last executing test programs: 8m26.010563825s ago: executing program 2 (id=832): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) 8m24.26841682s ago: executing program 2 (id=838): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) 8m21.561917427s ago: executing program 2 (id=845): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='\'', 0x1}], 0x1}, 0x5) 8m16.867425456s ago: executing program 1 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@can_newroute={0x34, 0x18, 0xf885a5fe37fdb9e7, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x3}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0xfffffffffffffff9, 0xfffffffffffffff9, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4}, 0x2, 0x0, 0x0, 0x0, "0d99ddc22cd48011"}, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000028) 8m12.176965315s ago: executing program 1 (id=864): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[], 0xc) 8m11.246225065s ago: executing program 2 (id=868): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) close_range(r1, 0xffffffffffffffff, 0x0) 8m11.194951297s ago: executing program 1 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r1, &(0x7f0000000400)=ANY=[], 0xfffffeff) 8m9.153647702s ago: executing program 2 (id=873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r0, 0x0, 0x0, 0x40002062, 0x0, 0x0) 8m8.623653948s ago: executing program 1 (id=875): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 8m8.356393137s ago: executing program 2 (id=878): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='\'', 0x1}], 0x1}, 0x5) 8m8.356158117s ago: executing program 1 (id=879): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[], 0xc) 8m7.055829609s ago: executing program 1 (id=887): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x1f, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x9}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000ac0)={0x0, 0x7, 0x6}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000001300)={r9, 0x2, 0x0, [0x7, 0x3, 0x77, 0x6e7b76aa, 0x3], [0x9efa, 0xfffffffffffffffd, 0x2, 0x7, 0x5, 0x2, 0xf1d, 0x6, 0xfffffffffffffe00, 0x8001, 0x5, 0x9c9, 0x1, 0x4, 0x4, 0x2, 0x3, 0x3, 0x1, 0xffffffffffffffff, 0xc, 0x8000000000000000, 0x1, 0x6785, 0x1000, 0x25, 0x200, 0xfffffffffffffffa, 0x100000001, 0x6, 0x2, 0x10000, 0x2, 0x9, 0xcf4d, 0x5, 0x8, 0x3, 0x3, 0x3, 0x6, 0x3401, 0x31f, 0x2, 0x3, 0x2, 0x97c5, 0x1, 0x8, 0x3, 0x0, 0x10, 0x0, 0x8, 0x5, 0x8000000000000001, 0x4000000000000000, 0x121d, 0x7, 0x8, 0xfffffffffffffffe, 0xc, 0x101, 0x3, 0x2, 0x100, 0x8, 0xffffffffffffffff, 0x8b, 0x0, 0x460d8c17, 0x2, 0x9, 0x800, 0xe, 0x551, 0x7, 0x1141, 0x3, 0x9, 0xffff, 0x7, 0x4, 0x7, 0x2, 0x0, 0x7f, 0x7fff, 0x2, 0x7ff, 0x7fffffffffffffff, 0x800000003, 0x10000, 0x3, 0x0, 0x9, 0x3, 0x8001, 0xcd, 0x4, 0x614d, 0x100000001, 0x3, 0x59e, 0x8, 0x3, 0x9, 0x5, 0xfffffffffffffffa, 0x7fff, 0x93c3, 0x8000000000000001, 0xf, 0x2, 0xce0, 0x8, 0x1, 0xffffffff, 0x30000000000000, 0x10000, 0x9]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 7m52.910110679s ago: executing program 32 (id=878): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='\'', 0x1}], 0x1}, 0x5) 7m51.024387039s ago: executing program 33 (id=887): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x1f, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x9}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000ac0)={0x0, 0x7, 0x6}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000001300)={r9, 0x2, 0x0, [0x7, 0x3, 0x77, 0x6e7b76aa, 0x3], [0x9efa, 0xfffffffffffffffd, 0x2, 0x7, 0x5, 0x2, 0xf1d, 0x6, 0xfffffffffffffe00, 0x8001, 0x5, 0x9c9, 0x1, 0x4, 0x4, 0x2, 0x3, 0x3, 0x1, 0xffffffffffffffff, 0xc, 0x8000000000000000, 0x1, 0x6785, 0x1000, 0x25, 0x200, 0xfffffffffffffffa, 0x100000001, 0x6, 0x2, 0x10000, 0x2, 0x9, 0xcf4d, 0x5, 0x8, 0x3, 0x3, 0x3, 0x6, 0x3401, 0x31f, 0x2, 0x3, 0x2, 0x97c5, 0x1, 0x8, 0x3, 0x0, 0x10, 0x0, 0x8, 0x5, 0x8000000000000001, 0x4000000000000000, 0x121d, 0x7, 0x8, 0xfffffffffffffffe, 0xc, 0x101, 0x3, 0x2, 0x100, 0x8, 0xffffffffffffffff, 0x8b, 0x0, 0x460d8c17, 0x2, 0x9, 0x800, 0xe, 0x551, 0x7, 0x1141, 0x3, 0x9, 0xffff, 0x7, 0x4, 0x7, 0x2, 0x0, 0x7f, 0x7fff, 0x2, 0x7ff, 0x7fffffffffffffff, 0x800000003, 0x10000, 0x3, 0x0, 0x9, 0x3, 0x8001, 0xcd, 0x4, 0x614d, 0x100000001, 0x3, 0x59e, 0x8, 0x3, 0x9, 0x5, 0xfffffffffffffffa, 0x7fff, 0x93c3, 0x8000000000000001, 0xf, 0x2, 0xce0, 0x8, 0x1, 0xffffffff, 0x30000000000000, 0x10000, 0x9]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6.545306372s ago: executing program 0 (id=2292): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6.255357911s ago: executing program 0 (id=2293): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xec}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 6.056694428s ago: executing program 5 (id=2295): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x7001, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 5.755619807s ago: executing program 0 (id=2297): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c080002400000000108000140000000000800014000000004972c5c3cca024ae204b68f7005f28119cdf440ac1171eba52a"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105000000030000000000030000035e193036e45bf845576c33e30d7333e77c3c54f4e354467b28fc352abd660aa8968833ce81008f9f9af0ae45679db79c6e8415182f4388c8091563e73fd43981d566f15112a7dc48925f79d97c90f68f83c4cf0000a7a1f28fcf8bba622bee30a04543f9fdea35517c1f9d4fe0bf7caa552ed7d8b07e47d2375ec0a418"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="08834200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000b57ab3eea797c902aa100d030d04feff", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c00028005001b0005000000"], 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000001080)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006809c2b4006806fffc010000000000000000000000000000ff0200000000000000000000000000015e06000000000000042f109971b5"], 0x9e) unshare(0x2a060400) getsockopt$sock_cred(r8, 0x1, 0x1c, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 5.65518894s ago: executing program 5 (id=2299): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 5.179613115s ago: executing program 5 (id=2302): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 4.73555025s ago: executing program 5 (id=2306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xe}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.623421203s ago: executing program 3 (id=2307): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.290205214s ago: executing program 3 (id=2310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000000)=""/243, 0x0) 4.039375082s ago: executing program 3 (id=2313): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24020090}], 0x1, 0xc080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 3.817224759s ago: executing program 3 (id=2315): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.011255895s ago: executing program 3 (id=2317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x2}, 0x1c) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r2, 0x204) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.416154774s ago: executing program 6 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x840) 2.20543724s ago: executing program 0 (id=2324): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x2}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) 2.096343484s ago: executing program 6 (id=2325): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[], 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x3000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.087337404s ago: executing program 5 (id=2326): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 1.845933542s ago: executing program 3 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) 1.845609032s ago: executing program 6 (id=2329): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x44000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 1.664865048s ago: executing program 5 (id=2330): r0 = socket(0x2a, 0x803, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="84000000", @ANYRESHEX=r1, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x2, 0x8}, 0xc) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000440), &(0x7f0000000480)='GPL\x00', 0x200, 0x5b, &(0x7f0000000600)=""/91, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0xd, 0x3, 0x40}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=[{0x2, 0x1, 0xf, 0xa}], 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r3, 0x0, 0x1000, 0x33, &(0x7f0000001300)="3ff4004358ab2189cbdb8612942022b5619bf4f5e111aaf7ff7cff29b56dab7cf3880b3622c44b3ddf9d7eaecc4ab05470b5a56e793a051eaab787501c90ca41f25b50ab43c958b51df2a31c4fc799b2e3d51e111ad823440641be6146a884ae138fa87eba3b5c6349d96e9c0727037911c049c0e27899294bce845ed2f34055a90bd9c641588d40a555cbd19d19c7ebaf5c0221e437d3d6e3cafff4246081008a26c8052cdb3dd4891e04f214b0e693ee1e3605a892e6bd68cacd834a183810e48b08926b8925873929688c429cb03e31e9e385b195215c7b7d09efd090741bc6e52a680f91e5db83db648cfe47674940bfe8015f47a3e552ad85d9dc10e4e085d0c0ea7c347da1f6204b755f26fac357fb2c8492726834562de99e08f181feb73133f5b742af4b389a2963f6bf129c157b913744c7488775377211cabaae0e3dd9de4c1abcef8db5eed02af28b7c772256e253d2b4f98c75c5a4fe480ae5541ae74b8f09d9b9c30e8c359eb34b4a00a2156503111dd148b3cbc3c97b11b063c8bb2766f1a049d9f65684e8f91c7a5ac66b5f4c4ee9d6a8ecfb1cb080e9a9952a7453e70ea8c76e419808a5c8aff7a533268cdec44200622482a531086c38e75075010351c8909413d3d67d266fd4930a7457e3ee7c8c63a30549dc6653e0256c719e2dcfe18456a13b381989f1ac54a30fcab95e66ca5506bf083bf755e147108c8e831081583e489862515aa0abfde0cb87be8c3deeb4da5c68af7e9922722310f71ed68b4b7f0f2e2b5e9e893b20dbdfc7aaca7187ef9f30350ce2a2993e133ec30810d9416314c3784dd26df2b609e1cffd818ff8fb5b75f5bd6f35e7bb6c239a3afff33ec467fcd7381f6ac046ef0edd2ca1b3d1b93f0db6eb0c5fc73d89ae4b87c85d5ab1e6327990132b6621186e29a1a1f7bef4907da6a078c45d6db51717a315a79ef39b8f176c78199b8d6a48856ebf32eccdb000fa4e4e4c5d0a35dba5471a20a64a3b921fac590ce64aa89936e37cebf1db629731a87166c57d9fe43a983c7cbc32b86ed6e7f62d3f8f826f928264a3b76720a1305c7a0af1377a6c15f6949b3b54740ab11cebdee9d06547913716f73ec108161bad6a93b08f88e95df348b1c427dd43e9ab4c2ed8545b0796a9b4f8e8c6fc181dfcee13a501060647d73cb04c0bcb04bc335449ebdafdfb402250b3be93109a9c555db64e7786cacb4b31ff30ee1ba7eb54e469f83eb798a82cac672794f1519adf2aa06977772304946e50ff09546870acaa1efbdcb91be6904f10e4d0e85844444ac239a3faf6ba445d908573e261a7992cf43c80c3976ae9570e3314b83f8e60775d6db575b6d88e4779f5fa59e59ead99984d00209adfb664eb695915ff5c9abe096faf05cf002784c5c4e732e77f2bc4ecc18ce9fe3089811225a82ed51f56d1a0c36903d656a12a2b11f9002947f90c71b0255d074ad93895fe5fd6193cba8824c63a45674ae200a68b5195df94411d3f27bb04e0cd4c6fd514682d27204ffe2c5445c5f934668a384e8a023532a6ed9b674911d0bfa63d070553cad33fb3893591fb668c7e50a4a9f1072c73ecf7f509b42e420e88578920b30b4b845769ee07db1c4faeb77eb8f7e636c21caf396965c044563fcece06f6409f398975534e435d0f1b7d23f6699074f99461a616b23c784384c9f33cd3568be0e9d81f17ce13b0a8a35dd269dc95d29b109078adca37a35dc452e27a42193235080fd0ab0d61d6d7af6c22a714bf9c4f8c8f8f70c5242a881d2e71a11e42ba5565d888f8f0225976a300a145302005c1384541986f6d2d2db2894416d316f8c1f9fa779546697ce500034e64fadfe039f2f5c695c76f6e6ed47c4ac6cdf282eee9c78706a8e2bcc69f3f7809c92c07ccd7040f167d3ebcd6b5577c980942a06f2b3291acb1ded2e2b526c75442785b7a5e7cf02b927306f642f7c49448e36bfa1e4720568aa6993d17a002d1084e47904e3530a398c75b3723e6576b76a1bee34fdf189e4c0e67c64a9e160a7f52010ba3f5bcc99d391e5b0a5ba074aa2824849431b604cd00b4fe0d4f15253b0345a787d42d0381c75267404b8a7fd00429c4ecab6fa34d33ae1b80c8e751cb4122869d79bc7bca093d90f295fc71b7f88f85a7d0d4d932ffc7257fd772ce32a3b69cb70d71b4ed2ca21d0e0de9f8546434be01c7a5b8f6dd23a3e38b188c8fc91152a798a8112d936a9c80e0b9b2506338f6394e8f849f371e733dd4a3ce8c92dab4d569f34cf2696ea6c5cfc8fa1ceed535a2f65ae0b740a8c0ac0bf8a6c41b3ba098722b9d1d610330e90000ffea40d831949a36784f58ad4c5d8cdac43bd33400d9b2893d96b2619d1de4ed71a61db675b86f842ecfec0c2031584ce2a4c52bc0188185063ab45879970a44531284a5ccdfe2a945ff2e3584e889ac441d9c3050f78128ac0d812ff70c95a79e45ee0e912cdf3e1c0b5de4a116f8ca4377b73bece19ce4d9090e78055a4f97ed470be05c0f13cc0bbf2718580d168c66022cf224e64de68616aa424bee73134625be84a075d62440c79dd5467be176c68e27ff444e797570f0993ae7f5c6055aa5c1fe19617843b572046a1908a287cd72edb2c486c8bf54a8c9bf3ba2ae76c21146e83f8d5e62e36e4ce011a76615f91b22af0e7be48eca4de46d5a49f021ccbdbddd349a100872079a4704333865fadeca7aca275a30fee8bdc681c8a853a8b6bec11ec861b83220537801dd96eeb69eade98d79c786016d8bc2c177adf15624443456f3a92d37e40d960da05e5e86cc6dfe0448cf0e3cb80525787cac1ef42788974e9818d7b352a6be47980e66b0ed8d7f5dc65c82d6e3669408886d6341e4359a8acbfa3a30e871d5c3a3705a164049178452ccdc6a45dd8222b4ad8a378f26b087559d52b387cba94f9b04984e496a650c75a2daa5081a041592066047cab8ebebefbe1dc2a49eb5bbb0dc17d09cc8489c931ef40dbfb0945daf04133fc601735a955aa2f15470ee3f13157da966c7e39f4cfe124f101069ee1e915f6a5e4fe0b0d5219d84a7718751e6617db195cf0f84cc422135067236c7e4edebb55e17c0b319b7dfcf35063104566c77df3b91729788bbadab9b8ef93ed1a6900aa473e38c84d4a83d41154b6fcd7054b5715fe4cdc91f474b99e83d7f0ea05e48c7a49f929e7f485d9466528205567159c85c89710121566d65b444db2c85800dcda30237cc4a8b52c3f086c560d44f08060ff6b20c510075e540ea6ccde8c46c9be616f667fc12db987a626aac60f2a8d3bf77a8087e495f35b6c2b6e543a3de3d58fb91ebb3bfe502ecbb1a0d5c49d7fe05a4cc87d49726d11ca40f0a48ca5fdc7d2458af5f29b334d709a2733b6b166bb9255aa87ce1b89c96bcddb2275ba267ea675876703fdaede556e5cf9557ee915d932f2a4a918d1ee2587d17ebbc227293e971fd0ff8943a708b3f6a6cbb5da310dc467bd80b8899f542d3b3cc2e882523d0fff5ea9f1bf77ba0a0a4e69fab2c53815e70139ef622af709560ef3c11724e947eddd1914fe5e0ed71b8739b3d13416ec6edcf7e301b5ae71a2b58ff28188a7a51d2ba5376c0deb521711a3b1fbab7317cfe534cf8dd85b2fe72512a744c3b66e95c3988e5827b4e8bca2c6f90d99aea5fc67538cbe1bdf2de17ca5519316a0e0fc1e0319b05f3fe5ac54cf3906bbcb5c1ee6d8aa24b97f44488719d2d0d99906fc6c2058097a6df4780655f0aa8f40277248cc96e91b7fabd50fd72fa3d1c417bf7fa2f688346e558e14b76a40dccf6dcfb501647f4f2fbe8eb30dd22a67c4983ee470d352cd49e095a2fbc59ebba307c8ff11db745cece3a447eab825f166b71a11dca60f8883456e93075955008c31cfe083aaf2c616abf320450fefb0d0457800d984667aa0056f7dda0d2e082d360c1ff0797c11ca8d15fa329f954d4f4877dcd9fb3374d5f3d86a2373ab98b21030d7f65ef05ba1c86c70225df929e43b651a7908e0d29f5806fc6079cd431082f08a48521cdc0fb5c2b29753634792d89de0ed3cc313340f83588241d76badb1030174e97504acf2ae04659c0346ef4820c79bf4d93d25c5418d879a33c034c9cc1c737eac08213ad3044d1faf0beeb6973366762e9f322a61e42a645b9b4c54af94059651f46fccb9b8529b3fc085ee290ba361934b00d09453407dc274a49d158866ddf52d0e3a951248e99d71012dfdbb9a5518f4e714176af94173c857013ed82d667f6b565e77d44d3dc7fb861398d3ee2279582463a5489f2e25b8f3d2fa2119ab729c0271842b4001366caf3d170ba9341084d5b123d1a00cc0a311a7060895538a97a20120ab52b5d5e898b17edac9b5c6aa55bc16d67ae523314fdb3c9ef9db23d7dbf566fabd879eb68b0e6019af36b02ba31b3cfc7668878a3401a585d3fee27194e6c5035b13ca7f10caeca848e0f76056b41441b65147765ebf3d559719dd245d1cfa6434cc6dea2eca9d64aacb9660e0ddeda9fd5ab95db1db1deac014920dcd23971735cd7b0c8c3862a2adc5f581da1c2178f159570b2ca4c4f1a5d82b028f4957ae2611475b8ba10945e0605853217630eb12f368dd987376ba52736098a0cc13fe8a9d1337d00670e1dea5aaddc0d4732f3e9e0a976945c8aa386d619906b316a32ab985ea5132b76b047c68bc7c98247ff0debce964683c28d71d810d6879f90e99d5fe375a3bc8e2aea4ec1ddd00a437f4a7b6621a68920275cc7bed5648dc5be65aa60386b7dc16136045d3ed3b633107db9fcbfc971e50931b587ab8c9156f9c0bb5c6c2bbde7f810773b8756d50f886f6bc7c9f4192d2f7393ca928c33446afbf8b2bb1c3c9a65e77fc7c8c54095ade020f7e7d2f54d5c6c7a79616b39074fd60924c264fcc0b179337d60d407c29590d2918cd8f49e79c22caa27478108704f49036434d7c50f67f0540c7d0d6ef4869e18c1547cd7cb48c68799e048a8dfab1ff57842fb6ed307102a2b312a04e52e6386f8c8f9a8688209a1aaa7a8cc5ba7e6e908582517c0bcba872699b066720ed3e3a8776bb1e48f9a966e701ba6d598e4fbe176213c67df01278117fe4f2500d9e45389913e6591e00326c44e4e165cca34c75b33c8024ef14a040fb917b8a0c1399d670e8e5b185fc48556166a3423e483ef90392b794a3902e3becaac56c5caed77dd8b473d31baf15c99618b3ae5cdf452e0e1c6c98cde392554f99bf3bc2f0caf6fe52c371824fc861e35eb6e27cb88a8cdd48f41c76f34ab143b006dd84ead64ddbd59ffa0a14ccccd243c73d237c39e3aa2792c89383215698c9d6d84c7afee57093037ac3a3626db2350babb6541056a2bc68385aed59477bae77d8a40fa122a21a76f1d27edfc64a29e60bcdf2b4a7ef32484c8db26426cbe38e2f01798b454a83f74436de27bbc1493c886838b9db80bc9b7e915ccaed27eccd50c26be8318e2c7639ee98b344356e6f8f73457e5bb98af29bf3fbd116ef64137f70641c824e6d74ed96882b5367aebc250fe674cc8debed622a4268e079e157820f17ac97252c79d525b108a834eb349b6a84090336cb5318bf297c266dce1d5b64cef9bdc000922914ab49eb31ab8009d1c67782c3047623b7663d03d52456927238a5119b3ddc1f64f1ac13c6b34c12935bad822c5b56a76db28a3a1dcadacde9900b7b768d2edc053cbbf49adf698653683cb2af16f18b67302fb6671d030dbb34c14fab88733fdff1041cd7e09bd87af035f0fead320a39b88c10427", &(0x7f0000002300)=""/51, 