last executing test programs: 25m24.393559141s ago: executing program 32 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 23m21.407086902s ago: executing program 33 (id=472): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000001a80)=0x5, 0x8) close(0x3) 22m31.89863778s ago: executing program 34 (id=647): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000140)={0x5, 0xffffffff, 0x3}) rt_tgsigqueueinfo(r1, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) tkill(r0, 0x21) 20m23.34648192s ago: executing program 5 (id=1209): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0) capset(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 20m22.462392597s ago: executing program 5 (id=1211): unshare(0x4000400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x87}, 0x10) 20m21.779234071s ago: executing program 5 (id=1215): unshare(0x2040400) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1, 0x2ea, &(0x7f0000000580)="$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") r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfe, 0xffffffff}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x110) 20m20.699822478s ago: executing program 5 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x801) 20m20.003251449s ago: executing program 5 (id=1226): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) 20m19.155273113s ago: executing program 5 (id=1231): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36", @ANYBLOB, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC], 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 20m16.65844913s ago: executing program 35 (id=1231): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36", @ANYBLOB, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC], 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 17m44.341071167s ago: executing program 8 (id=1887): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="0e74", 0x2}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40040) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 17m42.906324931s ago: executing program 8 (id=1891): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 17m41.702412505s ago: executing program 8 (id=1898): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 17m40.919094156s ago: executing program 8 (id=1901): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB=',shortname=winnt,nonumtail=0,nfs=nostale_ro,uni_xlate=1,shortname=lower,sys_immutable,showexec,utf8=0,nonumtail=0,discard,utf8=0,utf8=0,shortname=win95,\x00', @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x0, 0x2b6, &(0x7f0000000dc0)="$eJzs3c9qE18UwPHTpG3SlHayKD/4CeJBN7oZ2vgEQVoUA0ptRF0IUzvRkDFTMjESEdudW5+juHSloL5ANy4E9+KmCIKbLsRIJzM2aVOa/nOi8/1AmdN775m56Z0pZwY63bj14mGl5Jklqy6JtEpCZFU2RbJbUWAo2Cb8eFQ6rcqF8e+fTt+4fedqvlCYnVedyy9czKnq5Jm3j5++PPu+Pn7z1eSblKxn7258y31e/2/9/42fC+HeXRFLF123bi06ti6VvYqpet2xLc/WctWza3Xt6C857vJyU63q0kRmuWZ7nlrVplbsptZdrdeaat23ylU1TVMnMhI3yQNnFNfm5638iUwGURjr1Vir5a1kz87i2p+YFAAAGCxR1f8Pyp6WPa26XfX97vo/ITvr/4/GnvW/SKzr/4Oj/o+Drfo/E1y/3aj/AQAAAAAAAAAAAAAAAAAAAAD4G2y2Wkar1TLCbfiVEpG0iITfRz1PnAzWP946/nAvLeI8bxQbxfa23Z8vSVkcsWV6ROSHfz4E2vHclcLstPqy8s5ZCfJXGsWkpML8ULZ3/kw7XzvzV2REMp3Hz4khU73zcz3yG8VROX+ulQqObIsphny4J644suSf19v5z2ZUL10r7Mgf88cBAAAAAPAvMPW3Xffvfr+p4WtDuvpHgsbt5wNi7PN8YMf99bCcGo7sYwMAAAAAECte80nFchy7doggc6is6ILw/x8cyw6P9qM7jiDd7+BhEQlaXg/KWvQTJERkvzGX9+hKHm2Vv4pIV8tU5Mu9T5DsZ/CXR+0roJ8dRvlbCQAAAMBJCIv+oagnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjPX7grFwvN9iHOzlah2HS0bzKQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDB8CsAAP//UfwU7Q==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 17m39.929806914s ago: executing program 8 (id=1907): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r0, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) 17m39.420409699s ago: executing program 8 (id=1911): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 17m37.56763707s ago: executing program 36 (id=1911): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 16m35.920980858s ago: executing program 7 (id=2130): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000300)={0x1, 0x2}) 16m33.602076251s ago: executing program 7 (id=2137): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 16m32.620442702s ago: executing program 7 (id=2141): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 16m31.47788128s ago: executing program 7 (id=2144): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210010, &(0x7f00000002c0), 0xfa, 0x59d, &(0x7f0000000d00)="$eJzs3V9rU+cfAPDvSZOq1d/PCiLbLobgxdycqW33x8Fg7mqMTSZs9y60sUhTI00qthOmF/NmN0MGY0wYewG736XsDexVCJsgQ8p2MQYdJz2p0Sb9G000nw8cfZ485/R5vjnnefo8OSkngIF1NP0nF/FiRHyTRBxsKctHVnh0db/lB9em0i2JlZVP/0wiyV5r7p9k/+/PMi9ExK9fRZzIra+3trg0W6pUyvNZfqw+d3lsOJZOXpwrzZRnypcmJidPvzk58c7bb3Ut1lfP/f39J3c+PP31seXvfr536FYSZ+JAVtYaxy5cb80cLf2bpQpx5rEdx7tQWT9Jet0AdmQo6+eFSMeAgzGU9Xrg+fdlRKwAAyrR/2FANecBzbV9l9bBz4z7768ugBqxD7fGn1/9bCT2NtZGI8vJIyujdL072oX60zp++eP2rXSLjT+H2LdJHmBbrt+IiFP5/PrxP8nGv5071fjweGOP1zFov3+gl+6k85/X283/cmvzn2gz/9nfpu/uxOb9P3evC9V0lM7/3m07/10bukaHstz/GnO+QnLhYqV8KiL+HxHHo7AnzW90P+f08t2VTmWt8790S+tvzgWzdtzL73n0mOlSvRQRw7uJu+n+jYiX8u3iT9bOf9Lm/Kfvx7kt1nGkfPvlTmWbx/9krfwU8Urb8//wjlbSvD9ZW2x3f3KscT2MNa+K9f66eeS3TvX3Ov70/I9sHP9o0nq/trb9On7c+0+5U1ka/8gOrv/h5LNGutkJrpbq9fnxiOHk4/WvTzw8tplv7p/Gf/zYavyPTlZyG17/6eLr8y3Gf/PwzY679sP5n97W+d9+4u5HX/zQqf6tjX9vNFLHs1ey8a+97FrZagN3+/4BAAAAAABAP8lFxIFIcsW1dC5XLK5+v+NwjOQq1Vr9xIXqwqXpaPyt7GgUcs073Qdbvg8xnn0fdjQKr6X5iYf5RvlkRByKiG+H9jXyxalqZbrXwQMAAAAAAAAAAAAAAAAAAECf2N/h7/9Tvw/1unXAE9d4sMGeXrcC6IVNH/nfjSc9AX1p0/4PPLf0fxhc+j8Mrsf7f1eeLAw8E/z+h8Gl/8Pg0v9hcOn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FXnzp5Nt5XlB9em0vz0lcWF2eqVk9Pl2mxxbmGqOFWdv1ycqVZnKuXiVHVus59XqVYvj0/EwtWxerlWH6stLp2fqy5cqp+/OFeaKZ8vF55KVAAAAAAAAAAAAAAAAAAAAPBsqS0uzZYqlfL8WiKflcyvLxrQxHvRF814kgGu2tHh+d60OXbT5m0kPhjq9dnZdeJG9lZt76inPxYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCf/BQAA//9SSCQL") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 16m29.869418892s ago: executing program 7 (id=2150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 16m27.696766194s ago: executing program 7 (id=2155): socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x6000680) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_pressure(r1, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x800, 0x20, 0x7}, 0x19) 16m24.397344695s ago: executing program 37 (id=2155): socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x6000680) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_pressure(r1, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x800, 0x20, 0x7}, 0x19) 16m15.763641032s ago: executing program 3 (id=2190): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x7a, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000240), 