [ 222.958456][ T8508] tipc: Disabling bearer [ 223.344436][ T8502] loop2: detected capacity change from 0 to 40427 [ 223.436420][ T8502] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 223.451921][ T8502] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 223.485710][ T8502] F2FS-fs (loop2): invalid crc value [ 223.543897][ T8502] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 223.583764][ T8529] device syzkaller0 entered promiscuous mode [ 223.890446][ T8502] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 223.917555][ T8502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 224.535466][ T8533] loop3: detected capacity change from 0 to 131072 [ 224.718550][ T8533] XFS: ikeep mount option is deprecated. [ 224.820059][ T8541] device syzkaller0 entered promiscuous mode [ 224.877981][ T8533] XFS (loop3): Mounting V5 Filesystem [ 224.947689][ C1] sched: RT throttling activated [ 225.018649][ T8533] XFS (loop3): Starting recovery (logdev: internal) [ 225.046795][ T8533] XFS (loop3): Ending recovery (logdev: internal) [ 225.574769][ T8559] device syzkaller0 entered promiscuous mode [ 225.826037][ T4191] XFS (loop3): Unmounting Filesystem [ 226.068772][ T8564] loop0: detected capacity change from 0 to 256 [ 226.086075][ T8568] device syzkaller0 entered promiscuous mode [ 226.316022][ T8572] device syzkaller0 entered promiscuous mode [ 226.369363][ T8574] device syzkaller0 entered promiscuous mode [ 226.846348][ T8581] device syzkaller0 entered promiscuous mode [ 227.084583][ T8585] device syzkaller0 entered promiscuous mode [ 227.327973][ T4226] Bluetooth: hci4: command 0x0406 tx timeout [ 227.465140][ T8579] loop4: detected capacity change from 0 to 40427 [ 227.519489][ T8598] device syzkaller0 entered promiscuous mode [ 227.543478][ T8579] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 227.587792][ T8579] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 227.631823][ T8579] F2FS-fs (loop4): invalid crc value [ 227.718970][ T8579] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 227.793579][ T8607] device syzkaller0 entered promiscuous mode [ 227.872656][ T8579] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 227.887044][ T8579] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.536535][ T8617] device syzkaller0 entered promiscuous mode [ 228.931314][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1207'. [ 229.069727][ T8624] device syzkaller0 entered promiscuous mode [ 229.379277][ T8643] loop2: detected capacity change from 0 to 256 [ 230.214217][ T8638] device syzkaller0 entered promiscuous mode [ 230.294843][ T8653] device syzkaller0 entered promiscuous mode [ 230.406458][ T8657] device syzkaller0 entered promiscuous mode [ 230.725764][ T8667] device syzkaller0 entered promiscuous mode [ 230.798622][ T8660] loop4: detected capacity change from 0 to 40427 [ 230.833018][ T8660] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 230.865398][ T8660] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 230.916033][ T8660] F2FS-fs (loop4): invalid crc value [ 230.973719][ T8660] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 231.156596][ T8660] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 231.164473][ T8660] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 231.823329][ T8686] device syzkaller0 entered promiscuous mode [ 232.380690][ T8698] loop0: detected capacity change from 0 to 256 [ 233.109728][ T8696] device syzkaller0 entered promiscuous mode [ 233.396976][ T8703] device syzkaller0 entered promiscuous mode [ 233.456926][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1226'. [ 233.590129][ T8708] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 233.668961][ T8710] device syzkaller0 entered promiscuous mode [ 233.690972][ T8710] tipc: Enabled bearer , priority 0 [ 233.722879][ T8714] device syzkaller0 entered promiscuous mode [ 233.790721][ T8709] tipc: Resetting bearer [ 233.879183][ T8709] tipc: Disabling bearer [ 234.266810][ T8730] device syzkaller0 entered promiscuous mode [ 234.374590][ T8735] device syzkaller0 entered promiscuous mode [ 234.386226][ T8738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1241'. [ 234.397416][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 234.411936][ T8738] netlink: 'syz.1.1241': attribute type 4 has an invalid length. [ 234.623101][ T8751] device syzkaller0 entered promiscuous mode [ 234.635139][ T8753] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 234.740270][ T8757] device syzkaller0 entered promiscuous mode [ 234.888172][ T8761] device syzkaller0 entered promiscuous mode [ 234.929218][ T8762] device syzkaller0 entered promiscuous mode [ 234.995873][ T8764] device syzkaller0 entered promiscuous mode [ 235.125140][ T8771] device syzkaller0 entered promiscuous mode [ 235.135852][ T8771] tipc: Enabled bearer , priority 0 [ 235.149185][ T8770] tipc: Resetting bearer [ 235.168362][ T8770] tipc: Disabling bearer [ 235.222156][ T8774] device syzkaller0 entered promiscuous mode [ 235.254721][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 235.266283][ T8778] netlink: 'syz.1.1254': attribute type 4 has an invalid length. [ 235.490360][ T8782] device syzkaller0 entered promiscuous mode [ 235.535935][ T8781] device syzkaller0 entered promiscuous mode [ 235.763948][ T8800] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 235.822861][ T8805] device syzkaller0 entered promiscuous mode [ 235.872579][ T8809] device syzkaller0 entered promiscuous mode [ 