0x2, 0x0, 0xe6, 0xfc, &(0x7f0000002340)="b172036ec4742e872bf47bcc8b1ab7a665987960892a0919669f45e01990d7127e71aeacf77a5e78f5019f017e86b5cf74c814bd5f473c155b7d2c20de6400323360e964ba3b52e91de00e9aee3ba79409618e1b669cecfa9533a7deb87ac24d71b91296a9ae74ae5d1bd3f0ebaebaa79f7add2788d274b4239bfcca2272d147128f185c11b5f23da0ea134bcfa5035813db4fc458cad258c2d6bace86bb8b60c200fbb9e7a887694dab131a8b452c28faf832d88be9c2fa8b16ac98636a02e6246838c1042c16937ad3ece1997d325fccf9791fb9e4a0b2c772e6f2b15729883db3fa213152", &(0x7f0000002440)="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", 0x4, 0x0, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032511fa0000000000000005001300294044c3"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x91) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000fddbdf250a0000000800030024f205ba3a5f01bf14eebc148d168cc0b8bdcb768c57cd54bfae05093db27b71db13c427c28f82f6434ba61d73b2ffbc4ae4804b6bd97b93ca42345bd2378470f28355c5ffe038e91bcad64427ee0aa4ab182f02d692e691b6a4", @ANYRES32=r6, @ANYBLOB="0800090005ac0f0008003700000000000b000a00bfbda5f9f41a4600"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40000091) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.319655268s ago: executing program 4 (id=2331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="dbaa00044100000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x2000) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 1.084164026s ago: executing program 4 (id=2332): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.073601146s ago: executing program 0 (id=2333): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), 0x0}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) write$tun(r1, &(0x7f0000000280)=ANY=[], 0xfdef) 801.309775ms ago: executing program 4 (id=2334): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) 764.162556ms ago: executing program 6 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x840) 651.67484ms ago: executing program 4 (id=2336): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x7001, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 451.148786ms ago: executing program 4 (id=2337): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0xec}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 450.934446ms ago: executing program 6 (id=2338): bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 218.336334ms ago: executing program 6 (id=2339): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120002, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 426.56µs ago: executing program 4 (id=2340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000100)='O', 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 0s ago: executing program 0 (id=2341): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): ty change from 0 to 512 [ 123.237447][ T4767] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 123.286941][ T4767] EXT4-fs (loop3): invalid journal inode [ 123.301668][ T4767] EXT4-fs (loop3): can't get journal size [ 123.323237][ T4769] loop2: detected capacity change from 0 to 2048 [ 123.337028][ T4767] EXT4-fs (loop3): 1 truncate cleaned up [ 123.354930][ T4767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.553978][ T4292] EXT4-fs (loop3): unmounting filesystem. [ 124.554306][ T4777] loop3: detected capacity change from 0 to 16 [ 124.561175][ T4777] erofs: Unknown parameter 'user_x\ttr acl' [ 124.841800][ T4781] loop0: detected capacity change from 0 to 16 [ 124.923007][ T4781] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.950376][ T4785] loop3: detected capacity change from 0 to 1024 [ 125.003519][ T4785] EXT4-fs: inline encryption not supported [ 125.022948][ T4785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.086944][ T4785] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.203223][ T4785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 125.254608][ T4785] System zones: 0-1, 3-36 [ 125.461114][ T4796] loop1: detected capacity change from 0 to 1024 [ 125.887404][ T4785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.897253][ T4796] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 126.071562][ T4796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.294731][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 126.861354][ T4292] EXT4-fs (loop3): unmounting filesystem. [ 127.135139][ T4815] loop4: detected capacity change from 0 to 1024 [ 127.159621][ T4819] loop0: detected capacity change from 0 to 256 [ 128.645519][ T4819] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.878508][ T4465] hfsplus: b-tree write err: -5, ino 25 [ 128.904169][ T4465] hfsplus: b-tree write err: -5, ino 4 [ 128.909949][ T4465] hfsplus: b-tree write err: -5, ino 2 [ 128.998537][ T4465] hfsplus: b-tree write err: -5, ino 26 [ 129.118526][ T4827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.117'. [ 129.194416][ T4832] loop4: detected capacity change from 0 to 256 [ 129.356355][ T4832] FAT-fs (loop4): Directory bread(block 64) failed [ 129.380622][ T4832] FAT-fs (loop4): Directory bread(block 65) failed [ 129.387291][ T4832] FAT-fs (loop4): Directory bread(block 66) failed [ 129.440382][ T4832] FAT-fs (loop4): Directory bread(block 67) failed [ 129.475857][ T4832] FAT-fs (loop4): Directory bread(block 68) failed [ 129.500960][ T4832] FAT-fs (loop4): Directory bread(block 69) failed [ 129.507615][ T4832] FAT-fs (loop4): Directory bread(block 70) failed [ 129.550684][ T4832] FAT-fs (loop4): Directory bread(block 71) failed [ 129.557364][ T4832] FAT-fs (loop4): Directory bread(block 72) failed [ 129.590754][ T4832] FAT-fs (loop4): Directory bread(block 73) failed [ 131.114142][ T4844] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.383561][ T4849] loop3: detected capacity change from 0 to 128 [ 131.815057][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 132.539879][ T4866] loop2: detected capacity change from 0 to 1024 [ 132.619135][ T4866] EXT4-fs: Mount option(s) incompatible with ext2 [ 132.692948][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699629][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.854834][ T4876] loop1: detected capacity change from 0 to 764 [ 133.096142][ T4885] loop4: detected capacity change from 0 to 16 [ 133.141346][ T4885] erofs: (device loop4): mounted with root inode @ nid 36. [ 134.371520][ T4899] netlink: 'syz.2.139': attribute type 12 has an invalid length. [ 134.389850][ T4897] loop3: detected capacity change from 0 to 2048 [ 134.634268][ T4897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.710224][ T4908] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 134.987649][ T4897] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.138: bg 0: block 234: padding at end of block bitmap is not set [ 134.999253][ T4908] EXT4-fs (loop3): Remounting filesystem read-only [ 135.205164][ T4897] EXT4-fs (loop3): Remounting filesystem read-only [ 135.395965][ T4292] EXT4-fs (loop3): unmounting filesystem. [ 135.548798][ T4923] loop4: detected capacity change from 0 to 128 [ 135.606153][ T4923] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 135.646435][ T4923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.840823][ T4289] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 135.849471][ T4289] Bluetooth: hci3: Injecting HCI hardware error event [ 135.862554][ T48] Bluetooth: hci3: hardware error 0x00 [ 136.589739][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 137.786002][ T4944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.154'. [ 138.148212][ T4956] loop2: detected capacity change from 0 to 2048 [ 138.327984][ T4376] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.756862][ T4969] loop4: detected capacity change from 0 to 512 [ 138.802625][ T4969] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 138.862820][ T4969] EXT4-fs (loop4): 1 truncate cleaned up [ 138.868540][ T4969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.983815][ T26] audit: type=1800 audit(1780642728.267:239): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.163" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 139.480938][ T4989] loop1: detected capacity change from 0 to 256 [ 139.540172][ T4989] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 139.597027][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 141.047159][ T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 141.371285][ T5005] loop2: detected capacity change from 0 to 1024 [ 141.620607][ T5009] loop1: detected capacity change from 0 to 1024 [ 141.758830][ T5009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.976931][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 143.409091][ T5041] loop2: detected capacity change from 0 to 256 [ 145.674685][ T5064] netlink: 80 bytes leftover after parsing attributes in process `syz.1.193'. [ 146.202806][ T5067] loop4: detected capacity change from 0 to 16 [ 146.220828][ T5067] erofs: Unexpected value for 'user_xattr' [ 148.043518][ T5082] loop2: detected capacity change from 0 to 512 [ 153.985995][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 157.633696][ T5124] loop0: detected capacity change from 0 to 1024 [ 158.217046][ T5124] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 158.226739][ T5124] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 158.253378][ T5118] "syz.1.213" (5118) uses obsolete ecb(arc4) skcipher [ 158.376652][ T4693] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.103823][ T5133] loop3: detected capacity change from 0 to 8192 [ 160.785945][ T5148] loop1: detected capacity change from 0 to 164 [ 160.842469][ T5148] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 161.168266][ T5164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 161.905252][ T5170] syz.2.228 uses obsolete (PF_INET,SOCK_PACKET) [ 163.482959][ T5177] device syzkaller0 entered promiscuous mode [ 163.840126][ T5185] loop0: detected capacity change from 0 to 512 [ 163.935002][ T5185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.989773][ T5185] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.228986][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 164.292637][ T5194] device syzkaller0 entered promiscuous mode [ 164.313575][ T5194] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 165.911037][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 165.931901][ T5232] loop4: detected capacity change from 0 to 512 [ 166.049456][ T5232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.130209][ T5232] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.562378][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 166.724898][ T48] block nbd0: Receive control failed (result -1) [ 170.560665][ T5271] loop1: detected capacity change from 0 to 1764 [ 171.178577][ T4376] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.461211][ T5277] netlink: 'syz.0.261': attribute type 19 has an invalid length. [ 171.470134][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 171.533664][ T5277] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.542906][ T5277] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.551691][ T5277] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.560496][ T5277] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.673385][ T5277] netlink: 'syz.0.261': attribute type 19 has an invalid length. [ 171.716798][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 171.750759][ T5277] Zero length message leads to an empty skb [ 173.935069][ T5311] sch_tbf: burst 46 is lower than device syzkaller0 mtu (1514) ! [ 173.978530][ T5311] device syzkaller0 entered promiscuous mode [ 175.671085][ T5338] netlink: 'syz.0.274': attribute type 3 has an invalid length. [ 176.144886][ T5354] loop2: detected capacity change from 0 to 256 [ 176.211284][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 176.262840][ T5354] FAT-fs (loop2): Directory bread(block 64) failed [ 176.321348][ T5354] FAT-fs (loop2): Directory bread(block 65) failed [ 176.328100][ T5354] FAT-fs (loop2): Directory bread(block 66) failed [ 176.367317][ T5354] FAT-fs (loop2): Directory bread(block 67) failed [ 176.386863][ T5354] FAT-fs (loop2): Directory bread(block 68) failed [ 176.425840][ T5354] FAT-fs (loop2): Directory bread(block 69) failed [ 176.446235][ T5354] FAT-fs (loop2): Directory bread(block 70) failed [ 176.475753][ T5354] FAT-fs (loop2): Directory bread(block 71) failed [ 176.524059][ T5354] FAT-fs (loop2): Directory bread(block 72) failed [ 176.538033][ T5354] FAT-fs (loop2): Directory bread(block 73) failed [ 177.280044][ T5369] 0: reclassify loop, rule prio 0, protocol 700 [ 178.475549][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 178.969823][ T5396] xt_hashlimit: size too large, truncated to 1048576 [ 179.051122][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.219717][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 180.601755][ T5399] device bridge_slave_0 left promiscuous mode [ 180.608597][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.930574][ T48] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 180.939904][ T48] Bluetooth: hci0: Injecting HCI hardware error event [ 180.949447][ T48] Bluetooth: hci0: hardware error 0x00 [ 181.194966][ T5415] fuse: Unknown parameter 'user_id00000000000000000000' [ 181.682996][ T5384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.976523][ T5426] loop2: detected capacity change from 0 to 256 [ 182.087044][ T5426] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 182.165880][ T5429] device syzkaller0 entered promiscuous mode [ 182.227736][ T5429] TC_ACT_REPEAT abuse ? [ 182.518457][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 182.821509][ T5445] fuse: Bad value for 'fd' [ 183.020529][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 183.459789][ T5330] Set syz1 is full, maxelem 65536 reached [ 183.493570][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.503012][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.497269][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.701318][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.196692][ T5440] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.206213][ T5440] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.215512][ T5440] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.224464][ T5440] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.527612][ T5482] loop2: detected capacity change from 0 to 1024 [ 185.579148][ T5482] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.318: lblock 2 mapped to illegal pblock 2 (length 1) [ 185.624065][ T5482] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 185.647791][ T5482] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.318: lblock 0 mapped to illegal pblock 48 (length 1) [ 185.686220][ T5482] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 185.710805][ T5482] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.318: Failed to acquire dquot type 0 [ 185.728012][ T5482] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 185.740240][ T5482] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.318: mark_inode_dirty error [ 185.755943][ T5482] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 185.766671][ T5482] EXT4-fs (loop2): 1 orphan inode deleted [ 185.772563][ T5482] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.782286][ T4458] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.798439][ T4458] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 185.843900][ T4458] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:24: Failed to release dquot type 0 [ 185.895192][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 185.920948][ T4275] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 185.983467][ T4275] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 186.008845][ T4275] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 186.123515][ T5494] fuse: Bad value for 'fd' [ 186.273177][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 186.613692][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'. [ 186.712483][ T5514] device syzkaller0 entered promiscuous mode [ 186.888523][ T5517] device syzkaller0 entered promiscuous mode [ 186.904841][ T5519] device syzkaller0 entered promiscuous mode [ 186.932126][ T5517] 0: reclassify loop, rule prio 0, protocol 800 [ 187.292556][ T5528] fuse: Bad value for 'fd' [ 187.765866][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 188.534943][ T5571] fuse: Unknown parameter '0x0000000000000003' [ 189.129649][ T5588] device syzkaller0 entered promiscuous mode [ 190.008353][ T5595] loop3: detected capacity change from 0 to 1024 [ 190.805868][ T5595] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.361: lblock 2 mapped to illegal pblock 2 (length 1) [ 190.820520][ T5595] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 190.828642][ T5595] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.361: lblock 0 mapped to illegal pblock 48 (length 1) [ 190.842982][ T5595] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 190.851920][ T5595] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.361: Failed to acquire dquot type 0 [ 190.881515][ T5595] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 190.893581][ T5595] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.361: mark_inode_dirty error [ 190.905251][ T5595] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 190.915524][ T5595] EXT4-fs (loop3): 1 orphan inode deleted [ 190.921333][ T5595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.020057][ T4471] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.034645][ T4471] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 191.043200][ T4471] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:29: Failed to release dquot type 0 [ 191.125942][ T4292] EXT4-fs (loop3): unmounting filesystem. [ 191.132031][ T4292] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 191.158222][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 191.180013][ T4292] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 191.305225][ T4292] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 191.936240][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 192.851412][ T5632] loop2: detected capacity change from 0 to 1024 [ 193.542876][ T5632] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.376: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.560821][ T5632] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 193.568933][ T5632] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.376: lblock 0 mapped to illegal pblock 48 (length 1) [ 193.583487][ T5632] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 193.592361][ T5632] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.376: Failed to acquire dquot type 0 [ 193.603905][ T5632] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 193.613545][ T5632] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.376: mark_inode_dirty error [ 193.626452][ T5632] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 193.637370][ T5632] EXT4-fs (loop2): 1 orphan inode deleted [ 193.643186][ T5632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.733693][ T4455] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.762300][ T5621] device syzkaller0 entered promiscuous mode [ 193.788812][ T4455] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 193.820556][ T4455] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:23: Failed to release dquot type 0 [ 193.852560][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 193.858525][ T4275] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 193.924233][ T4275] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 193.963456][ T4275] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 194.134316][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.140705][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.360136][ T5642] tipc: Started in network mode [ 194.372951][ T5642] tipc: Node identity 623566dcc5e7, cluster identity 4711 [ 194.399069][ T5644] fuse: Unknown parameter '0x0000000000000003' [ 194.406940][ T5642] tipc: Enabled bearer , priority 0 [ 194.609919][ T5641] device syzkaller0 entered promiscuous mode [ 194.628700][ T5641] tipc: Resetting bearer [ 194.653026][ T5638] tipc: Resetting bearer [ 195.780887][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802824dc00: rx timeout, send abort [ 196.285647][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802824fc00: rx timeout, send abort [ 196.294296][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802824dc00: abort rx timeout. Force session deactivation [ 196.794073][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802824fc00: abort rx timeout. Force session deactivation [ 197.516988][ T5638] tipc: Disabling bearer [ 197.525239][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 197.556309][ T953] tipc: Node number set to 2815583964 [ 197.845313][ T5704] fuse: Unknown parameter '0x0000000000000003' [ 197.871985][ T5701] device syzkaller0 entered promiscuous mode [ 197.999335][ T5698] device syzkaller0 entered promiscuous mode [ 198.243288][ T5706] device syzkaller0 entered promiscuous mode [ 200.359573][ T5752] fuse: Unknown parameter '0x0000000000000003' [ 201.342827][ T4296] Bluetooth: hci2: command 0x0406 tx timeout [ 201.348977][ T4296] Bluetooth: hci1: command 0x0406 tx timeout [ 201.574389][ T5725] device syzkaller1 entered promiscuous mode [ 201.794725][ T5765] device syzkaller0 entered promiscuous mode [ 203.204538][ T5791] fuse: Unknown parameter '0x0000000000000003' [ 207.163748][ T5823] device syzkaller0 entered promiscuous mode [ 208.439805][ T5847] fuse: Unknown parameter '0x0000000000000003' [ 210.266007][ T5862] device syzkaller0 entered promiscuous mode [ 211.210011][ T5889] fuse: Unknown parameter 'fd0x0000000000000003' [ 211.891979][ T5896] loop2: detected capacity change from 0 to 32768 [ 211.983772][ T5896] loop2: p1 p2 p3 < p5 p6 > [ 212.021717][ T5896] loop2: p2 size 16775168 extends beyond EOD, truncated [ 212.042008][ T5896] loop2: p5 start 4294970168 is beyond EOD, truncated [ 213.695882][ T5877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.053685][ T5926] fuse: Unknown parameter 'fd0x0000000000000003' [ 214.322309][ T5929] tipc: Started in network mode [ 214.327254][ T5929] tipc: Node identity 2a21be35a9ed, cluster identity 4711 [ 214.375650][ T5929] tipc: Enabled bearer , priority 0 [ 214.473655][ T5937] device syzkaller0 entered promiscuous mode [ 214.498734][ T5937] tipc: Resetting bearer [ 214.644602][ T5938] device syzkaller0 entered promiscuous mode [ 214.688208][ T5928] tipc: Resetting bearer [ 216.856017][ T5969] loop0: detected capacity change from 0 to 32766 [ 216.902857][ T5969] loop0: p1 p2 p3 < p5 p6 > [ 216.912737][ T5969] loop0: p2 size 16775168 extends beyond EOD, truncated [ 216.930787][ T5969] loop0: p5 start 4294970168 is beyond EOD, truncated [ 217.125408][ T5973] fuse: Unknown parameter 'fd0x0000000000000003' [ 217.336879][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 217.337225][ T4394] udevd[4394]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 217.361347][ T4381] udevd[4381]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 217.392182][ T4376] udevd[4376]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 218.153214][ T5928] tipc: Disabling bearer [ 218.161867][ T4324] tipc: Node number set to 2211233333 [ 219.686036][ T5984] lo: Caught tx_queue_len zero misconfig [ 221.170047][ T6008] netlink: 149 bytes leftover after parsing attributes in process `syz.3.484'. [ 221.688288][ T6021] device syzkaller0 entered promiscuous mode [ 222.166505][ T6030] loop3: detected capacity change from 0 to 512 [ 223.213517][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.339986][ T6052] device syzkaller0 entered promiscuous mode [ 225.485640][ T6058] Bluetooth: MGMT ver 1.22 [ 225.518564][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'. [ 225.967490][ T6067] loop4: detected capacity change from 0 to 512 [ 226.044936][ T4376] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.201806][ T6086] device syzkaller0 entered promiscuous mode [ 228.497617][ T6096] loop0: detected capacity change from 0 to 512 [ 230.955652][ T6104] loop1: detected capacity change from 0 to 32766 [ 231.017356][ T6104] loop1: p1 p2 p3 < p5 p6 > [ 231.024746][ T6104] loop1: p2 size 16775168 extends beyond EOD, truncated [ 231.058390][ T6104] loop1: p5 start 4294970168 is beyond EOD, truncated [ 231.292860][ T6119] Bluetooth: MGMT ver 1.22 [ 231.367787][ T6123] device syzkaller0 entered promiscuous mode [ 231.541480][ T6125] device syzkaller0 entered promiscuous mode [ 231.601062][ T6127] loop4: detected capacity change from 0 to 512 [ 233.287672][ T6132] netlink: 56 bytes leftover after parsing attributes in process `syz.3.531'. [ 233.315083][ T4381] udevd[4381]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 233.315429][ T4394] udevd[4394]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 233.335098][ T48] Bluetooth: hci2: command 0x0401 tx timeout [ 233.341371][ T4296] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 233.341410][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 233.418336][ T4376] udevd[4376]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 233.484384][ T6139] netlink: 'syz.1.533': attribute type 3 has an invalid length. [ 233.940256][ T6156] device syzkaller0 entered promiscuous mode [ 234.961435][ T6174] loop1: detected capacity change from 0 to 512 [ 234.997687][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 235.030849][ T4376] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.883055][ T6184] device syzkaller0 entered promiscuous mode [ 237.252667][ T6194] loop2: detected capacity change from 0 to 256 [ 237.338347][ T6194] FAT-fs (loop2): Directory bread(block 64) failed [ 237.354033][ T6194] FAT-fs (loop2): Directory bread(block 65) failed [ 237.377154][ T6194] FAT-fs (loop2): Directory bread(block 66) failed [ 237.400514][ T6194] FAT-fs (loop2): Directory bread(block 67) failed [ 237.417044][ T6194] FAT-fs (loop2): Directory bread(block 68) failed [ 237.456424][ T6194] FAT-fs (loop2): Directory bread(block 69) failed [ 237.480709][ T6194] FAT-fs (loop2): Directory bread(block 70) failed [ 237.496737][ T6194] FAT-fs (loop2): Directory bread(block 71) failed [ 237.526665][ T6194] FAT-fs (loop2): Directory bread(block 72) failed [ 237.549692][ T6194] FAT-fs (loop2): Directory bread(block 73) failed [ 237.668310][ T6203] loop3: detected capacity change from 0 to 512 [ 238.362030][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.565579][ T6227] device syzkaller0 entered promiscuous mode [ 241.062604][ T6237] loop2: detected capacity change from 0 to 256 [ 241.178758][ T6237] FAT-fs (loop2): Directory bread(block 64) failed [ 241.202187][ T6237] FAT-fs (loop2): Directory bread(block 65) failed [ 241.232443][ T6237] FAT-fs (loop2): Directory bread(block 66) failed [ 241.286521][ T6237] FAT-fs (loop2): Directory bread(block 67) failed [ 241.350990][ T6237] FAT-fs (loop2): Directory bread(block 68) failed [ 241.370475][ T6237] FAT-fs (loop2): Directory bread(block 69) failed [ 241.377142][ T6237] FAT-fs (loop2): Directory bread(block 70) failed [ 241.460594][ T6237] FAT-fs (loop2): Directory bread(block 71) failed [ 241.467372][ T6237] FAT-fs (loop2): Directory bread(block 72) failed [ 241.534141][ T6237] FAT-fs (loop2): Directory bread(block 73) failed [ 241.694520][ T6240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.064538][ T6263] device syzkaller0 entered promiscuous mode [ 243.541171][ T6288] netlink: 72 bytes leftover after parsing attributes in process `syz.0.585'. [ 243.570025][ T6290] loop4: detected capacity change from 0 to 256 [ 243.698616][ T6290] FAT-fs (loop4): Directory bread(block 64) failed [ 243.726753][ T6290] FAT-fs (loop4): Directory bread(block 65) failed [ 243.736941][ T6290] FAT-fs (loop4): Directory bread(block 66) failed [ 243.760128][ T6290] FAT-fs (loop4): Directory bread(block 67) failed [ 243.767963][ T6290] FAT-fs (loop4): Directory bread(block 68) failed [ 243.780692][ T6290] FAT-fs (loop4): Directory bread(block 69) failed [ 243.787346][ T6290] FAT-fs (loop4): Directory bread(block 70) failed [ 243.808271][ T6290] FAT-fs (loop4): Directory bread(block 71) failed [ 243.854929][ T6290] FAT-fs (loop4): Directory bread(block 72) failed [ 243.870621][ T6290] FAT-fs (loop4): Directory bread(block 73) failed [ 244.673250][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 245.907277][ T6306] device syzkaller0 entered promiscuous mode [ 246.259145][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.593'. [ 247.126814][ T6323] loop4: detected capacity change from 0 to 512 [ 247.176044][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 247.190278][ T4376] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 251.966594][ T6353] loop0: detected capacity change from 0 to 512 [ 252.586012][ T4376] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.596221][ T6356] netlink: 56 bytes leftover after parsing attributes in process `syz.2.610'. [ 254.712470][ T6365] device syzkaller0 entered promiscuous mode [ 254.810849][ T6253] Set syz1 is full, maxelem 65536 reached [ 255.573517][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.579918][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.904970][ T6387] loop3: detected capacity change from 0 to 512 [ 256.131833][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.024681][ T6410] device syzkaller0 entered promiscuous mode [ 259.423283][ T6417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.634'. [ 259.585919][ T6421] loop0: detected capacity change from 0 to 512 [ 259.696464][ T6423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 259.713698][ T4376] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.677604][ T6434] device syzkaller0 entered promiscuous mode [ 262.967700][ T6442] loop4: detected capacity change from 0 to 1024 [ 263.042384][ T6442] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.642: lblock 2 mapped to illegal pblock 2 (length 1) [ 263.056970][ T6442] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 263.065845][ T6442] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.642: lblock 0 mapped to illegal pblock 48 (length 1) [ 263.084608][ T6442] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 263.093824][ T6442] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.642: Failed to acquire dquot type 0 [ 263.105610][ T6442] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 263.118638][ T6442] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.642: mark_inode_dirty error [ 263.150602][ T6442] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 263.161052][ T6442] EXT4-fs (loop4): 1 orphan inode deleted [ 263.167376][ T6442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.240966][ T4443] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.364727][ T4443] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 263.379479][ T6463] device syzkaller0 entered promiscuous mode [ 263.386365][ T4443] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:19: Failed to release dquot type 0 [ 263.580226][ T6466] netlink: 80 bytes leftover after parsing attributes in process `syz.1.647'. [ 264.287077][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 264.320633][ T4290] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 264.440717][ T4290] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 264.559881][ T4290] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 