0x0, 0x0, 0x5) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 16m14.645085597s ago: executing program 3 (id=2194): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000071c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m13.215543041s ago: executing program 3 (id=2198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r2, r3, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x209000, 0x0) 16m12.693317568s ago: executing program 3 (id=2200): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) 16m11.94173075s ago: executing program 3 (id=2202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) 16m10.899342703s ago: executing program 3 (id=2206): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0x7}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 16m7.974727127s ago: executing program 38 (id=2206): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0x7}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 9m58.702519936s ago: executing program 4 (id=3563): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) close(0x3) 9m58.083787953s ago: executing program 4 (id=3566): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x8, 0x4, 0x1, 0x0, r0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 9m57.142015634s ago: executing program 4 (id=3571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m56.295049199s ago: executing program 4 (id=3576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r1, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) listen(r0, 0x2) 9m55.236701881s ago: executing program 4 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 9m54.565761945s ago: executing program 4 (id=3580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x1) 9m39.117602394s ago: executing program 39 (id=3580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x1) 7.82594293s ago: executing program 1 (id=5908): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.963785635s ago: executing program 1 (id=5913): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r2, 0x80796c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x8910, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x18100d0, &(0x7f0000000880)=ANY=[@ANYBLOB="756e695f786c6174653d302c757466383d312c7574d3b141e81c950a80925266383d302c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e39352c696f636861727365743d6d616363656c7469632c6e6f6e756d7461696c3d302c756e695f786c6174653d302c726f6469722c636865636b3d72656c617865642c757466383d312c73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c757466383d312c756e69"], 0x3, 0x36b, &(0x7f0000000500)="$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") 6.215480544s ago: executing program 0 (id=5920): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 5.349927069s ago: executing program 0 (id=5922): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 4.978485975s ago: executing program 6 (id=5925): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.974703153s ago: executing program 1 (id=5935): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x63, 0xfffffffb, 0x5}}}}]}, 0x44}}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041010}, 0x4044000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x8}, {}, {0x0, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x24040004) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 4.066721435s ago: executing program 2 (id=5926): socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 3.811495997s ago: executing program 9 (id=5927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.528863704s ago: executing program 6 (id=5928): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x211, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x100000000000000, 0x0, 0x4008051}, 0x4004) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) ppoll(&(0x7f0000000140)=[{r4, 0x8024}], 0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550d, &(0x7f00000002c0)) 3.453026796s ago: executing program 0 (id=5929): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) 3.444963818s ago: executing program 1 (id=5930): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000608"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 3.3364836s ago: executing program 9 (id=5931): socket$l2tp6(0xa, 0x2, 0x73) socket(0x40000000015, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.133162258s ago: executing program 2 (id=5932): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000480)='\x00', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000006c0)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG\xb0\xc4\x06\x98\xaa\x016\x8a\x0e\x1e\xcd0f\x8b\xdb\a\xd7fq\x8b\x7f\xbe;\xf0h?\xfc\xf8\xc5+[]xE\x1e\xbc\xb1i\b\x0e08\xae\x17e\xec5G\xdf_\xab^N\xa7:\xf2S\x16\xbcB\xa4yWk\xd5\xa8\x1c\xd1\x98&\xbd+@\xe0\xff\xb0\xd6Q', &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000005c0)='6\x8e\x9f\x11R\xbbA\x0e\xba\xc1\x90e?\xdb1\xca\xa1\x9fy\x01%A\x12,\xe7t\xf5\xf0I\xf5\v\xbe\x88\xf1yV\r\xbb\x15\x95o\x12\xcd\xa9\xbd\xd0`\x8e*\xefs\xe9n\x18\x18\x14\xae\xd4\xbdM\a7\x04\xc9\x8e\x9e\xd62\xc9\xa5\xb0\x88B\xc7,\xebbx\xa0UX\x99\x8fQ\xe5IB7;1s\n0B\xd4V}\xfc\x92\xb2\x04\xe4\t\a\xd4', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', &(0x7f0000000340)="0f", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000580)='fuy\x8fseblk\x00', 0x0, r0) read(r0, 0x0, 0xfffffea1) close(r0) 3.05138811s ago: executing program 0 (id=5933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4800) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x8) fsmount(r2, 0x0, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) close(r4) fgetxattr(r4, &(0x7f0000001500)=@random={'system.', 'nl80211\x00'}, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x9800, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 2.686907852s ago: executing program 9 (id=5934): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a791", 0x3c}], 0x2}, 0x4) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000080)=0x7b1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24000881, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback, 0x80000000}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) 2.686612442s ago: executing program 2 (id=5936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000440)="bad3307521", 0x5, 0x6000040, &(0x7f0000000080)={0x11, 0x18, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 2.639342988s ago: executing program 0 (id=5937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400048}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.98373342s ago: executing program 1 (id=5938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.958111472s ago: executing program 6 (id=5939): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000300), 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x0, @fd, 0x11e, 0x5, 0x0, 0x5, 0x0, {0x3, r3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r4, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.265735892s ago: executing program 0 (id=5940): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1.202469643s ago: executing program 9 (id=5941): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x10, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.155140837s ago: executing program 2 (id=5942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000026c0)={0x24, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '\b'}]}, 0x24}}, 0x0) 1.092489877s ago: executing program 6 (id=5943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 475.8726ms ago: executing program 2 (id=5944): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) 469.150189ms ago: executing program 9 (id=5945): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0x7, @raw_data="5e4cf479c449698af53d1baae218c0a78beff2f23da09255d1beaaf91bac2a33766df75af613ee42bae001a93f7d3b89d7bfa6cc9884a6ad106106930022f45a07ba5066c13d7e464f19ea631d27988ec3fd2075360b751938b06f3b769f07b1f1cbfd8221bcc03e61610f9782af617a3d3dfd2e47e08ac79ce047a7a2428b7b75709170a4559367366127c8340f0732b618db161eacd624885551d30c905f1d2b9a98179fb070a96a3aa00251aee4fff935b67bc0820c0939343499e309ce22d03b9a0933c87359"}) socket$netlink(0x10, 0x3, 0x9) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) capset(0x0, &(0x7f0000000040)={0x2, 0x1ff, 0xe, 0x202000, 0x20000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x20, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0081) 442.500794ms ago: executing program 1 (id=5946): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x2) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) landlock_restrict_self(r2, 0x2) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 356.370031ms ago: executing program 6 (id=5947): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x800000003, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff950000000016001b049cb83bd81ee7a5588a00"], &(0x7f0000000080)='GPL\x00', 0x4, 0xb, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x69, 0x0, 0xfe}, {0x6}]}) r0 = io_uring_setup(0x5594, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x200000, 0x229}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) 75.939373ms ago: executing program 2 (id=5948): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b", @ANYRES32=r2], 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) 31.583651ms ago: executing program 9 (id=5949): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 6 (id=5950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400048}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): ed allmulticast mode [ 1339.575171][T19801] geneve0: entered allmulticast mode [ 1339.601427][T19801] geneve1: entered allmulticast mode [ 1339.628740][T19801] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1339.636931][T19801] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1339.688195][T19801] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 1339.740782][T19801] gre1: entered allmulticast mode [ 1339.759389][T19801] bond0: entered allmulticast mode [ 1339.765113][T19801] macvlan2: entered allmulticast mode [ 1339.777815][T19841] netlink: 'syz.2.4422': attribute type 1 has an invalid length. [ 1339.803591][T19801] sit1: entered allmulticast mode [ 1339.809922][T19801] ipip0: entered allmulticast mode [ 1339.815718][T19801] ip6erspan0: entered allmulticast mode [ 1339.824735][T19801] gretap1: left promiscuous mode [ 1339.848752][T19801] team0: left promiscuous mode [ 1339.855257][T19801] team_slave_0: left promiscuous mode [ 1339.861927][T19801] team_slave_1: left promiscuous mode [ 1339.875165][T19801] gtp0: entered allmulticast mode [ 1339.893573][T19801] bond1: entered allmulticast mode [ 1339.912889][T19801] gre2: entered allmulticast mode [ 1340.007880][T19801] gre3: entered allmulticast mode [ 1340.017703][T19801] ip6tnl1: entered allmulticast mode [ 1340.026988][T19801] bond2: entered allmulticast mode [ 1340.032468][T19801] bridge1: entered allmulticast mode [ 1340.044235][T19801] netdevsim netdevsim1 eth0: entered allmulticast mode [ 1340.052758][T19801] netdevsim netdevsim1 eth1: entered allmulticast mode [ 1340.067133][T19801] netdevsim netdevsim1 eth2: entered allmulticast mode [ 1340.075246][T19801] netdevsim netdevsim1 eth3: entered allmulticast mode [ 1340.083248][T19801] veth2: entered allmulticast mode [ 1340.089308][T19801] veth3: entered allmulticast mode [ 1340.095595][T19801] veth4: entered allmulticast mode [ 1340.101810][T19801] veth5: entered allmulticast mode [ 1340.107877][T19801] veth6: entered allmulticast mode [ 1340.114678][T19801] veth7: entered allmulticast mode [ 1340.120922][T19801] vlan2: left promiscuous mode [ 1340.125842][T19801] bond0: left promiscuous mode [ 1340.130853][T19801] macvlan2: left promiscuous mode [ 1340.137385][T19801] vlan2: entered allmulticast mode [ 1340.143555][T19801] sit2: entered allmulticast mode [ 1340.158373][T19801] bridge2: entered allmulticast mode [ 1340.175366][T19801] gre4: entered allmulticast mode [ 1340.237860][T19801] bridge3: entered allmulticast mode [ 1340.261471][T19813] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1340.402337][T15379] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.819408][T19841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1340.933536][T19842] macvlan4: entered promiscuous mode [ 1340.939062][T19842] macvlan4: entered allmulticast mode [ 1340.997591][T19842] bond1: entered promiscuous mode [ 1341.057241][T19842] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1341.143300][T19842] bond1: left promiscuous mode [ 1341.155925][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1341.155998][ T30] audit: type=1326 audit(2000000066.519:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.185450][ T30] audit: type=1326 audit(2000000066.519:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.311766][ T30] audit: type=1326 audit(2000000066.549:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.335061][ T30] audit: type=1326 audit(2000000066.589:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.356879][T15379] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.357514][ T30] audit: type=1326 audit(2000000066.599:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.388874][ T30] audit: type=1326 audit(2000000066.599:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.405501][T15379] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.411486][ T30] audit: type=1326 audit(2000000066.599:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.442184][ T30] audit: type=1326 audit(2000000066.609:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.464662][ T30] audit: type=1326 audit(2000000066.609:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1341.477401][T15379] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.487123][ T30] audit: type=1326 audit(2000000066.629:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.6.