236.039414][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1267'. [ 236.083256][ T8817] device syzkaller0 entered promiscuous mode [ 236.110082][ T8815] device syzkaller0 entered promiscuous mode [ 236.135254][ T8814] netlink: 'syz.4.1267': attribute type 4 has an invalid length. [ 236.362296][ T8821] tipc: Enabled bearer , priority 0 [ 236.404718][ T8812] tipc: Resetting bearer [ 236.443105][ T8812] tipc: Disabling bearer [ 236.497105][ T8828] device syzkaller0 entered promiscuous mode [ 236.541355][ T8834] device syzkaller0 entered promiscuous mode [ 236.792425][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 236.881345][ T8844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 236.951293][ T8846] device syzkaller0 entered promiscuous mode [ 237.396851][ T8852] device syzkaller0 entered promiscuous mode [ 237.625606][ T8856] device syzkaller0 entered promiscuous mode [ 238.093350][ T8869] device syzkaller0 entered promiscuous mode [ 238.193823][ T8872] device syzkaller0 entered promiscuous mode [ 238.438611][ T8877] device syzkaller0 entered promiscuous mode [ 238.575971][ T8886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1292'. [ 238.597478][ T8887] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 238.700529][ T8890] device syzkaller0 entered promiscuous mode [ 238.812925][ T8838] Set syz1 is full, maxelem 65536 reached [ 238.896471][ T8896] device syzkaller0 entered promiscuous mode [ 239.136580][ T8903] device syzkaller0 entered promiscuous mode [ 239.167445][ T8910] device syzkaller0 entered promiscuous mode [ 239.243087][ T8915] device syzkaller0 entered promiscuous mode [ 239.374814][ T8923] device syzkaller0 entered promiscuous mode [ 239.443547][ T8928] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 239.613926][ T8935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1312'. [ 239.628232][ T8935] netlink: 'syz.0.1312': attribute type 4 has an invalid length. [ 240.378285][ T8942] device syzkaller0 entered promiscuous mode [ 240.676312][ T8964] device syzkaller0 entered promiscuous mode [ 240.742816][ T8951] device syzkaller0 entered promiscuous mode [ 240.831654][ T8970] device syzkaller0 entered promiscuous mode [ 240.939305][ T8974] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 240.984980][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1323'. [ 240.996302][ T8976] netlink: 'syz.2.1323': attribute type 4 has an invalid length. [ 241.081283][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'. [ 241.138180][ T8986] device syzkaller0 entered promiscuous mode [ 241.159836][ T8981] device syzkaller0 entered promiscuous mode [ 241.253624][ T8990] device syzkaller0 entered promiscuous mode [ 241.523501][ T8995] loop3: detected capacity change from 0 to 256 [ 242.312011][ T9009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1338'. [ 242.341903][ T9009] netlink: 'syz.4.1338': attribute type 4 has an invalid length. [ 242.371200][ T9006] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 242.403030][ T9011] device syzkaller0 entered promiscuous mode [ 242.642005][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 242.687595][ T9027] device syzkaller0 entered promiscuous mode [ 242.715424][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1347'. [ 242.846761][ T9035] device syzkaller0 entered promiscuous mode [ 242.854850][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1350'. [ 242.866034][ T9040] netlink: 'syz.1.1350': attribute type 4 has an invalid length. [ 242.876772][ T9035] tipc: Enabled bearer , priority 0 [ 242.889669][ T9033] tipc: Resetting bearer [ 242.912967][ T9033] tipc: Disabling bearer [ 242.975215][ T9042] device syzkaller0 entered promiscuous mode [ 242.985536][ T9044] device syzkaller0 entered promiscuous mode [ 243.094055][ T9048] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 243.262859][ T9056] device syzkaller0 entered promiscuous mode [ 243.294401][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1359'. [ 243.340054][ T9060] device syzkaller0 entered promiscuous mode [ 243.380849][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1361'. [ 243.399653][ T9062] netlink: 'syz.3.1361': attribute type 4 has an invalid length. [ 243.471312][ T9066] device syzkaller0 entered promiscuous mode [ 243.600028][ T9069] device syzkaller0 entered promiscuous mode [ 243.645035][ T9069] tipc: Enabled bearer , priority 0 [ 243.663180][ T9068] tipc: Resetting bearer [ 243.697564][ T9068] tipc: Disabling bearer [ 243.706065][ T9071] device syzkaller0 entered promiscuous mode [ 243.783879][ T9076] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 243.830853][ T9078] device syzkaller0 entered promiscuous mode [ 244.025709][ T9086] device syzkaller0 entered promiscuous mode [ 244.077983][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1374'. [ 244.088988][ T9090] netlink: 'syz.3.1374': attribute type 4 has an invalid length. [ 244.105667][ T9092] device syzkaller0 entered promiscuous mode [ 244.178025][ T9095] device syzkaller0 entered promiscuous mode [ 244.464098][ T9103] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 244.483451][ T9106] device syzkaller0 entered promiscuous mode [ 244.613121][ T9110] device syzkaller0 entered promiscuous mode [ 244.755211][ T9116] device syzkaller0 entered promiscuous mode [ 244.874159][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'. [ 244.884986][ T9124] netlink: 'syz.4.1390': attribute type 4 has an invalid length. [ 244.939078][ T9126] device syzkaller0 entered promiscuous