264.965086][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 265.410179][ T6492] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 265.489664][ T6494] device syzkaller0 entered promiscuous mode [ 267.426519][ T6518] syz.4.669 (6518) used greatest stack depth: 18096 bytes left [ 268.162786][ T6551] device syzkaller0 entered promiscuous mode [ 269.809881][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 270.036647][ T6581] netlink: 52 bytes leftover after parsing attributes in process `syz.1.691'. [ 270.306463][ T6586] netlink: 'syz.1.693': attribute type 5 has an invalid length. [ 270.460906][ T4296] Bluetooth: hci4: command 0x0411 tx timeout [ 272.548241][ T6616] loop2: detected capacity change from 0 to 512 [ 274.519251][ T6620] device ip6gre1 entered promiscuous mode [ 274.768457][ T6622] loop0: detected capacity change from 0 to 256 [ 274.919213][ T6622] FAT-fs (loop0): Directory bread(block 64) failed [ 274.945557][ T6622] FAT-fs (loop0): Directory bread(block 65) failed [ 274.977317][ T6622] FAT-fs (loop0): Directory bread(block 66) failed [ 274.984705][ T6622] FAT-fs (loop0): Directory bread(block 67) failed [ 275.007310][ T6622] FAT-fs (loop0): Directory bread(block 68) failed [ 275.014120][ T6622] FAT-fs (loop0): Directory bread(block 69) failed [ 275.036922][ T6622] FAT-fs (loop0): Directory bread(block 70) failed [ 275.056161][ T6622] FAT-fs (loop0): Directory bread(block 71) failed [ 275.087507][ T6622] FAT-fs (loop0): Directory bread(block 72) failed [ 275.103069][ T6622] FAT-fs (loop0): Directory bread(block 73) failed [ 276.054469][ T6626] netlink: 'syz.3.710': attribute type 3 has an invalid length. [ 276.339940][ T6634] device syzkaller0 entered promiscuous mode [ 277.083668][ T6658] loop2: detected capacity change from 0 to 256 [ 277.192225][ T6658] FAT-fs (loop2): Directory bread(block 64) failed [ 277.214711][ T6658] FAT-fs (loop2): Directory bread(block 65) failed [ 277.235853][ T6658] FAT-fs (loop2): Directory bread(block 66) failed [ 277.267597][ T6658] FAT-fs (loop2): Directory bread(block 67) failed [ 277.299108][ T6658] FAT-fs (loop2): Directory bread(block 68) failed [ 277.328396][ T6658] FAT-fs (loop2): Directory bread(block 69) failed [ 277.335535][ T6658] FAT-fs (loop2): Directory bread(block 70) failed [ 277.342546][ T6658] FAT-fs (loop2): Directory bread(block 71) failed [ 277.349221][ T6658] FAT-fs (loop2): Directory bread(block 72) failed [ 277.356705][ T6658] FAT-fs (loop2): Directory bread(block 73) failed [ 278.545105][ T6673] netlink: 'syz.2.726': attribute type 3 has an invalid length. [ 279.518441][ T4296] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 279.527297][ T4296] Bluetooth: hci1: Injecting HCI hardware error event [ 279.536811][ T48] Bluetooth: hci1: hardware error 0x00 [ 281.662154][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 281.679859][ T6675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.955224][ T6705] loop0: detected capacity change from 0 to 512 [ 284.210228][ T6713] device syzkaller0 entered promiscuous mode [ 284.298796][ T6715] loop3: detected capacity change from 0 to 256 [ 285.203214][ T6715] FAT-fs (loop3): Directory bread(block 64) failed [ 285.209991][ T6715] FAT-fs (loop3): Directory bread(block 65) failed [ 285.241270][ T6715] FAT-fs (loop3): Directory bread(block 66) failed [ 285.247859][ T6715] FAT-fs (loop3): Directory bread(block 67) failed [ 285.270741][ T6715] FAT-fs (loop3): Directory bread(block 68) failed [ 285.287697][ T6715] FAT-fs (loop3): Directory bread(block 69) failed [ 285.304764][ T6715] FAT-fs (loop3): Directory bread(block 70) failed [ 285.322434][ T6715] FAT-fs (loop3): Directory bread(block 71) failed [ 285.339302][ T6715] FAT-fs (loop3): Directory bread(block 72) failed [ 285.349373][ T6715] FAT-fs (loop3): Directory bread(block 73) failed [ 286.222889][ T6667] Set syz1 is full, maxelem 65536 reached [ 287.143279][ T6739] loop1: detected capacity change from 0 to 512 [ 287.206293][ T4376] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.951075][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 289.020955][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 289.066663][ T6735] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.075504][ T6735] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.084373][ T6735] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.093140][ T6735] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.175354][ T6748] loop3: detected capacity change from 0 to 256 [ 289.208295][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 289.224571][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 289.316015][ T6748] FAT-fs (loop3): Directory bread(block 64) failed [ 289.341561][ T6748] FAT-fs (loop3): Directory bread(block 65) failed [ 289.365045][ T6748] FAT-fs (loop3): Directory bread(block 66) failed [ 289.394931][ T6748] FAT-fs (loop3): Directory bread(block 67) failed [ 289.416270][ T6748] FAT-fs (loop3): Directory bread(block 68) failed [ 289.470625][ T6748] FAT-fs (loop3): Directory bread(block 69) failed [ 289.500636][ T6748] FAT-fs (loop3): Directory bread(block 70) failed [ 289.507249][ T6748] FAT-fs (loop3): Directory bread(block 71) failed [ 289.544518][ T6748] FAT-fs (loop3): Directory bread(block 72) failed [ 289.564682][ T6748] FAT-fs (loop3): Directory bread(block 73) failed [ 289.742775][ T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 289.751705][ T48] Bluetooth: hci4: Injecting HCI hardware error event [ 289.761351][ T4296] Bluetooth: hci4: hardware error 0x00 [ 289.915158][ T48] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 290.701076][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 291.521121][ T6772] device syzkaller0 entered promiscuous mode [ 291.694681][ T6775] loop3: detected capacity change from 0 to 512 [ 293.301103][ T4296] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 293.548877][ T6781] loop0: detected capacity change from 0 to 256 [ 293.599458][ T6781] FAT-fs (loop0): Directory bread(block 64) failed [ 293.616402][ T6781] FAT-fs (loop0): Directory bread(block 65) failed [ 293.632857][ T6781] FAT-fs (loop0): Directory bread(block 66) failed [ 293.654584][ T6781] FAT-fs (loop0): Directory bread(block 67) failed [ 293.675849][ T6781] FAT-fs (loop0): Directory bread(block 68) failed [ 293.824161][ T6781] FAT-fs (loop0): Directory bread(block 69) failed [ 293.837788][ T6781] FAT-fs (loop0): Directory bread(block 70) failed [ 293.874992][ T6781] FAT-fs (loop0): Directory bread(block 71) failed [ 293.891114][ T6781] FAT-fs (loop0): Directory bread(block 72) failed [ 293.897726][ T6781] FAT-fs (loop0): Directory bread(block 73) failed [ 295.852698][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 296.767914][ T6810] loop3: detected capacity change from 0 to 512 [ 298.895540][ T6823] loop0: detected capacity change from 0 to 256 [ 299.232633][ T6823] FAT-fs (loop0): Directory bread(block 64) failed [ 299.250685][ T6823] FAT-fs (loop0): Directory bread(block 65) failed [ 299.257392][ T6823] FAT-fs (loop0): Directory bread(block 66) failed [ 299.304913][ T6823] FAT-fs (loop0): Directory bread(block 67) failed [ 299.331782][ T6823] FAT-fs (loop0): Directory bread(block 68) failed [ 299.348801][ T6823] FAT-fs (loop0): Directory bread(block 69) failed [ 299.369596][ T6823] FAT-fs (loop0): Directory bread(block 70) failed [ 299.379694][ T6823] FAT-fs (loop0): Directory bread(block 71) failed [ 299.410959][ T6823] FAT-fs (loop0): Directory bread(block 72) failed [ 299.417965][ T6823] FAT-fs (loop0): Directory bread(block 73) failed [ 300.698154][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 301.455883][ T6845] loop1: detected capacity change from 0 to 512 [ 301.580552][ T4376] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 303.656076][ T6854] device syzkaller0 entered promiscuous mode [ 304.646715][ T6866] loop2: detected capacity change from 0 to 256 [ 304.724453][ T6866] FAT-fs (loop2): Directory bread(block 64) failed [ 304.754322][ T6866] FAT-fs (loop2): Directory bread(block 65) failed [ 304.771650][ T6866] FAT-fs (loop2): Directory bread(block 66) failed [ 304.782177][ T6866] FAT-fs (loop2): Directory bread(block 67) failed [ 304.788930][ T6866] FAT-fs (loop2): Directory bread(block 68) failed [ 304.796118][ T6866] FAT-fs (loop2): Directory bread(block 69) failed [ 304.808763][ T6866] FAT-fs (loop2): Directory bread(block 70) failed [ 304.815756][ T6866] FAT-fs (loop2): Directory bread(block 71) failed [ 304.823336][ T6866] FAT-fs (loop2): Directory bread(block 72) failed [ 304.829905][ T6866] FAT-fs (loop2): Directory bread(block 73) failed [ 305.995649][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 306.547478][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.796'. [ 306.910083][ T6889] loop4: detected capacity change from 0 to 512 [ 311.047233][ T26] audit: type=1326 audit(1780642900.327:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.084167][ T26] audit: type=1326 audit(1780642900.367:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.089679][ T6914] loop2: detected capacity change from 0 to 256 [ 311.116159][ T26] audit: type=1326 audit(1780642900.367:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.153833][ T26] audit: type=1326 audit(1780642900.367:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.218603][ T26] audit: type=1326 audit(1780642900.367:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.275213][ T26] audit: type=1326 audit(1780642900.367:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.334528][ T26] audit: type=1326 audit(1780642900.367:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.386541][ T6914] FAT-fs (loop2): Directory bread(block 64) failed [ 311.393253][ T6914] FAT-fs (loop2): Directory bread(block 65) failed [ 311.408776][ T6914] FAT-fs (loop2): Directory bread(block 66) failed [ 311.418011][ T26] audit: type=1326 audit(1780642900.367:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.448478][ T6914] FAT-fs (loop2): Directory bread(block 67) failed [ 311.472151][ T6914] FAT-fs (loop2): Directory bread(block 68) failed [ 311.490738][ T6914] FAT-fs (loop2): Directory bread(block 69) failed [ 311.497400][ T6914] FAT-fs (loop2): Directory bread(block 70) failed [ 311.504733][ T26] audit: type=1326 audit(1780642900.367:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.552456][ T6914] FAT-fs (loop2): Directory bread(block 71) failed [ 311.560037][ T6914] FAT-fs (loop2): Directory bread(block 72) failed [ 311.570003][ T26] audit: type=1326 audit(1780642900.367:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149cd9ce59 code=0x7ffc0000 [ 311.618297][ T6914] FAT-fs (loop2): Directory bread(block 73) failed [ 312.398311][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 312.969346][ T6930] loop3: detected capacity change from 0 to 512 [ 313.200186][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.026969][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.033473][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.649965][ T6947] loop1: detected capacity change from 0 to 256 [ 317.735621][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 317.735647][ T26] audit: type=1326 audit(1780642907.017:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 317.850429][ T26] audit: type=1326 audit(1780642907.057:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 317.960438][ T26] audit: type=1326 audit(1780642907.057:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 318.087453][ T26] audit: type=1326 audit(1780642907.057:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 318.217200][ T26] audit: type=1326 audit(1780642907.057:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 318.258000][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.819'. [ 318.314657][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'. [ 318.351201][ T26] audit: type=1326 audit(1780642907.057:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 318.450447][ T26] audit: type=1326 audit(1780642907.057:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 318.570418][ T26] audit: type=1326 audit(1780642907.057:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 318.684884][ T26] audit: type=1326 audit(1780642907.057:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 318.824611][ T26] audit: type=1326 audit(1780642907.057:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 319.033614][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 319.775323][ T6947] FAT-fs (loop1): Directory bread(block 64) failed [ 319.785404][ T6947] FAT-fs (loop1): Directory bread(block 65) failed [ 319.794626][ T6965] loop2: detected capacity change from 0 to 512 [ 319.821335][ T6947] FAT-fs (loop1): Directory bread(block 66) failed [ 319.868557][ T6947] FAT-fs (loop1): Directory bread(block 67) failed [ 321.566639][ T6947] FAT-fs (loop1): Directory bread(block 68) failed [ 321.597493][ T6947] FAT-fs (loop1): Directory bread(block 69) failed [ 321.620099][ T6947] FAT-fs (loop1): Directory bread(block 70) failed [ 321.654931][ T6947] FAT-fs (loop1): Directory bread(block 71) failed [ 321.696535][ T6947] FAT-fs (loop1): Directory bread(block 72) failed [ 321.881894][ T6947] FAT-fs (loop1): Directory bread(block 73) failed [ 325.749121][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 326.085828][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 326.085846][ T26] audit: type=1326 audit(1780642915.367:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.163025][ T26] audit: type=1326 audit(1780642915.377:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.261585][ T26] audit: type=1326 audit(1780642915.397:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.363713][ T26] audit: type=1326 audit(1780642915.397:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.447668][ T26] audit: type=1326 audit(1780642915.397:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.540333][ T26] audit: type=1326 audit(1780642915.397:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.604739][ T26] audit: type=1326 audit(1780642915.397:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.673445][ T26] audit: type=1326 audit(1780642915.407:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.767836][ T26] audit: type=1326 audit(1780642915.407:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 326.837148][ T7002] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 326.877976][ T26] audit: type=1326 audit(1780642915.407:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab79ce59 code=0x7ffc0000 [ 327.118176][ T7006] loop2: detected capacity change from 0 to 256 [ 327.445518][ T7012] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 328.842758][ T7006] FAT-fs (loop2): Directory bread(block 64) failed [ 328.849369][ T7006] FAT-fs (loop2): Directory bread(block 65) failed [ 328.881974][ T7006] FAT-fs (loop2): Directory bread(block 66) failed [ 328.948365][ T7006] FAT-fs (loop2): Directory bread(block 67) failed [ 328.988382][ T7006] FAT-fs (loop2): Directory bread(block 68) failed [ 329.014657][ T7006] FAT-fs (loop2): Directory bread(block 69) failed [ 329.056768][ T7006] FAT-fs (loop2): Directory bread(block 70) failed [ 329.092723][ T7006] FAT-fs (loop2): Directory bread(block 71) failed [ 329.121206][ T7006] FAT-fs (loop2): Directory bread(block 72) failed [ 329.168387][ T7006] FAT-fs (loop2): Directory bread(block 73) failed [ 330.169045][ T7031] device syzkaller0 entered promiscuous mode [ 331.349323][ T7054] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.414166][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.421067][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.427928][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.434786][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.441626][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.448413][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.455253][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.462130][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.468952][ T7056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 