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1343.333481][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4436'. [ 1343.344471][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4436'. [ 1343.616691][T15184] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1343.851591][T15184] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1343.861203][T15184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.869391][T15184] usb 2-1: Product: syz [ 1343.875551][T15184] usb 2-1: Manufacturer: syz [ 1343.880666][T15184] usb 2-1: SerialNumber: syz [ 1343.974912][T15184] usb 2-1: config 0 descriptor?? [ 1344.337389][T15184] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1345.367293][T15184] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1345.586519][ T5444] usb 2-1: USB disconnect, device number 39 [ 1346.589004][T19940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4452'. [ 1347.074808][T19949] overlayfs: failed to clone upperpath [ 1347.760316][T19958] loop1: detected capacity change from 0 to 512 [ 1347.873671][T19961] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4459'. [ 1348.000787][T19958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.101976][T19958] ext4 filesystem being mounted at /936/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.537820][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.973093][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4465'. [ 1349.713037][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4468'. [ 1349.722558][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4468'. [ 1350.458095][T20003] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1350.479642][T20003] bond2 (unregistering): Released all slaves [ 1350.521370][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4473'. [ 1350.609346][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4473'. [ 1350.676568][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4473'. [ 1350.943664][T20015] lo: left allmulticast mode [ 1350.949107][T20015] tunl0: left allmulticast mode [ 1350.957072][T20015] gre0: left allmulticast mode [ 1350.962904][T20015] gretap0: left allmulticast mode [ 1350.968653][T20015] erspan0: left allmulticast mode [ 1350.976063][T20015] ip_vti0: left allmulticast mode [ 1350.981943][T20015] ip6_vti0: left allmulticast mode [ 1350.987675][T20015] sit0: left allmulticast mode [ 1350.993187][T20015] ip6tnl0: left allmulticast mode [ 1350.998717][T20015] ip6gre0: left allmulticast mode [ 1351.004662][T20015] syz_tun: left allmulticast mode [ 1351.010888][T20015] ip6gretap0: left allmulticast mode [ 1351.016957][T20015] bridge0: left allmulticast mode [ 1351.023150][T20015] vcan0: left allmulticast mode [ 1351.143391][T20015] nlmon0: left allmulticast mode [ 1351.149070][T20015] caif0: left allmulticast mode [ 1351.156381][T20015] batadv0: left allmulticast mode [ 1351.162068][T20015] vxcan0: left allmulticast mode [ 1351.167642][T20015] vxcan1: left allmulticast mode [ 1351.173443][T20015] veth0: left allmulticast mode [ 1351.178905][T20015] veth1: left allmulticast mode [ 1351.184487][T20015] veth0_to_bridge: left allmulticast mode [ 1351.191363][T20015] veth1_to_bridge: left allmulticast mode [ 1351.198162][T20015] veth0_to_bond: left allmulticast mode [ 1351.204578][T20015] bond_slave_0: left allmulticast mode [ 1351.211211][T20015] veth1_to_bond: left allmulticast mode [ 1351.217388][T20015] bond_slave_1: left allmulticast mode [ 1351.223950][T20015] veth0_to_team: left allmulticast mode [ 1351.230996][T20015] veth1_to_team: left allmulticast mode [ 1351.237663][T20015] veth1_to_batadv: left allmulticast mode [ 1351.244126][T20015] batadv_slave_1: left allmulticast mode [ 1351.250631][T20015] xfrm0: left allmulticast mode [ 1351.256083][T20015] veth0_to_hsr: left allmulticast mode [ 1351.262848][T20015] veth1_to_hsr: left allmulticast mode [ 1351.269413][T20015] hsr0: left allmulticast mode [ 1351.274444][T20015] hsr_slave_0: left allmulticast mode [ 1351.280127][T20015] hsr_slave_1: left allmulticast mode [ 1351.286223][T20015] veth1_virt_wifi: left allmulticast mode [ 1351.292804][T20015] veth0_virt_wifi: left allmulticast mode [ 1351.299152][T20015] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1351.306981][T20015] veth1_vlan: left allmulticast mode [ 1351.312991][T20015] vlan0: left allmulticast mode [ 1351.318601][T20015] vlan1: left allmulticast mode [ 1351.324406][T20015] macvlan0: left allmulticast mode [ 1351.330274][T20015] macvlan1: left allmulticast mode [ 1351.336028][T20015] ipvlan0: left allmulticast mode [ 1351.341919][T20015] ipvlan1: left allmulticast mode [ 1351.347108][T20015] veth0_vlan: left allmulticast mode [ 1351.353200][T20015] veth1_macvtap: left allmulticast mode [ 1351.359427][T20015] veth0_macvtap: left allmulticast mode [ 1351.365824][T20015] macsec0: left allmulticast mode [ 1351.373786][T20015] geneve0: left allmulticast mode [ 1351.379444][T20015] geneve1: left allmulticast mode [ 1351.385776][T20015] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 1351.393429][T20015] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 1351.401094][T20015] gre1: left allmulticast mode [ 1351.406824][T20015] sit1: left allmulticast mode [ 1351.412155][T20015] ipip0: left allmulticast mode [ 1351.417424][T20015] ip6erspan0: left allmulticast mode [ 1351.423368][T20015] gretap1: left allmulticast mode [ 1351.429231][T20015] gtp0: left allmulticast mode [ 1351.434743][T20015] bond1: left allmulticast mode [ 1351.545727][T20015] dummy0: left allmulticast mode [ 1351.552122][T20015] gre2: left allmulticast mode [ 1351.557851][T20015] gre3: left allmulticast mode [ 1351.563790][T20015] ip6tnl1: left allmulticast mode [ 1351.569839][T20015] bond2: left allmulticast mode [ 1351.575310][T20015] bridge1: left allmulticast mode [ 1351.781724][T20015] netdevsim netdevsim1 eth0: left allmulticast mode [ 1351.789102][T20015] netdevsim netdevsim1 eth1: left allmulticast mode [ 1351.868996][T20015] netdevsim netdevsim1 eth2: left allmulticast mode [ 1351.908642][T20015] netdevsim netdevsim1 eth3: left allmulticast mode [ 1351.916760][T20015] veth2: left allmulticast mode [ 1351.922837][T20015] veth3: left allmulticast mode [ 1351.928665][T20015] veth4: left allmulticast mode [ 