mode [ 245.054295][ T9129] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 245.152617][ T9131] device syzkaller0 entered promiscuous mode [ 245.178801][ T9133] device syzkaller0 entered promiscuous mode [ 245.199352][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.207089][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.214467][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.221721][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.228790][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.235824][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.242843][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.249918][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.257215][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.264195][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.271433][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.278552][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.285861][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.293344][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.301130][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.308130][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.315260][ T9133] tc action pedit 'at' offset -2147483647 out of bounds [ 245.322585][ T9133] 0: reclassify loop, rule prio 0, protocol 800 [ 245.499070][ T9137] device syzkaller0 entered promiscuous mode [ 245.680436][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1403'. [ 245.713985][ T9151] device syzkaller0 entered promiscuous mode [ 245.758808][ T9155] netlink: 'syz.2.1403': attribute type 4 has an invalid length. [ 245.900128][ T9159] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 246.148995][ T9167] loop2: detected capacity change from 0 to 256 [ 247.185304][ T9161] loop4: detected capacity change from 0 to 40427 [ 247.232296][ T9161] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 247.266634][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 247.297111][ T9161] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 247.347583][ T9161] F2FS-fs (loop4): invalid crc value [ 247.395896][ T9161] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 247.555827][ T9161] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 247.586600][ T4288] tipc: Left network mode [ 247.621880][ T9161] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 247.669605][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.738499][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.778146][ T9165] device bridge_slave_0 entered promiscuous mode [ 247.805896][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.844943][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.876569][ T9165] device bridge_slave_1 entered promiscuous mode [ 248.316147][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.374644][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1417'. [ 248.417566][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.451644][ T9217] netlink: 'syz.1.1417': attribute type 4 has an invalid length. [ 248.510362][ T1106] Bluetooth: hci2: command 0x0409 tx timeout [ 248.597934][ T9165] team0: Port device team_slave_0 added [ 248.649501][ T9165] team0: Port device team_slave_1 added [ 248.714163][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.728498][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.832149][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.846216][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.864299][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.935845][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.978977][ T9226] device syzkaller0 entered promiscuous mode [ 249.053500][ T9234] device syzkaller0 entered promiscuous mode [ 249.091165][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.098470][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.106198][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.113619][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.121930][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.129604][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.136828][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.143973][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.151221][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.158542][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.165541][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.173143][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.180475][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.187951][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.195135][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.203035][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.210588][ T9234] tc action pedit 'at' offset -2147483647 out of bounds [ 249.218074][ T9234] 0: reclassify loop, rule prio 0, protocol 800 [ 249.227404][ T9165] device hsr_slave_0 entered promiscuous mode [ 249.236049][ T9165] device hsr_slave_1 entered promiscuous mode [ 249.243946][ T9165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.254964][ T9165] Cannot create hsr debugfs directory [ 249.485215][ T9244] netlink: 'syz.1.1425': attribute type 41 has an invalid length. [ 249.503545][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1425'. [ 249.758980][ T9261] device syzkaller0 entered promiscuous mode [ 250.166080][ T4288] device hsr_slave_0 left promiscuous mode [ 250.184889][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.240414][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.269541][ T4288] device bridge_slave_1 left promiscuous mode [ 250.290218][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.334737][ T4288] device bridge_slave_0 left promiscuous mode [ 250.349145][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.399452][ T9258] syz.4.1427 (9258) used greatest stack depth: 19600 bytes left [ 250.527863][ T1106] Bluetooth: hci2: command 0x041b tx timeout [ 250.921524][ T4288] team0 (unregistering): Port device team_slave_1 removed [ 250.946520][ T4288] team0 (unregistering): Port device team_slave_0 removed [ 250.974157][ T4288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.997107][ T4288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.162467][ T4288] bond0 (unregistering): Released all slaves [ 251.246758][ T9295] device syzkaller0 entered promiscuous mode [ 251.268819][ T9165] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.308495][ T9165] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.341836][ T9165] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.366600][ T9165] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.581512][ T9352] device syzkaller0 entered promiscuous mode [ 251.645464][ T9354] device syzkaller0 entered promiscuous mode [ 251.841162][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.943716][ T9373] netlink: 'syz.4.1442': attribute type 29 has an invalid length. [ 251.959933][ T9376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 251.996861][ T9362] device syzkaller0 entered promiscuous mode [ 252.038014][ T9373] netlink: 'syz.4.1442': attribute type 29 has an invalid length. [ 252.065522][ T9376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 252.126653][ T9379] netlink: 'syz.4.1442': attribute type 29 has an invalid length. [ 252.145446][ T9384] netlink: 'syz.4.1442': attribute type 29 has an invalid length. [ 252.283498][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 252.293518][ T9328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.312204][ T9328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.348194][ T9373] netlink: 'syz.4.1442': attribute type 29 has an invalid length. [ 252.383974][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.420813][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.472809][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.511155][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.519151][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.547287][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 252.595050][ T9399] netlink: 'syz.3.1445': attribute type 4 has an invalid length. [ 252.599067][ T9402] loop4: detected capacity change from 0 to 512 [ 252.610182][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 252.644183][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.664884][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.686100][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.730718][ T9402] EXT4-fs (loop4): Ignoring removed bh option [ 252.763163][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.770709][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.806502][ T9408] loop3: detected capacity change from 0 to 2048 [ 252.822998][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.848859][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.868984][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.880088][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.895498][ T9402] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 252.908247][ T9165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.922569][ T9165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.968111][ T9402] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.968951][ T9408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.002376][ T9403] device syzkaller0 entered promiscuous mode [ 253.034393][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.131189][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.212234][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.248747][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.310622][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.601515][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.692910][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.772528][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.054894][ T9423] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 254.113341][ T9420] loop1: detected capacity change from 0 to 2048 [ 254.117629][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.162917][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.223467][ T9420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.258923][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.409507][ T9437] process 'syz.1.1451' launched './file1' with NULL argv: empty string added [ 254.626233][ T9445] device syzkaller0 entered promiscuous mode [ 254.688360][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 254.909589][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.979297][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.032269][ T9457] device syzkaller0 entered promiscuous mode [ 255.079663][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.112083][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.422132][ T9165] device veth0_vlan entered promiscuous mode [ 255.466254][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.490549][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.561246][ T9165] device veth1_vlan entered promiscuous mode [ 255.676479][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.714018][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.753588][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.801523][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.847353][ T9165] device veth0_macvtap entered promiscuous mode [ 255.896305][ T9471] device syzkaller0 entered promiscuous mode [ 255.970008][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.977986][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011297][ T9165] device veth1_macvtap entered promiscuous mode [ 256.331701][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.348728][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.378816][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.450972][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.548876][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.579534][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.619204][ T9165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.667844][ T9165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.854585][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1462'. [ 256.937871][ T9165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.947437][ T9165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.998461][ T9493] device syzkaller0 entered promiscuous mode [ 257.106026][ T9500] device syzkaller0 entered promiscuous mode [ 257.482591][ T9516] loop1: detected capacity change from 0 to 2048 [ 257.528343][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.536811][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.578451][ T9516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.674922][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.678163][ T9330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.716091][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.588604][ T26] audit: type=1800 audit(1774500036.111:2): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1465" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 258.704969][ T9330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.167792][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 259.177715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 259.187447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 259.196705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 259.206545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 259.215896][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 259.225720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 259.247975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 259.257142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 259.264344][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 261.005327][ T9555] loop1: detected capacity change from 0 to 512 [ 261.096869][ T9555] EXT4-fs (loop1): Ignoring removed bh option [ 261.113075][ T9547] device syzkaller0 entered promiscuous mode [ 261.163243][ T9555] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 261.190891][ T9555] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.821659][ T9585] loop1: detected capacity change from 0 to 2048 [ 262.925101][ T9585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.226444][ T9625] loop4: detected capacity change from 0 to 512 [ 266.262999][ T9625] EXT4-fs (loop4): Ignoring removed bh option [ 266.328585][ T9626] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 266.342421][ T9625] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 266.384933][ T9625] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.677578][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'. [ 266.755346][ T9640] syz.2.1488 (9640) used obsolete PPPIOCDETACH ioctl [ 266.966601][ T9646] device syzkaller0 entered promiscuous mode [ 267.101772][ T9648] loop2: detected capacity change from 0 to 2048 [ 267.142287][ T9648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.539650][ T9660] loop1: detected capacity change from 0 to 2048 [ 267.805764][ T9660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.980383][ T9679] device syzkaller0 entered promiscuous mode [ 269.049489][ T9685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1499'. [ 269.077859][ T9680] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 269.236610][ T9690] device syzkaller0 entered promiscuous mode [ 269.347966][ T9693] loop1: detected capacity change from 0 to 1024 [ 269.432603][ T9693] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 269.484926][ T9698] loop5: detected capacity change from 0 to 1024 [ 269.525763][ T9697] loop2: detected capacity change from 0 to 2048 [ 269.553449][ T9693] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,data_err=abort,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 269.590542][ T9698] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 269.660613][ T9697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.876746][ T9698] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,data_err=abort,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 270.383909][ T9719] device syzkaller0 entered promiscuous mode [ 270.660780][ T9723] loop4: detected capacity change from 0 to 2048 [ 270.691942][ T9725] loop1: detected capacity change from 0 to 2048 [ 270.777782][ T9725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.831900][ T9723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.328499][ C0] ================================================================== [ 271.337911][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 271.346389][ C0] Read of size 2 at addr ffff88805f4c142a by task syz.4.1507/9729 [ 271.354610][ C0] [ 271.357196][ C0] CPU: 0 PID: 9729 Comm: syz.4.1507 Not tainted syzkaller #0 [ 271.365382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.376439][ C0] Call Trace: [ 271.379852][ C0] [ 271.382731][ C0] dump_stack_lvl+0x188/0x250 [ 271.387462][ C0] ? show_regs_print_info+0x20/0x20 [ 271.393194][ C0] ? _printk+0xda/0x130 [ 271.397860][ C0] ? rose_timer_expiry+0x470/0x490 [ 271.400822][ T26] audit: type=1800 audit(1774500049.131:3): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1507" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 271.403081][ C0] ? load_image+0x400/0x400 [ 271.427811][ C0] print_address_description+0x60/0x2d0 [ 271.433666][ C0] ? rose_timer_expiry+0x470/0x490 [ 271.439171][ C0] kasan_report+0xdf/0x130 [ 271.444218][ C0] ? rose_timer_expiry+0x470/0x490 [ 271.449706][ C0] rose_timer_expiry+0x470/0x490 [ 271.455178][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 271.460730][ C0] call_timer_fn+0x17b/0x540 [ 271.465937][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 271.471362][ C0] ? __run_timers+0x800/0x800 [ 271.476607][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 271.482491][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 271.488263][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 271.493961][ C0] __run_timers+0x53e/0x800 [ 271.499389][ C0] ? detach_timer+0x2b0/0x2b0 [ 271.504529][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 271.511232][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 271.516291][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 271.522384][ C0] run_timer_softirq+0x63/0xf0 [ 271.527696][ C0] handle_softirqs+0x339/0x830 [ 271.532987][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 271.538270][ C0] ? do_softirq+0x210/0x210 [ 271.542870][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 271.548339][ C0] __irq_exit_rcu+0x13b/0x230 [ 271.553033][ C0] ? irq_exit_rcu+0x20/0x20 [ 271.557557][ C0] irq_exit_rcu+0x5/0x20 [ 271.561966][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 271.567596][ C0] [ 271.571071][ C0] [ 271.574103][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.580422][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 271.586938][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 271.607579][ C0] RSP: 0018:ffffc90002f2f5c0 EFLAGS: 00000206 [ 271.614192][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 8b8109a21f753500 [ 271.622350][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 271.630551][ C0] RBP: ffffc90002f2f650 R08: ffffffff901d4177 R09: 1ffffffff203a82e [ 271.639609][ C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: dffffc0000000000 [ 271.648153][ C0] R13: 0000000000000000 R14: ffff88807ae99ec0 R15: 1ffff920005e5eb8 [ 271.656907][ C0] ? _raw_spin_unlock+0x40/0x40 [ 271.662213][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 271.667727][ C0] __wake_up_sync_key+0x128/0x190 [ 271.673385][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 271.679809][ C0] ? sock_load_diag_module+0x130/0x130 [ 271.686242][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 271.692591][ C0] ? unix_unhash+0x10/0x10 [ 271.697568][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 271.703088][ C0] ? mark_lock+0x94/0x320 [ 271.708312][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 271.713527][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 271.719163][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 271.723994][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 271.729598][ C0] ? import_iovec+0x6f/0xa0 [ 271.734408][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 271.739185][ C0] ? __sys_recvmsg+0x280/0x280 [ 271.744089][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 271.749158][ C0] ? __might_fault+0xb3/0x110 [ 271.753859][ C0] do_recvmmsg+0x382/0x850 [ 271.758455][ C0] ? __sys_recvmmsg+0x290/0x290 [ 271.763328][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 271.768950][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 271.774320][ C0] ? do_recvmmsg+0x850/0x850 [ 271.779163][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 271.784604][ C0] do_syscall_64+0x4c/0xa0 [ 271.789814][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.795613][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.801941][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.809219][ C0] RIP: 0033:0x7f5409f56799 [ 271.814194][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.835235][ C0] RSP: 002b:00007f540818f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 271.844276][ C0] RAX: ffffffffffffffda RBX: 00007f540a1d0090 RCX: 00007f5409f56799 [ 271.852421][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 271.861062][ C0] RBP: 00007f5409fecc99 R08: 0000000000000000 R09: 0000000000000000 [ 271.870151][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 271.878522][ C0] R13: 00007f540a1d0128 R14: 00007f540a1d0090 R15: 00007fffc5df42a8 [ 271.887553][ C0] [ 271.890768][ C0] [ 271.893297][ C0] Allocated by task 20: [ 271.897707][ C0] __kasan_kmalloc+0xb5/0xf0 [ 271.903026][ C0] __alloc_skb+0x22c/0x750 [ 271.907878][ C0] __napi_alloc_skb+0x151/0x2d0 [ 271.912813][ C0] page_to_skb+0x26a/0xcf0 [ 271.917710][ C0] receive_buf+0x14db/0x58e0 [ 271.922570][ C0] virtnet_poll+0x571/0xf40 [ 271.927476][ C0] __napi_poll+0xc0/0x430 [ 271.931905][ C0] net_rx_action+0x4d4/0xa10 [ 271.936854][ C0] handle_softirqs+0x339/0x830 [ 271.941913][ C0] run_ksoftirqd+0xa4/0x100 [ 271.946415][ C0] smpboot_thread_fn+0x4f6/0x970 [ 271.951374][ C0] kthread+0x436/0x520 [ 271.955714][ C0] ret_from_fork+0x1f/0x30 [ 271.960129][ C0] [ 271.962705][ C0] Freed by task 20: [ 271.966701][ C0] kasan_set_track+0x4b/0x70 [ 271.971482][ C0] kasan_set_free_info+0x1f/0x40 [ 271.976422][ C0] ____kasan_slab_free+0xd5/0x110 [ 271.982079][ C0] slab_free_freelist_hook+0xea/0x170 [ 271.987767][ C0] kfree+0xef/0x2a0 [ 271.991818][ C0] skb_release_data+0x6b8/0x800 [ 271.996930][ C0] kfree_skb_partial+0x6b/0x80 [ 272.002156][ C0] tcp_data_queue+0x1e4c/0x56f0 [ 272.007417][ C0] tcp_rcv_established+0xacd/0x1ce0 [ 272.013380][ C0] tcp_v4_do_rcv+0x44b/0x9b0 [ 272.018344][ C0] tcp_v4_rcv+0x26d8/0x2d10 [ 272.023392][ C0] ip_protocol_deliver_rcu+0x3ad/0x770 [ 272.029600][ C0] ip_local_deliver_finish+0x1d5/0x320 [ 272.035556][ C0] NF_HOOK+0x303/0x390 [ 272.040248][ C0] ip_sublist_rcv+0xa33/0xd30 [ 272.045696][ C0] ip_list_rcv+0x3ee/0x440 [ 272.050195][ C0] __netif_receive_skb_list_core+0x57f/0x750 [ 272.056949][ C0] netif_receive_skb_list_internal+0x898/0xbd0 [ 272.063369][ C0] napi_complete_done+0x378/0x850 [ 272.068935][ C0] virtnet_poll+0x955/0xf40 [ 272.073524][ C0] __napi_poll+0xc0/0x430 [ 272.077860][ C0] net_rx_action+0x4d4/0xa10 [ 272.082616][ C0] handle_softirqs+0x339/0x830 [ 272.087454][ C0] run_ksoftirqd+0xa4/0x100 [ 272.092540][ C0] smpboot_thread_fn+0x4f6/0x970 [ 272.098036][ C0] kthread+0x436/0x520 [ 272.102560][ C0] ret_from_fork+0x1f/0x30 [ 272.107430][ C0] [ 272.109774][ C0] Last potentially related work creation: [ 272.116132][ C0] kasan_save_stack+0x35/0x60 [ 272.121709][ C0] kasan_record_aux_stack+0xb8/0x100 [ 272.127082][ C0] call_rcu+0x189/0x950 [ 272.131623][ C0] nsim_fib6_event_fini+0xf5/0x1c0 [ 272.137040][ C0] nsim_fib_event_work+0x3cb/0x33e0 [ 272.142480][ C0] process_one_work+0x85f/0x1010 [ 272.147708][ C0] worker_thread+0xd60/0x1290 [ 272.152397][ C0] kthread+0x436/0x520 [ 272.156729][ C0] ret_from_fork+0x1f/0x30 [ 272.161318][ C0] [ 272.163844][ C0] Second to last potentially related work creation: [ 272.170880][ C0] kasan_save_stack+0x35/0x60 [ 272.176719][ C0] kasan_record_aux_stack+0xb8/0x100 [ 272.182667][ C0] call_rcu+0x189/0x950 [ 272.187175][ C0] ip6_route_info_create+0x9c5/0x1210 [ 272.193164][ C0] ip6_route_add+0x24/0x130 [ 272.197776][ C0] addrconf_add_dev+0x295/0x3c0 [ 272.203093][ C0] inet6_addr_add+0x18d/0x9c0 [ 272.210046][ C0] inet6_rtm_newaddr+0x64c/0x8f0 [ 272.218805][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 272.224325][ C0] netlink_rcv_skb+0x1f5/0x440 [ 272.229302][ C0] netlink_unicast+0x774/0x920 [ 272.234168][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 272.238928][ C0] __sys_sendto+0x46d/0x620 [ 272.244322][ C0] __x64_sys_sendto+0xda/0xf0 [ 272.249217][ C0] do_syscall_64+0x4c/0xa0 [ 272.254358][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.260526][ C0] [ 272.263274][ C0] The buggy address belongs to the object at ffff88805f4c1400 [ 272.263274][ C0] which belongs to the cache kmalloc-512 of size 512 [ 272.278509][ C0] The buggy address is located 42 bytes inside of [ 272.278509][ C0] 512-byte region [ffff88805f4c1400, ffff88805f4c1600) [ 272.292107][ C0] The buggy address belongs to the page: [ 272.299164][ C0] page:ffffea00017d3000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f4c0 [ 272.310496][ C0] head:ffffea00017d3000 order:2 compound_mapcount:0 compound_pincount:0 [ 272.320955][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 272.330306][ C0] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41c80 [ 272.341871][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 272.352051][ C0] page dumped because: kasan: bad access detected [ 272.359021][ C0] page_owner tracks the page as allocated [ 272.365178][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 63639130775, free_ts 18216346991 [ 272.386366][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 272.392609][ C0] __alloc_pages+0x1ee/0x480 [ 272.397934][ C0] new_slab+0xc0/0x4b0 [ 272.402266][ C0] ___slab_alloc+0x80a/0xdd0 [ 272.407696][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 272.414648][ C0] __alloc_skb+0x22c/0x750 [ 272.419236][ C0] netlink_sendmsg+0x654/0xbe0 [ 272.424416][ C0] __sys_sendto+0x46d/0x620 [ 272.429017][ C0] __x64_sys_sendto+0xda/0xf0 [ 272.433785][ C0] do_syscall_64+0x4c/0xa0 [ 272.438818][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.445500][ C0] page last free stack trace: [ 272.450884][ C0] free_unref_page_prepare+0x637/0x6c0 [ 272.456753][ C0] free_unref_page+0x8f/0x2a0 [ 272.461620][ C0] free_contig_range+0x96/0xf0 [ 272.466594][ C0] destroy_args+0xf0/0xa00 [ 272.471355][ C0] debug_vm_pgtable+0x321/0x380 [ 272.476780][ C0] do_one_initcall+0x272/0x730 [ 272.481998][ C0] do_initcall_level+0x137/0x1f0 [ 272.487106][ C0] do_initcalls+0x4b/0x90 [ 272.491856][ C0] kernel_init_freeable+0x3e9/0x570 [ 272.497312][ C0] kernel_init+0x19/0x1b0 [ 272.501757][ C0] ret_from_fork+0x1f/0x30 [ 272.506352][ C0] [ 272.509075][ C0] Memory state around the buggy address: [ 272.515625][ C0] ffff88805f4c1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 272.524583][ C0] ffff88805f4c1380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 272.533164][ C0] >ffff88805f4c1400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 272.541566][ C0] ^ [ 272.546915][ C0] ffff88805f4c1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 272.555136][ C0] ffff88805f4c1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 272.563354][ C0] ================================================================== [ 272.571490][ C0] Disabling lock debugging due to kernel taint [ 272.578142][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 272.585525][ C0] CPU: 0 PID: 9729 Comm: syz.4.1507 Tainted: G B syzkaller #0 [ 272.594819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.605544][ C0] Call Trace: [ 272.609466][ C0] [ 272.612302][ C0] dump_stack_lvl+0x188/0x250 [ 272.617425][ C0] ? show_regs_print_info+0x20/0x20 [ 272.622715][ C0] ? load_image+0x400/0x400 [ 272.627476][ C0] panic+0x2e5/0x810 [ 272.631451][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 272.636026][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 272.642496][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 272.649107][ C0] ? _raw_spin_unlock+0x40/0x40 [ 272.654267][ C0] ? print_memory_metadata+0x314/0x400 [ 272.661157][ C0] ? rose_timer_expiry+0x470/0x490 [ 272.667351][ C0] check_panic_on_warn+0x80/0xa0 [ 272.672604][ C0] ? rose_timer_expiry+0x470/0x490 [ 272.678900][ C0] end_report+0x6d/0xf0 [ 272.683608][ C0] kasan_report+0x102/0x130 [ 272.688500][ C0] ? rose_timer_expiry+0x470/0x490 [ 272.695387][ C0] rose_timer_expiry+0x470/0x490 [ 272.700614][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 272.706115][ C0] call_timer_fn+0x17b/0x540 [ 272.711061][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 272.716750][ C0] ? __run_timers+0x800/0x800 [ 272.721524][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 272.726873][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 272.732235][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 272.737557][ C0] __run_timers+0x53e/0x800 [ 272.742071][ C0] ? detach_timer+0x2b0/0x2b0 [ 272.746764][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 272.752977][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 272.758004][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 272.763572][ C0] run_timer_softirq+0x63/0xf0 [ 272.768591][ C0] handle_softirqs+0x339/0x830 [ 272.774299][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 272.779447][ C0] ? do_softirq+0x210/0x210 [ 272.784544][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 272.790375][ C0] __irq_exit_rcu+0x13b/0x230 [ 272.795191][ C0] ? irq_exit_rcu+0x20/0x20 [ 272.801260][ C0] irq_exit_rcu+0x5/0x20 [ 272.806453][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 272.813148][ C0] [ 272.816377][ C0] [ 272.819319][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 272.825859][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 272.832799][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 272.853447][ C0] RSP: 0018:ffffc90002f2f5c0 EFLAGS: 00000206 [ 272.860247][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 8b8109a21f753500 [ 272.868735][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 272.877220][ C0] RBP: ffffc90002f2f650 R08: ffffffff901d4177 R09: 1ffffffff203a82e [ 272.885585][ C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: dffffc0000000000 [ 272.893879][ C0] R13: 0000000000000000 R14: ffff88807ae99ec0 R15: 1ffff920005e5eb8 [ 272.902114][ C0] ? _raw_spin_unlock+0x40/0x40 [ 272.906948][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 272.912050][ C0] __wake_up_sync_key+0x128/0x190 [ 272.917191][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 272.923678][ C0] ? sock_load_diag_module+0x130/0x130 [ 272.929398][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 272.934857][ C0] ? unix_unhash+0x10/0x10 [ 272.939357][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 272.944961][ C0] ? mark_lock+0x94/0x320 [ 272.949454][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 272.955517][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 272.961237][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 272.966090][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 272.971116][ C0] ? import_iovec+0x6f/0xa0 [ 272.976116][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 272.981523][ C0] ? __sys_recvmsg+0x280/0x280 [ 272.986475][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 272.991583][ C0] ? __might_fault+0xb3/0x110 [ 272.996498][ C0] do_recvmmsg+0x382/0x850 [ 273.000998][ C0] ? __sys_recvmmsg+0x290/0x290 [ 273.005934][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 273.011397][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 273.016989][ C0] ? do_recvmmsg+0x850/0x850 [ 273.021858][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 273.027449][ C0] do_syscall_64+0x4c/0xa0 [ 273.032121][ C0] ? clear_bhb_loop+0x30/0x80 [ 273.037489][ C0] ? clear_bhb_loop+0x30/0x80 [ 273.042668][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.049205][ C0] RIP: 0033:0x7f5409f56799 [ 273.054050][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.075223][ C0] RSP: 002b:00007f540818f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 273.084577][ C0] RAX: ffffffffffffffda RBX: 00007f540a1d0090 RCX: 00007f5409f56799 [ 273.093425][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 273.101689][ C0] RBP: 00007f5409fecc99 R08: 0000000000000000 R09: 0000000000000000 [ 273.110167][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 273.118849][ C0] R13: 00007f540a1d0128 R14: 00007f540a1d0090 R15: 00007fffc5df42a8 [ 273.127192][ C0] [ 273.131302][ C0] Kernel Offset: disabled [ 273.135989][ C0] Rebooting in 86400 seconds..