331.844755][ T7060] loop4: detected capacity change from 0 to 256 [ 332.844780][ T7060] FAT-fs (loop4): Directory bread(block 64) failed [ 332.860727][ T7060] FAT-fs (loop4): Directory bread(block 65) failed [ 332.886937][ T7060] FAT-fs (loop4): Directory bread(block 66) failed [ 332.935246][ T7060] FAT-fs (loop4): Directory bread(block 67) failed [ 332.971545][ T7060] FAT-fs (loop4): Directory bread(block 68) failed [ 333.082925][ T7060] FAT-fs (loop4): Directory bread(block 69) failed [ 333.089610][ T7060] FAT-fs (loop4): Directory bread(block 70) failed [ 333.139883][ T7060] FAT-fs (loop4): Directory bread(block 71) failed [ 333.204091][ T7060] FAT-fs (loop4): Directory bread(block 72) failed [ 333.367826][ T7060] FAT-fs (loop4): Directory bread(block 73) failed [ 340.229704][ T7101] loop2: detected capacity change from 0 to 256 [ 341.578432][ T7101] FAT-fs (loop2): Directory bread(block 64) failed [ 341.585254][ T7101] FAT-fs (loop2): Directory bread(block 65) failed [ 341.611955][ T7101] FAT-fs (loop2): Directory bread(block 66) failed [ 341.634595][ T7101] FAT-fs (loop2): Directory bread(block 67) failed [ 341.655177][ T7101] FAT-fs (loop2): Directory bread(block 68) failed [ 341.683917][ T7101] FAT-fs (loop2): Directory bread(block 69) failed [ 341.714472][ T7101] FAT-fs (loop2): Directory bread(block 70) failed [ 341.740783][ T7101] FAT-fs (loop2): Directory bread(block 71) failed [ 341.767699][ T7101] FAT-fs (loop2): Directory bread(block 72) failed [ 341.787340][ T7101] FAT-fs (loop2): Directory bread(block 73) failed [ 343.299842][ T7124] device syzkaller0 entered promiscuous mode [ 360.457239][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.486374][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.497213][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.506096][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.513711][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 360.521293][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.359430][ T7237] chnl_net:caif_netlink_parms(): no params data found [ 361.557424][ T4296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.572727][ T4296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.586448][ T4296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.646049][ T4296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.654532][ T4296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 361.662142][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.609617][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.625569][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 362.690456][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.776061][ T7237] device bridge_slave_0 entered promiscuous mode [ 362.846021][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 362.898448][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.927672][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.971578][ T7237] device bridge_slave_1 entered promiscuous mode [ 363.133717][ T7260] netlink: 'syz.0.914': attribute type 8 has an invalid length. [ 363.283111][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.345282][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.140434][ T4296] Bluetooth: hci5: command 0x0409 tx timeout [ 364.338531][ T7237] team0: Port device team_slave_0 added [ 364.369488][ T7276] netlink: 'syz.3.918': attribute type 4 has an invalid length. [ 364.458760][ T7271] netlink: 'syz.3.918': attribute type 4 has an invalid length. [ 364.513333][ T7277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.919'. [ 364.680605][ T7237] team0: Port device team_slave_1 added [ 364.699731][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 364.785073][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 364.853404][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.894317][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.012004][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.055233][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.080459][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.147558][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.345443][ T7237] device hsr_slave_0 entered promiscuous mode [ 365.366771][ T7237] device hsr_slave_1 entered promiscuous mode [ 365.407955][ T7237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.437040][ T7237] Cannot create hsr debugfs directory [ 365.625356][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.646071][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.672379][ T7246] device bridge_slave_0 entered promiscuous mode [ 365.694300][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.711421][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.719822][ T7246] device bridge_slave_1 entered promiscuous mode [ 365.909660][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.973570][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.075878][ T7246] team0: Port device team_slave_0 added [ 366.115090][ T7246] team0: Port device team_slave_1 added [ 366.187905][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.208699][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.270228][ T4296] Bluetooth: hci5: command 0x041b tx timeout [ 366.298561][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.376696][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.422732][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.558304][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.612910][ T7237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.667875][ T7237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.692978][ T7237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.744435][ T7237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.780564][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 366.803420][ T7246] device hsr_slave_0 entered promiscuous mode [ 366.850487][ T7246] device hsr_slave_1 entered promiscuous mode [ 366.886863][ T7246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.924967][ T7246] Cannot create hsr debugfs directory [ 368.103037][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.893504][ T4296] Bluetooth: hci5: command 0x040f tx timeout [ 368.899604][ T4296] Bluetooth: hci0: command 0x0419 tx timeout [ 368.972072][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.017740][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.078680][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.131873][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.176421][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.383294][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.390482][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.755384][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.827434][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.898386][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.056899][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.064088][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.415464][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 371.799680][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.897728][ T7237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.991523][ T7237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.048620][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.068938][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 372.155725][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.643646][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.713748][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.773859][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.890197][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.926920][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.989229][ T7360] net_ratelimit: 631 callbacks suppressed [ 372.989246][ T7360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 373.002007][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.049057][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.096814][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.098950][ T7246] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.149597][ T7368] netlink: 60 bytes leftover after parsing attributes in process `syz.4.942'. [ 374.180876][ T7246] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.233392][ T7246] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 374.306606][ T7246] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.931705][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.018064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.031324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.069932][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.265817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.277900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.906704][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.025556][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.037714][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.085193][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.092413][ T4471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.106169][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.148278][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.179089][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.205875][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.213106][ T4471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.267365][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.331934][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.364881][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.405352][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.422665][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.473395][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.495744][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.566950][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.600827][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.609476][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.612248][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.624081][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.630919][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.637744][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.644580][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.650892][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.651685][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.665961][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.672786][ T7395] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 376.707487][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.746611][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.120342][ C0] sched: RT throttling activated [ 378.469837][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.476676][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.930669][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.940923][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.000704][ T7237] device veth0_vlan entered promiscuous mode [ 379.055172][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.084322][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.179126][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.224589][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.248079][ T7409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.951'. [ 379.293895][ T7237] device veth1_vlan entered promiscuous mode [ 379.395722][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.444986][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 379.476890][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.504123][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.622975][ T7237] device veth0_macvtap entered promiscuous mode [ 379.683362][ T7237] device veth1_macvtap entered promiscuous mode [ 379.792485][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.870377][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.880247][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.001803][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.040397][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.074465][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.101494][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.151425][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.194962][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.220456][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.228719][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.276484][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.292234][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.299754][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.332668][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.363348][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.374180][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.401259][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.443197][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.487389][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.535615][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.568820][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.612590][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.640301][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.662486][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.689620][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.716799][ T7237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.750375][ T7237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.759114][ T7237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.810416][ T7237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.033417][ T4439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.075486][ T4439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.112409][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 381.181907][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.194697][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.227688][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.873023][ T7439] net_ratelimit: 1464 callbacks suppressed [ 382.873043][ T7439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.092013][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.098911][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.105791][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.112618][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.119441][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.126275][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.133151][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.139994][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 383.146864][ T7441] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 384.572972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.626772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.693531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.920414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.982737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.007495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.048285][ T7246] device veth0_vlan entered promiscuous mode [ 386.071449][ T7447] netlink: 60 bytes leftover after parsing attributes in process `syz.5.960'. [ 386.148238][ T7246] device veth1_vlan entered promiscuous mode [ 386.323331][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.338188][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.392931][ T7246] device veth0_macvtap entered promiscuous mode [ 386.421163][ T7246] device veth1_macvtap entered promiscuous mode [ 