1351.935333][T20015] veth5: left allmulticast mode [ 1351.941220][T20015] veth6: left allmulticast mode [ 1351.947041][T20015] veth7: left allmulticast mode [ 1351.953113][T20015] vlan2: left allmulticast mode [ 1351.958167][T20015] bond0: left allmulticast mode [ 1351.963316][T20015] macvlan2: left allmulticast mode [ 1351.969394][T20015] sit2: left allmulticast mode [ 1351.975032][T20015] bridge2: left allmulticast mode [ 1351.981012][T20015] gre4: left allmulticast mode [ 1351.986511][T20015] bridge3: left allmulticast mode [ 1352.080770][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 1352.094299][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 1352.377272][T20027] overlayfs: failed to clone lowerpath [ 1354.201524][T20058] loop1: detected capacity change from 0 to 1024 [ 1354.233612][T15388] hfsplus: b-tree write err: -5, ino 4 [ 1355.526865][T20083] loop2: detected capacity change from 0 to 16 [ 1355.660071][T20083] erofs (device loop2): mounted with root inode @ nid 36. [ 1355.968016][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4510'. [ 1356.205041][T20095] overlayfs: failed to clone upperpath [ 1356.210671][T20087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1356.486822][T20101] loop2: detected capacity change from 0 to 8 [ 1356.665685][T20101] SQUASHFS error: Failed to read block 0x707: -5 [ 1356.672520][T20101] SQUASHFS error: Unable to read metadata cache entry [705] [ 1356.680293][T20101] SQUASHFS error: Unable to read inode 0x11f [ 1357.610724][T20117] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4507'. [ 1357.855966][T20125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1358.162107][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1358.302115][T20133] 9pnet: p9_errstr2errno: server reported unknown error di3 [ 1358.997220][T20144] geneve3: entered promiscuous mode [ 1359.250828][T15395] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 46195 - 0 [ 1359.410638][T15395] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 46195 - 0 [ 1359.619726][T15395] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 46195 - 0 [ 1361.014756][T20148] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 46195 - 0 [ 1361.294703][T20148] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 46195 - 0 [ 1361.500350][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1361.500427][ T30] audit: type=1804 audit(2000000086.859:627): pid=20188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4524" name="file0" dev="tmpfs" ino=2479 res=1 errno=0 [ 1361.551344][T20148] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 46195 - 0 [ 1361.827656][T15395] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 46195 - 0 [ 1362.023737][T15379] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 46195 - 0 [ 1362.181546][T15379] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 46195 - 0 [ 1362.350078][T20197] binder: 20196:20197 ioctl c0306201 800003c0 returned -14 [ 1362.387470][ T8074] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 46195 - 0 [ 1363.863677][T20222] batman_adv: batadv0: Adding interface: dummy0 [ 1363.871221][T20222] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.901712][T20222] batman_adv: batadv0: Interface activated: dummy0 [ 1364.023228][T20222] batadv0: mtu less than device minimum [ 1364.031510][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.044445][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.057347][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.070361][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.083216][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.096234][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.109090][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.122105][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1364.134954][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1365.337409][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4541'. [ 1366.348350][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4547'. [ 1366.365404][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4546'. [ 1367.214547][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 1367.260958][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 1367.303615][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 1367.331826][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 1368.014935][T20292] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4558'. [ 1369.500619][ T30] audit: type=1804 audit(2000000094.849:628): pid=20311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4566" name="/newroot/957/file0" dev="tmpfs" ino=5256 res=1 errno=0 [ 1369.816241][T20313] netlink: 'syz.9.4567': attribute type 4 has an invalid length. [ 1369.890579][T20313] netlink: 'syz.9.4567': attribute type 4 has an invalid length. [ 1369.908858][T20317] 8021q: VLANs not supported on ip6gre0 [ 1370.192891][T20319] loop1: detected capacity change from 0 to 128 [ 1370.290204][T20319] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1370.390329][T20319] ext4 filesystem being mounted at /958/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.512577][T20319] fscrypt: AES-128-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1370.584875][T20332] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1370.763418][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1371.373602][T20340] loop2: detected capacity change from 0 to 512 [ 1371.540696][T20340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.630306][T20340] ext4 filesystem being mounted at /894/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.663350][T20361] netlink: 'syz.6.4582': attribute type 10 has an invalid length. [ 1372.714131][T20359] bridge_slave_0: left allmulticast mode [ 1372.720369][T20359] bridge_slave_0: left promiscuous mode [ 1372.727165][T20359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.828344][T20359] bridge_slave_1: left allmulticast mode [ 1372.834850][T20359] bridge_slave_1: left promiscuous mode [ 1372.846358][T20359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.928424][T20359] bond0: (slave bond_slave_0): Releasing backup interface [ 1373.056754][T20359] bond0: (slave bond_slave_1): Releasing backup interface [ 1373.213873][T20359] team0: Port device team_slave_0 removed [ 1373.259990][T20359] team0: Port device team_slave_1 removed [ 1373.272888][T20359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.280738][T20359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.322831][T20359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.330690][T20359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.401103][T20359] net_ratelimit: 10 callbacks suppressed [ 