386.531147][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.606696][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.640381][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.688201][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.699634][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.877956][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.323797][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.670527][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.701438][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.747616][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.788711][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.724749][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.784843][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.910442][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.042680][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.110451][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.181899][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.240379][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.343920][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.448137][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.564368][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.630443][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.665860][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.684014][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.719720][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.766385][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.880839][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.921768][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.050114][ T7246] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.755638][ T7246] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.926028][ T7246] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.305231][ T7246] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.530417][ T7492] netlink: 60 bytes leftover after parsing attributes in process `syz.0.975'. [ 391.647617][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.687737][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.778951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.892580][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.915953][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.930019][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 395.639935][ T7509] net_ratelimit: 247 callbacks suppressed [ 395.639953][ T7509] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.832775][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.839650][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.846489][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.853317][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.860096][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.866940][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.873785][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.880625][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.887412][ T7510] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 398.654266][ T7524] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.663134][ T7524] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.671924][ T7524] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.680716][ T7524] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.875157][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.5.986'. [ 401.470461][ T7535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.985'. [ 401.584292][ T7542] syzkaller0: refused to change device tx_queue_len [ 404.488701][ T7564] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 404.562657][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 404.715531][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 404.891221][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1003'. [ 405.849878][ T7582] net_ratelimit: 311 callbacks suppressed [ 405.849896][ T7582] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.910420][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.917292][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.924154][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.931000][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.937811][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.944645][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.951479][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.958291][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 405.965115][ T7583] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 407.827164][ T7596] device syzkaller0 entered promiscuous mode [ 408.037349][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 408.739396][ T7609] device bond0 entered promiscuous mode [ 408.767378][ T7609] device bond_slave_0 entered promiscuous mode [ 408.786517][ T7609] device bond_slave_1 entered promiscuous mode [ 408.855314][ T7609] device batadv0 entered promiscuous mode [ 409.913137][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1017'. [ 414.780846][ T7665] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 432.751006][ T7847] device syzkaller0 entered promiscuous mode [ 436.215658][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1104'. [ 436.395798][ T7906] loop0: detected capacity change from 0 to 256 [ 436.660566][ T7912] device bond1 entered promiscuous mode [ 437.116777][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1109'. [ 437.495724][ T7906] FAT-fs (loop0): Directory bread(block 64) failed [ 437.511129][ T7906] FAT-fs (loop0): Directory bread(block 65) failed [ 437.517785][ T7906] FAT-fs (loop0): Directory bread(block 66) failed [ 437.613891][ T7906] FAT-fs (loop0): Directory bread(block 67) failed [ 437.650475][ T7906] FAT-fs (loop0): Directory bread(block 68) failed [ 437.657088][ T7906] FAT-fs (loop0): Directory bread(block 69) failed [ 437.680229][ T7906] FAT-fs (loop0): Directory bread(block 70) failed [ 437.688403][ T7906] FAT-fs (loop0): Directory bread(block 71) failed [ 437.706313][ T7906] FAT-fs (loop0): Directory bread(block 72) failed [ 437.723401][ T7906] FAT-fs (loop0): Directory bread(block 73) failed [ 438.885582][ T7943] device syzkaller0 entered promiscuous mode [ 439.443666][ T7959] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 439.852927][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'. [ 439.926087][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.932496][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.834227][ T7952] loop3: detected capacity change from 0 to 1024 [ 441.295452][ T7952] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.1117: lblock 2 mapped to illegal pblock 2 (length 1) [ 441.360110][ T7952] __quota_error: 64 callbacks suppressed [ 441.360126][ T7952] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 441.470435][ T7952] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.1117: lblock 0 mapped to illegal pblock 48 (length 1) [ 441.650815][ T7952] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 441.673647][ T7952] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1117: Failed to acquire dquot type 0 [ 443.327477][ T7952] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 443.449791][ T7952] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.1117: mark_inode_dirty error [ 443.629124][ T7952] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 443.711517][ T7952] EXT4-fs (loop3): 1 orphan inode deleted [ 443.749851][ T4458] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 443.776741][ T7952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 443.876431][ T4458] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 443.927136][ T4458] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:24: Failed to release dquot type 0 [ 444.271609][ T4292] EXT4-fs (loop3): unmounting filesystem. [ 444.320487][ T4292] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 444.392873][ T4292] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 444.426396][ T7998] loop5: detected capacity change from 0 to 512 [ 444.444729][ T4292] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 444.673998][ T7762] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.237493][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1133'. [ 447.730041][ T8024] netlink: 'syz.0.1137': attribute type 4 has an invalid length. [ 447.741909][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1132'. [ 449.565581][ T8032] device syzkaller0 entered promiscuous mode [ 450.792076][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1144'. [ 452.267972][ T8070] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 452.901611][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 456.040639][ T8109] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 457.552045][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'. [ 457.724796][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'. [ 458.638881][ T8145] tipc: Started in network mode [ 458.643864][ T8145] tipc: Node identity 2e9d8023c801, cluster identity 4711 [ 458.665203][ T8145] tipc: Enabled bearer , priority 0 [ 458.830826][ T8144] tipc: Disabling bearer [ 461.988762][ T8201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'. [ 462.184361][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'. [ 462.584144][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1181'. [ 462.696897][ T8220] tipc: Enabling of bearer rejected, failed to enable media [ 463.207711][ T8231] tipc: Enabling of bearer rejected, failed to enable media [ 463.690767][ T8243] device syzkaller0 entered promiscuous mode [ 466.160930][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 466.370532][ T8283] tipc: Enabling of bearer rejected, failed to enable media [ 470.140773][ T8307] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 471.431784][ T8327] tipc: Enabling of bearer rejected, failed to enable media [ 473.073609][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1216'. [ 477.225471][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 477.269659][ T8367] device syzkaller0 entered promiscuous mode [ 483.835478][ T4296] Bluetooth: hci0: command 0x0406 tx timeout [ 485.649507][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 485.730373][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 486.700643][ T8497] netlink: 'syz.0.1252': attribute type 3 has an invalid length. [ 487.807052][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1258'. [ 487.887334][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1258'. [ 488.056489][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 488.477582][ T4455] device hsr_slave_0 left promiscuous mode [ 488.497222][ T4455] device hsr_slave_1 left promiscuous mode [ 488.526745][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.589684][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.648556][ T4455] device bridge_slave_1 left promiscuous mode [ 489.480284][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.531500][ T4455] device bridge_slave_0 left promiscuous mode [ 489.538451][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.396528][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 491.550638][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 491.714127][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.855225][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.082434][ T4455] bond0 (unregistering): Released all slaves [ 493.713531][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 493.761356][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 495.356705][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1289'. [ 496.289600][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1296'. [ 496.362661][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1296'. [ 496.501394][ T8643] device syzkaller0 entered promiscuous mode [ 496.561848][ T8643] bond0: option arp_validate: invalid value (55553) [ 496.568725][ T4465] bond0: (slave bond_slave_0): interface is now down [ 496.601092][ T4465] bond0: (slave bond_slave_1): interface is now down [ 496.675305][ T4465] bond0: now running without any active interface! [ 496.811566][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 497.154830][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 499.296103][ T8704] device syzkaller0 entered promiscuous mode [ 499.380605][ T8704] net_ratelimit: 1271 callbacks suppressed [ 499.380622][ T8704] TC_ACT_REPEAT abuse ? [ 499.564337][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 500.253828][ T8723] tipc: Enabling of bearer rejected, failed to enable media [ 500.933771][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 501.341792][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.348137][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.519531][ T8751] device syzkaller0 entered promiscuous mode [ 510.441031][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1351'. [ 513.249641][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 514.982943][ T8924] netlink: 'syz.3.1380': attribute type 3 has an invalid length. [ 516.919609][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 517.535473][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1397'. [ 518.467207][ T8999] device syzkaller0 entered promiscuous mode [ 519.453592][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 520.573031][ T9048] device syzkaller0 entered promiscuous mode [ 520.604690][ T9048] tipc: Enabled bearer , priority 0 [ 520.637863][ T9046] tipc: Resetting bearer [ 520.796585][ T9046] tipc: Disabling bearer [ 522.891361][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'. [ 523.454532][ T9072] netlink: 'syz.3.1427': attribute type 27 has an invalid length. [ 524.152071][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'. [ 524.919182][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 525.766906][ T9109] device syzkaller0 entered promiscuous mode [ 526.109226][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 526.526676][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.554005][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.560891][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.567714][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.574554][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.581378][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.588176][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.595004][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.601836][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 526.608623][ T9127] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.160391][ T9135] netlink: 'syz.5.1448': attribute type 3 has an invalid length. [ 527.819958][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1450'. [ 529.502919][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1451'. [ 530.046872][ T9137] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1449'. [ 530.106191][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1454'. [ 531.661097][ T9167] net_ratelimit: 2039 callbacks suppressed [ 531.661118][ T9167] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 532.261015][ T9176] Bluetooth: MGMT ver 1.22 [ 532.285800][ T9176] x_tables: duplicate underflow at hook 1 [ 533.757116][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 534.679771][ T9133] Set syz1 is full, maxelem 65536 reached [ 535.691425][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 535.988193][ T9223] Bluetooth: MGMT ver 1.22 [ 537.525880][ T9237] netlink: 'syz.5.1485': attribute type 3 has an invalid length. [ 537.809033][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1489'. [ 537.835101][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 540.336664][ T9281] netlink: 'syz.0.1500': attribute type 3 has an invalid length. [ 541.149230][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 542.033922][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 542.897339][ T9307] device syzkaller0 entered promiscuous mode [ 544.011060][ T9319] device syzkaller0 entered promiscuous mode [ 547.765355][ T9278] Set syz1 is full, maxelem 65536 reached [ 548.003292][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 548.052696][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 552.642779][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1519'. [ 553.517405][ T9372] device