1373.401270][T20359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1373.498692][T20361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1373.575922][T20361] team0: Port device bond0 added [ 1374.354315][ T31] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1374.493485][ T6737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.531438][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 1374.552469][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1374.580473][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1374.590056][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.598339][ T31] usb 2-1: Product: syz [ 1374.602857][ T31] usb 2-1: Manufacturer: syz [ 1374.607638][ T31] usb 2-1: SerialNumber: syz [ 1374.733846][ T31] usb 2-1: config 0 descriptor?? [ 1374.802660][ T31] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1375.130185][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1375.187767][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1375.276618][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1376.245688][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4596'. [ 1376.570492][T20405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1376.599352][T20405] bridge_slave_1: left allmulticast mode [ 1376.605603][T20405] bridge_slave_1: left promiscuous mode [ 1376.615697][T20405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.696613][ T31] gspca_zc3xx: reg_w_i err -71 [ 1376.746815][T20405] bridge_slave_0: left allmulticast mode [ 1376.754145][T20405] bridge_slave_0: left promiscuous mode [ 1376.761467][T20405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.964417][T20408] loop2: detected capacity change from 0 to 512 [ 1377.004769][T20408] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1377.012144][T20408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1377.078596][T20408] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4599: bad orphan inode 131083 [ 1377.106307][T20408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1377.208966][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4601'. [ 1377.256809][T20412] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4601'. [ 1377.320244][ T31] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1377.326924][ T31] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1377.381216][ T31] usb 2-1: USB disconnect, device number 40 [ 1377.688249][ T6737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.550284][T20425] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1379.832038][T20435] tipc: Started in network mode [ 1379.837278][T20435] tipc: Node identity 84e, cluster identity 4711 [ 1379.844139][T20435] tipc: Node number set to 2126 [ 1380.211499][T20437] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4610'. [ 1380.418883][T20441] netlink: 'syz.6.4610': attribute type 10 has an invalid length. [ 1380.637904][T20441] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1380.839748][ T30] audit: type=1804 audit(2000000106.199:629): pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4612" name="/newroot/900/file0" dev="tmpfs" ino=4828 res=1 errno=0 [ 1382.360126][T20466] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 1382.392361][T20466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4621'. [ 1383.785350][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1384.632814][T20495] netlink: 'syz.2.4631': attribute type 13 has an invalid length. [ 1384.641150][T20495] netlink: 'syz.2.4631': attribute type 17 has an invalid length. [ 1385.037122][T20495] erspan0: left promiscuous mode [ 1385.435924][T20496] loop2: detected capacity change from 0 to 4096 [ 1385.616654][T20496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.805677][T20495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.862331][T20495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.100860][T20495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1386.470353][ T6737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.598342][ T30] audit: type=1326 audit(2000000113.939:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20540 comm="syz.1.4648" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x0 [ 1388.784772][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4649'. [ 1388.795453][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4649'. [ 1389.469997][T20555] syz_tun: entered allmulticast mode [ 1389.499331][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4655'. [ 1389.721466][T20557] bond0: (slave bridge0): Releasing backup interface [ 1389.765946][T20561] loop2: detected capacity change from 0 to 512 [ 1389.823892][T20561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1389.930733][T20561] EXT4-fs (loop2): 1 truncate cleaned up [ 1389.942907][T20561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1390.034180][T20564] lo speed is unknown, defaulting to 1000 [ 1390.097709][T20564] lo speed is unknown, defaulting to 1000 [ 1390.228559][T20564] lo speed is unknown, defaulting to 1000 [ 1390.451380][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1390.545810][T20564] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1390.652273][ T6737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.871475][T20564] lo speed is unknown, defaulting to 1000 [ 1390.942129][T20564] lo speed is unknown, defaulting to 1000 [ 1390.997633][T20564] lo speed is unknown, defaulting to 1000 [ 1391.066678][T20564] lo speed is unknown, defaulting to 1000 [ 1391.174120][T20564] lo speed is unknown, defaulting to 1000 [ 1391.501401][T20586] loop2: detected capacity change from 0 to 256 [ 1391.643614][T20586] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 1391.812050][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.818792][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.844062][T20588] bridge0: entered promiscuous mode [ 1391.849637][T20588] bridge0: entered allmulticast mode [ 1393.735936][T20611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1393.952575][T20614] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1393.983032][ T8074] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1394.191014][T15388] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1394.671670][T20635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4677'. [ 1397.401463][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4690'. [ 1397.491606][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4690'. [ 1398.684574][T15388] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 46195 - 0 [ 1398.708047][T15388] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 46195 - 0 [ 1398.722931][T15388] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 46195 - 0 [ 1398.731943][T15388] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 