syzkaller0 entered promiscuous mode [ 555.909472][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 556.344230][ T9392] netlink: 'syz.0.1534': attribute type 3 has an invalid length. [ 556.788933][ T9404] device syzkaller0 entered promiscuous mode [ 562.786941][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.793373][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.648160][ T9429] device syzkaller0 entered promiscuous mode [ 567.149993][ T9477] netlink: 'syz.6.1550': attribute type 3 has an invalid length. [ 567.816107][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 567.867516][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 567.957535][ T9483] device syzkaller0 entered promiscuous mode [ 572.082222][ T9510] netlink: 'syz.4.1561': attribute type 3 has an invalid length. [ 572.652012][ T9518] device syzkaller0 entered promiscuous mode [ 576.262928][ T9547] netlink: 'syz.6.1574': attribute type 3 has an invalid length. [ 580.929426][ T9596] device syzkaller0 entered promiscuous mode [ 582.294347][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1601'. [ 582.389997][ T9617] device syzkaller0 entered promiscuous mode [ 587.442394][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 590.500478][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1604'. [ 590.910400][ T9669] x_tables: duplicate entry at hook 2 [ 591.310851][ T9675] device syzkaller0 entered promiscuous mode [ 591.463900][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1620'. [ 591.495859][ T9678] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 592.088375][ T9682] loop5: detected capacity change from 0 to 512 [ 597.542325][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1631'. [ 598.429215][ T9722] loop5: detected capacity change from 0 to 512 [ 600.552223][ T9733] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 602.754530][ T9762] loop0: detected capacity change from 0 to 512 [ 602.788083][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 606.018045][ T9772] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 611.940157][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 611.962317][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 612.395407][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 612.434137][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.448801][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.488400][ T9823] device bridge_slave_1 left promiscuous mode [ 612.515261][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.545755][ T9823] bond0: (slave bond_slave_0): Releasing backup interface [ 612.605764][ T9823] bond0: (slave bond_slave_1): Releasing backup interface [ 612.674104][ T9823] team0: Port device team_slave_0 removed [ 612.767101][ T9823] team0: Port device team_slave_1 removed [ 612.818561][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.847134][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.896981][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.919154][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.031472][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 614.184177][ T9833] device syzkaller0 entered promiscuous mode [ 616.411864][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1681'. [ 622.235864][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 622.306796][ T9847] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 622.540623][ T9865] device syzkaller0 entered promiscuous mode [ 624.234955][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.241446][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.101171][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1695'. [ 625.493914][ T9903] device syzkaller1 entered promiscuous mode [ 627.143329][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1704'. [ 627.201154][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1704'. [ 628.715644][ T9935] x_tables: duplicate underflow at hook 2 [ 632.467944][ T9941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.234034][ T9962] device syzkaller0 entered promiscuous mode [ 635.263047][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 637.107021][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 638.903668][ T9996] device syzkaller0 entered promiscuous mode [ 638.915545][T10003] tipc: Enabled bearer , priority 0 [ 638.945012][ T9995] tipc: Resetting bearer [ 639.081493][ T9995] tipc: Disabling bearer [ 641.060665][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 641.100960][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 650.342440][T10090] device syzkaller1 entered promiscuous mode [ 650.620961][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 650.694321][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 650.712994][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 651.434806][T10117] device syzkaller0 entered promiscuous mode [ 651.554991][T10118] tipc: Enabled bearer , priority 0 [ 651.751811][T10116] tipc: Resetting bearer [ 652.557116][T10116] tipc: Disabling bearer [ 652.945958][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 652.965710][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 653.813986][T10129] device syzkaller0 entered promiscuous mode [ 657.092866][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 657.172363][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 657.730651][T10152] netlink: 'syz.3.1762': attribute type 3 has an invalid length. [ 657.781662][T10154] device syzkaller1 entered promiscuous mode [ 658.088264][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 658.521515][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 658.561283][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 660.736795][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1770'. [ 661.878604][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 661.922990][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1772'. [ 662.884519][T10187] netlink: 'syz.5.1774': attribute type 3 has an invalid length. [ 663.188307][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 666.920092][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 667.275578][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 667.307190][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 667.438931][T10226] tipc: Enabling of bearer rejected, failed to enable media [ 667.804096][T10231] netlink: 'syz.3.1788': attribute type 3 has an invalid length. [ 668.179997][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 668.412587][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1790'. [ 668.998446][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1786'. [ 669.374385][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 670.648681][T10263] netlink: 'syz.6.1799': attribute type 3 has an invalid length. [ 671.623369][T10268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1801'. [ 671.992069][T10272] netlink: 'syz.0.1803': attribute type 21 has an invalid length. [ 672.000004][T10272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1803'. [ 672.295556][T10272] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 672.747170][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 672.846070][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 674.297218][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 674.330914][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 675.077196][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 675.292794][T10307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 675.450308][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'. [ 675.500387][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1819'. [ 676.070687][T10319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 676.366623][T10321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1821'. [ 676.521192][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1821'. [ 677.120798][T10332] device syzkaller0 entered promiscuous mode [ 678.438484][T10262] Set syz1 is full, maxelem 65536 reached [ 678.972181][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1830'. [ 679.134751][T10341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.291918][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'. [ 680.819592][T10365] netlink: 'syz.4.1838': attribute type 3 has an invalid length. [ 681.748979][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'. [ 681.776337][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'. [ 682.025666][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1844'. [ 682.396584][T10379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.839908][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 682.977706][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 683.355612][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 683.402363][T10398] netlink: 'syz.0.1849': attribute type 3 has an invalid length. [ 685.694199][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.700627][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.880800][T10419] netlink: 'syz.3.1858': attribute type 3 has an invalid length. [ 686.270172][T10427] batman_adv: batadv0: Adding interface: dummy0 [ 686.491046][T10427] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.957879][T10427] batman_adv: batadv0: Interface activated: dummy0 [ 687.068173][T10432] batadv0: mtu less than device minimum [ 687.083780][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.096745][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.109220][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.121504][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.133961][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.146400][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.158760][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.170948][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.183302][T10432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.785622][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 687.813631][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 687.915503][T10450] device syzkaller0 entered promiscuous mode [ 688.870634][T10463] netlink: 'syz.5.1875': attribute type 3 has an invalid length. [ 690.624523][T10486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1884'. [ 690.734247][T10490] netlink: 'syz.6.1886': attribute type 3 has an invalid length. [ 691.014061][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 691.068652][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 691.365373][T10496] device syzkaller0 entered promiscuous mode [ 693.678439][T10529] netlink: 'syz.4.1898': attribute type 3 has an invalid length. [ 693.920444][T10538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1899'. [ 694.029295][T10540] netlink: 'syz.6.1900': attribute type 3 has an invalid length. [ 694.662656][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1904'. [ 694.873800][T10554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 695.340543][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 695.402327][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 695.517134][T10562] device syzkaller0 entered promiscuous mode [ 696.035536][T10577] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1912'. [ 700.301633][T10525] net_ratelimit: 10 callbacks suppressed [ 700.301651][T10525] Set syz1 is full, maxelem 65536 reached [ 704.665931][T10579] netlink: 'syz.6.1913': attribute type 3 has an invalid length. [ 705.178234][T10626] device syzkaller0 entered promiscuous mode [ 705.232139][T10626] tipc: Enabled bearer , priority 0 [ 705.296582][T10624] tipc: Resetting bearer [ 705.431709][T10624] tipc: Disabling bearer [ 705.733991][T10633] netlink: 'syz.6.1926': attribute type 3 has an invalid length. [ 706.566109][T10643] netlink: 'syz.0.1931': attribute type 3 has an invalid length. [ 707.164201][T10658] netlink: 'syz.5.1936': attribute type 13 has an invalid length. [ 707.259858][T10662] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 707.341716][T10665] IPVS: rr: FWM 3 0x00000003 - no destination available [ 707.406154][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 707.674865][T10658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 707.902168][T10658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 707.943643][T10658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.588935][T10715] netlink: 'syz.5.1943': attribute type 1 has an invalid length. [ 709.735534][T10715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.781538][T10719] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 709.873984][T10728] netlink: 'syz.6.1945': attribute type 3 has an invalid length. [ 709.899556][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1946'. [ 711.934122][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 712.058659][T10749] device syzkaller0 entered promiscuous mode [ 712.160995][T10749] tipc: Started in network mode [ 712.165948][T10749] tipc: Node identity 6a882829f17d, cluster identity 4711 [ 712.242449][T10749] tipc: Enabled bearer , priority 0 [ 712.276875][T10748] tipc: Resetting bearer [ 712.502837][T10748] tipc: Disabling bearer [ 712.752436][T10760] netlink: 'syz.3.1958': attribute type 7 has an invalid length. [ 713.048446][T10765] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1960'. [ 713.070359][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1961'. [ 713.519439][T10769] netlink: 'syz.6.1962': attribute type 3 has an invalid length. [ 715.546463][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1967'. [ 716.474037][T10798] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1972'. [ 716.934266][T10804] netlink: 'syz.5.1975': attribute type 3 has an invalid length. [ 716.989869][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1976'. [ 717.896437][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 719.216095][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 721.140394][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1984'. [ 722.945223][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 724.484617][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1994'. [ 725.175762][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1997'. [ 727.417960][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 728.630405][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 728.693602][T10910] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 728.835809][T10913] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1995'. [ 728.940063][T10913] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 729.589377][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 730.198816][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 733.144026][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2017'. [ 734.136734][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2019'. [ 734.257865][T10965] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 734.611181][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 734.660659][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2021'. [ 738.054167][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2029'. [ 738.556214][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 738.668409][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2034'. [ 740.067083][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2039'. [ 740.301990][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2042'. [ 741.421587][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 744.072281][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 744.098336][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 744.756477][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'. [ 745.526101][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2056'. [ 746.419453][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 747.320587][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.326955][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.772333][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2063'. [ 747.831902][T11093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2063'. [ 748.090273][T11099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.656876][T11103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2070'. [ 749.310652][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2072'. [ 749.935290][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2074'. [ 750.358395][T11122] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2077'. [ 751.149550][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 753.533027][T11140] device syzkaller0 entered promiscuous mode [ 753.559040][T11140] tipc: Enabled bearer , priority 0 [ 753.631579][T11139] tipc: Resetting bearer [ 753.743266][T11139] tipc: Disabling bearer [ 753.992081][T11146] netlink: 'syz.3.2081': attribute type 13 has an invalid length. [ 754.030936][T11146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 754.056598][T11146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 754.089302][T11149] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 754.112165][T11146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 754.143551][T11150] IPVS: rr: FWM 3 0x00000003 - no destination available [ 754.525399][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 759.384817][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2098'. [ 759.559812][T11187] netlink: 'syz.5.2099': attribute type 13 has an invalid length. [ 759.616002][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 759.627065][T11188] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 759.682721][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.747790][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 760.318620][T11195] netlink: 'syz.5.2103': attribute type 3 has an invalid length. [ 760.382839][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2103'. [ 762.268089][T11199] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 762.280336][T11199] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 765.267769][T11223] netlink: 'syz.0.2113': attribute type 10 has an invalid length. [ 765.901700][T11223] team0 (unregistering): Port device team_slave_0 removed [ 766.026390][T11223] team0 (unregistering): Failed to send options change via netlink (err -105) [ 766.072050][T11223] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 766.115321][T11223] team0 (unregistering): Port device team_slave_1 removed [ 767.427648][T11243] device syzkaller0 entered promiscuous mode [ 767.466540][T11243] tipc: Enabled bearer , priority 0 [ 767.518924][T11242] tipc: Resetting bearer [ 767.577560][T11242] tipc: Disabling bearer [ 770.688609][T11261] netlink: 'syz.0.2126': attribute type 4 has an invalid length. [ 770.722295][T11261] netlink: 'syz.0.2126': attribute type 4 has an invalid length. [ 771.025809][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 771.326911][T11265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2128'. [ 771.616324][T11268] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2130'. [ 773.728346][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2138'. [ 774.718461][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2142'. [ 777.385048][T11315] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2148'. [ 777.787967][T11317] device syzkaller0 entered promiscuous mode [ 778.731615][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2153'. [ 781.149296][T11347] device syzkaller0 entered promiscuous mode [ 781.167532][T11348] device syzkaller0 entered promiscuous mode [ 781.184414][T11350] tipc: Enabled bearer , priority 0 [ 781.243263][T11344] tipc: Resetting bearer [ 781.354727][T11344] tipc: Disabling bearer [ 789.014516][T11352] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2162'. [ 789.025724][T11355] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2159'. [ 789.070600][T11365] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2166'. [ 789.377275][T11371] 0: reclassify loop, rule prio 0, protocol 700 [ 789.802365][T11383] device syzkaller0 entered promiscuous mode [ 789.850869][T11383] tipc: Enabled bearer , priority 0 [ 789.898573][T11382] tipc: Resetting bearer [ 790.056502][T11382] tipc: Disabling bearer [ 790.339997][T11391] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2177'. [ 790.582065][T11394] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2178'. [ 790.954607][T11398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2180'. [ 793.211980][T11417] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2188'. [ 793.488406][T11420] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2190'. [ 793.733449][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2192'. [ 795.136389][T11446] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2201'. [ 795.451344][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2204'. [ 795.750095][T11460] device syzkaller0 entered promiscuous mode [ 796.095052][T11467] device syzkaller0 entered promiscuous mode [ 796.123206][T11467] tipc: Enabled bearer , priority 0 [ 804.077202][T11466] tipc: Resetting bearer [ 804.187922][T11466] tipc: Disabling bearer [ 804.301114][T11496] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2217'. [ 804.998851][T11515] netlink: 'syz.0.2224': attribute type 13 has an invalid length. [ 805.110990][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 805.162036][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 805.187047][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.265545][T11529] netlink: 'syz.5.2230': attribute type 1 has an invalid length. [ 806.309517][T11529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 806.453390][T11533] bond4: (slave veth5): Enslaving as an active interface with a down link [ 806.492363][T11534] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2231'. [ 806.533835][T11529] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2230'. [ 806.593514][T11533] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2230'. [ 806.657679][T11533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.084769][T11544] device vlan2 entered promiscuous mode [ 807.094927][T11544] device bond_slave_1 entered promiscuous mode [ 807.111143][T11544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 807.790766][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 808.252941][T11556] 0: reclassify loop, rule prio 0, protocol 700 [ 808.566140][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.572538][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.872281][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2241'. [ 809.120269][T11564] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2242'. [ 810.090037][T11581] device syzkaller0 entered promiscuous mode [ 810.124381][T11581] tipc: Started in network mode [ 810.136133][T11581] tipc: Node identity b2f0643d537c, cluster identity 4711 [ 810.150655][T11581] tipc: Enabled bearer , priority 0 [ 810.195519][T11580] tipc: Resetting bearer [ 810.393685][T11580] tipc: Disabling bearer [ 810.444877][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'. [ 810.810368][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2254'. [ 810.882075][T11591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2254'. [ 812.182050][T11606] xt_ecn: cannot match TCP bits for non-tcp packets [ 812.271992][T11608] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2260'. [ 812.745570][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 812.921686][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2265'. [ 813.093664][T11623] device syzkaller0 entered promiscuous mode [ 820.788234][T11660] netlink: 'syz.4.2272': attribute type 4 has an invalid length. [ 820.894606][T11664] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2273'. [ 821.408643][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2276'. [ 821.651414][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2278'. [ 821.737738][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2278'. [ 821.969488][T11685] device syzkaller0 entered promiscuous mode [ 822.010540][T11685] tipc: Enabled bearer , priority 0 [ 822.049028][T11684] tipc: Resetting bearer [ 822.132496][T11684] tipc: Disabling bearer [ 823.160284][T11691] xt_ecn: cannot match TCP bits for non-tcp packets [ 823.397789][T11695] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2285'. [ 824.155004][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2289'. [ 824.451375][T11708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2290'. [ 824.603406][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2290'. [ 825.430295][T11721] xt_ecn: cannot match TCP bits for non-tcp packets [ 825.761919][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2300'. [ 826.306255][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2302'. [ 826.373780][T11737] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2302'. [ 826.748641][T11747] device syzkaller0 entered promiscuous mode [ 826.783815][T11747] tipc: Enabled bearer , priority 0 [ 826.873840][T11744] tipc: Resetting bearer [ 827.062718][T11744] tipc: Disabling bearer [ 827.226951][T11757] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2311'. [ 827.603688][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2316'. [ 828.134447][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2316'. [ 828.468914][T11773] device vlan2 entered promiscuous mode [ 828.482605][T11773] device bond_slave_1 entered promiscuous mode [ 828.506558][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 829.273950][T10710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 829.621927][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2328'. [ 829.740945][T11800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2328'. [ 831.426368][T11820] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=942891368 (1885782736 ns) > initial count (1077952740 ns). Using initial count to start timer. [ 831.451528][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2341'. [ 831.490088][T11820] ------------[ cut here ]------------ [ 831.496132][T11820] WARNING: CPU: 0 PID: 11820 at arch/x86/kvm/x86.c:11275 kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.506559][T11820] Modules linked in: [ 831.510539][T11820] CPU: 0 PID: 11820 Comm: syz.6.2339 Not tainted syzkaller #0 [ 831.518050][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.528209][T11820] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.534721][T11820] Code: e8 69 73 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 2e 73 c3 00 e9 b0 e5 ff ff e8 a4 6b 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 831.554863][T11820] RSP: 0018:ffffc90005a4fc48 EFLAGS: 00010287 [ 831.561040][T11820] RAX: ffffffff81100ffc RBX: ffff888077fda7c0 RCX: 0000000000080000 [ 831.569058][T11820] RDX: ffffc9001210c000 RSI: 0000000000000411 RDI: 0000000000000412 [ 831.577192][T11820] RBP: ffff88807c3f8000 R08: dffffc0000000000 R09: 1ffffffff215fe70 [ 831.585244][T11820] R10: dffffc0000000000 R11: fffffbfff215fe71 R12: ffff888077fdaac4 [ 831.593295][T11820] R13: ffff888077fda898 R14: dffffc0000000000 R15: 0000000000000000 [ 831.601343][T11820] FS: 00007f0cc0f136c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 831.610346][T11820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.616977][T11820] CR2: 000000110c2fce38 CR3: 0000000054385000 CR4: 00000000003526f0 [ 831.625041][T11820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.633087][T11820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.641225][T11820] Call Trace: [ 831.644557][T11820] [ 831.647530][T11820] ? mutex_lock_nested+0x10/0x10 [ 831.652552][T11820] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 831.658324][T11820] kvm_vcpu_ioctl+0x8f7/0xc10 [ 831.663089][T11820] ? xa_release+0x50/0x50 [ 831.667467][T11820] ? __fget_files+0x28/0x4b0 [ 831.672138][T11820] ? __fget_files+0x28/0x4b0 [ 831.676803][T11820] ? bpf_lsm_file_ioctl+0x5/0x10 [ 831.681832][T11820] ? security_file_ioctl+0x7c/0xa0 [ 831.686996][T11820] ? xa_release+0x50/0x50 [ 831.691406][T11820] __se_sys_ioctl+0xfa/0x170 [ 831.696055][T11820] do_syscall_64+0x4c/0xa0 [ 831.700544][T11820] ? clear_bhb_loop+0x60/0xb0 [ 831.705305][T11820] ? clear_bhb_loop+0x60/0xb0 [ 831.710065][T11820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.716057][T11820] RIP: 0033:0x7f0cbff9ce59 [ 831.720579][T11820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.740266][T11820] RSP: 002b:00007f0cc0f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.748750][T11820] RAX: ffffffffffffffda RBX: 00007f0cc0215fa0 RCX: 00007f0cbff9ce59 [ 831.756840][T11820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 831.764900][T11820] RBP: 00007f0cc0032d6f R08: 0000000000000000 R09: 0000000000000000 [ 831.777661][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.785807][T11820] R13: 00007f0cc0216038 R14: 00007f0cc0215fa0 R15: 00007ffd952501e8 [ 831.793903][T11820] [ 831.796962][T11820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 831.804285][T11820] CPU: 0 PID: 11820 Comm: syz.6.2339 Not tainted syzkaller #0 [ 831.811786][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.821882][T11820] Call Trace: [ 831.825191][T11820] [ 831.828169][T11820] dump_stack_lvl+0x188/0x24e [ 831.832895][T11820] ? memcpy+0x3c/0x60 [ 831.836920][T11820] ? show_regs_print_info+0x12/0x12 [ 831.842175][T11820] ? load_image+0x400/0x400 [ 831.846757][T11820] panic+0x2e5/0x730 [ 831.850718][T11820] ? bpf_jit_dump+0xd0/0xd0 [ 831.855278][T11820] __warn+0x2f8/0x4f0 [ 831.859303][T11820] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.865149][T11820] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.870985][T11820] report_bug+0x2ba/0x4f0 [ 831.875333][T11820] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.881178][T11820] handle_bug+0x3a/0x70 [ 831.885353][T11820] exc_invalid_op+0x16/0x40 [ 831.889962][T11820] asm_exc_invalid_op+0x16/0x20 [ 831.894839][T11820] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.901286][T11820] Code: e8 69 73 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 2e 73 c3 00 e9 b0 e5 ff ff e8 a4 6b 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 831.920912][T11820] RSP: 0018:ffffc90005a4fc48 EFLAGS: 00010287 [ 831.927007][T11820] RAX: ffffffff81100ffc RBX: ffff888077fda7c0 RCX: 0000000000080000 [ 831.935003][T11820] RDX: ffffc9001210c000 RSI: 0000000000000411 RDI: 0000000000000412 [ 831.942998][T11820] RBP: ffff88807c3f8000 R08: dffffc0000000000 R09: 1ffffffff215fe70 [ 831.950987][T11820] R10: dffffc0000000000 R11: fffffbfff215fe71 R12: ffff888077fdaac4 [ 831.958978][T11820] R13: ffff888077fda898 R14: dffffc0000000000 R15: 0000000000000000 [ 831.966991][T11820] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.972834][T11820] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 831.978663][T11820] ? mutex_lock_nested+0x10/0x10 [ 831.983625][T11820] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 831.989374][T11820] kvm_vcpu_ioctl+0x8f7/0xc10 [ 831.994094][T11820] ? xa_release+0x50/0x50 [ 831.998459][T11820] ? __fget_files+0x28/0x4b0 [ 832.003074][T11820] ? __fget_files+0x28/0x4b0 [ 832.007716][T11820] ? bpf_lsm_file_ioctl+0x5/0x10 [ 832.012678][T11820] ? security_file_ioctl+0x7c/0xa0 [ 832.017816][T11820] ? xa_release+0x50/0x50 [ 832.022170][T11820] __se_sys_ioctl+0xfa/0x170 [ 832.026789][T11820] do_syscall_64+0x4c/0xa0 [ 832.031223][T11820] ? clear_bhb_loop+0x60/0xb0 [ 832.035928][T11820] ? clear_bhb_loop+0x60/0xb0 [ 832.040633][T11820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.046555][T11820] RIP: 0033:0x7f0cbff9ce59 [ 832.050988][T11820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.070616][T11820] RSP: 002b:00007f0cc0f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.079060][T11820] RAX: ffffffffffffffda RBX: 00007f0cc0215fa0 RCX: 00007f0cbff9ce59 [ 832.087149][T11820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 832.095140][T11820] RBP: 00007f0cc0032d6f R08: 0000000000000000 R09: 0000000000000000 [ 832.103136][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.111126][T11820] R13: 00007f0cc0216038 R14: 00007f0cc0215fa0 R15: 00007ffd952501e8 [ 832.119135][T11820] [ 832.122785][T11820] Kernel Offset: disabled [ 832.127188][T11820] Rebooting in 86400 seconds..