46195 - 0 [ 1399.563365][T20710] netlink: 'syz.1.4703': attribute type 1 has an invalid length. [ 1399.793428][T20719] fuse: Bad value for 'fd' [ 1399.882895][T20710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1400.357033][T20715] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1400.391439][T20717] bond1: (slave dummy0): Releasing active interface [ 1400.571885][T20717] bond4: (slave dummy0): making interface the new active one [ 1400.661533][T20717] dummy0: entered promiscuous mode [ 1400.689335][T20717] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1401.079371][T20732] netlink: 'syz.2.4710': attribute type 4 has an invalid length. [ 1401.217987][T20734] netlink: 'syz.2.4710': attribute type 4 has an invalid length. [ 1403.341429][T20767] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.4723'. [ 1405.348935][T20793] 9p: Unknown uid 00000000004294967295 [ 1405.406974][T20793] loop1: detected capacity change from 0 to 128 [ 1405.493764][T20795] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 80049367, magic 93 != 6b] [ 1405.542125][T20793] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1405.665151][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4737'. [ 1405.678442][T20793] ext4 filesystem being mounted at /984/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.761155][T20793] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 1406.086998][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1406.244394][T20809] netlink: 'syz.0.4740': attribute type 83 has an invalid length. [ 1407.902139][T20835] netlink: 'syz.1.4751': attribute type 3 has an invalid length. [ 1407.932710][T20835] netlink: 'syz.1.4751': attribute type 3 has an invalid length. [ 1408.056936][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'. [ 1410.703730][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4762'. [ 1411.643231][T20874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1412.011993][T20879] netlink: 'syz.9.4766': attribute type 1 has an invalid length. [ 1412.245733][T20881] macvlan2: entered promiscuous mode [ 1412.255343][T20881] macvlan2: entered allmulticast mode [ 1412.340878][T20881] bond2: entered promiscuous mode [ 1412.375959][T20881] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1412.485618][T20881] bond2: left promiscuous mode [ 1412.753700][ T8062] dummy0: left promiscuous mode [ 1416.353473][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1416.364309][T20904] vlan2: entered promiscuous mode [ 1416.369769][T20904] veth0_virt_wifi: entered promiscuous mode [ 1416.376672][T20904] vlan2: entered allmulticast mode [ 1416.382198][T20904] veth0_virt_wifi: entered allmulticast mode [ 1416.580437][T20908] vxlan0: entered promiscuous mode [ 1416.712848][ T8074] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.727426][ T8074] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.768838][ T8074] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.801613][ T8074] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1417.374998][T20912] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.4776'. [ 1417.641092][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4777'. [ 1417.715795][T20916] overlayfs: failed to clone upperpath [ 1420.378947][T20959] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1420.390724][T15211] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1420.566761][T15211] usb 2-1: config 0 has no interfaces? [ 1420.573864][T15211] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1420.583407][T15211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.604292][T15211] usb 2-1: config 0 descriptor?? [ 1420.619356][T20964] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1420.925946][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1421.246499][T20971] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1423.167905][ T31] usb 2-1: USB disconnect, device number 41 [ 1423.687675][T21011] pimreg: entered allmulticast mode [ 1423.800499][T21011] pimreg: left allmulticast mode [ 1424.541856][ T30] audit: type=1326 audit(2000000149.869:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.9.4815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7fc00000 [ 1425.778503][T21048] binder: 21047:21048 unknown command 0 [ 1425.794432][T21048] binder: 21047:21048 ioctl c0306201 80000080 returned -22 [ 1427.192032][T21060] lo speed is unknown, defaulting to 1000 [ 1428.262485][T21072] lo speed is unknown, defaulting to 1000 [ 1428.726566][T21087] bond3: option downdelay: invalid value (18446744073709551615) [ 1428.734773][T21087] bond3: option downdelay: allowed values 0 - 2147483647 [ 1428.783782][T21087] bond3 (unregistering): Released all slaves [ 1428.994153][T21095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.554400][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4847'. [ 1430.563919][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4847'. [ 1431.822315][T21128] bridge3: entered promiscuous mode [ 1431.827734][T21128] bridge3: entered allmulticast mode [ 1431.917932][T21128] team0: Port device bridge3 added [ 1431.925239][T21132] bridge0: left allmulticast mode [ 1432.040965][T21133] bridge0: port 1(team0) entered blocking state [ 1432.047817][T21133] bridge0: port 1(team0) entered disabled state [ 1432.108989][T21133] team0: entered allmulticast mode [ 1432.114990][T21133] team_slave_0: entered allmulticast mode [ 1432.121337][T21133] team_slave_1: entered allmulticast mode [ 1432.224117][T21133] team0: entered promiscuous mode [ 1432.229967][T21133] team_slave_0: entered promiscuous mode [ 1432.246648][T21133] team_slave_1: entered promiscuous mode [ 1437.932472][T21196] loop2: detected capacity change from 0 to 4096 [ 1438.134914][T21196] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1438.323382][T21196] ntfs3(loop2): Failed to load $Extend (-22). [ 1438.379144][T21196] ntfs3(loop2): Failed to initialize $Extend. [ 1439.995671][T21213] lo speed is unknown, defaulting to 1000 [ 1442.230281][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4888'. [ 1442.955968][T21246] team_slave_0 (unregistering): left promiscuous mode [ 1442.963401][T21246] team_slave_0 (unregistering): left allmulticast mode [ 1443.064367][T21246] team0: Port device team_slave_0 removed [ 1443.120184][T21250] netlink: 'syz.9.4893': attribute type 11 has an invalid length. [ 1443.352364][T21253] loop1: detected capacity change from 0 to 2048 [ 1443.568936][T21253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.647539][T21253] ext4 filesystem being mounted at /1007/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.051404][T21262] sch_fq: defrate 53322 ignored. [ 1444.065366][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.624341][T21271] netlink: 'syz.2.4899': attribute type 16 has an invalid length. [ 1444.632572][T21271] netlink: 'syz.2.4899': attribute type 17 has an invalid length. [ 1446.087419][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4906'. [ 1446.187492][T21291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1446.478295][T21294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1446.507476][T21294] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1446.569049][T21294] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1446.676270][T21291] macvlan4: entered promiscuous mode [ 1446.684033][T21291] macvlan4: entered allmulticast mode [ 1446.726245][T21291] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1446.733821][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1446.737362][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1447.241869][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4913'. [ 1448.530621][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4920'. [ 1448.542406][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4920'. [ 1448.553255][T21327] Cannot find add_set index 3 as target [ 1448.687521][T21322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1449.034968][T21326] bond5: (slave bond0): making interface the new active one [ 1449.288515][T21326] bond5: (slave bond0): Enslaving as an active interface with an up link [ 1449.322294][T15388] bond0: (slave macvlan2): link status definitely down, disabling slave [ 1449.380099][T15388] bond0: now running without any active interface! [ 1449.503958][T15378] bond5: (slave bond0): link status definitely down, disabling slave [ 1449.549951][T15378] bond5: now running without any active interface! [ 1449.790057][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 1451.142103][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4927'. [ 1451.219844][T15184] libceph: connect (1)[c::]:6789 error -101 [ 1451.227942][T15184] libceph: mon0 (1)[c::]:6789 connect error [ 1451.254768][T15184] libceph: connect (1)[c::]:6789 error -101 [ 1451.286599][T15184] libceph: mon0 (1)[c::]:6789 connect error [ 1451.347663][T21350] ceph: No mds server is up or the cluster is laggy [ 1452.079160][ T30] audit: type=1804 audit(2000000177.439:632): pid=21364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4931" name="/newroot/1015/file1" dev="tmpfs" ino=5568 res=1 errno=0 [ 1452.297288][T21370] netlink: 'syz.2.4933': attribute type 12 has an invalid length. [ 1452.308809][T21370] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4933'. [ 1452.456172][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4934'. [ 1453.240198][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.246957][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.708783][T21388] batman_adv: batadv0: Interface deactivated: dummy0 [ 1454.050808][T21388] bridge0: left promiscuous mode [ 1454.056081][T21388] team0: left promiscuous mode [ 1454.061352][T21388] team_slave_0: left promiscuous mode [ 1454.067886][T21388] team_slave_1: left promiscuous mode [ 1454.143430][T21397] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4940'. [ 1454.221509][T21388] vxlan0: left promiscuous mode [ 1454.325028][T21388] bridge3: left promiscuous mode [ 1454.508016][ T8074] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.586894][ T8074] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.639767][ T8074] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.648527][ T8074] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1455.015792][T21406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1455.050908][T21408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4941'. [ 1455.910593][T21413] lo speed is unknown, defaulting to 1000 [ 1460.075411][ T30] audit: type=1326 audit(2000000185.439:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21443 comm="syz.2.4956" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x0 [ 1460.926103][T21457] ref_ctr increment failed for inode: 0x581 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888118719c00 [ 1460.939946][ T30] audit: type=1804 audit(2000000186.279:634): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4959" name="file0" dev="tmpfs" ino=1409 res=1 errno=0 [ 1461.018655][T21456] uprobe: syz.6.4959:21456 failed to unregister, leaking uprobe [ 1461.717097][T21469] loop1: detected capacity change from 0 to 256 [ 1461.824913][T21469] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1461.982591][T21469] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 1462.723926][T21476] lo speed is unknown, defaulting to 1000 [ 1462.820104][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1462.863974][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1462.884599][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1462.956316][T21484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1463.001449][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1463.447426][T21489] geneve2: left promiscuous mode [ 1463.462448][T21489] bond1: left promiscuous mode [ 1463.467419][T21489] bond1: left allmulticast mode [ 1463.473287][T21489] bridge4: left allmulticast mode [ 1463.483044][T21489] geneve3: left promiscuous mode [ 1464.213650][T21500] random: crng reseeded on system resumption [ 1464.464774][ T30] audit: type=1326 audit(2000000189.819:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.9.4976" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0 [ 1468.065469][T21536] macvtap1: left promiscuous mode [ 1468.070858][T21536] macvtap1: left allmulticast mode [ 1468.161380][T21536] vxlan0: left promiscuous mode [ 1468.431464][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4991'. [ 1468.481263][T15365] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.513061][T15365] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.563776][T15365] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.613969][ T8074] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.100998][T21586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4999'. [ 1471.542707][T21586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1471.787765][T21593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1471.821301][T21593] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1471.915270][T21593] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1472.208972][T21596] macvlan2: entered promiscuous mode [ 1472.214745][T21596] macvlan2: entered allmulticast mode [ 1472.262534][T21596] bond3: entered promiscuous mode [ 1472.282660][T21596] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1472.333434][T21596] bond3: left promiscuous mode [ 1472.457688][T21592] lo speed is unknown, defaulting to 1000 [ 1474.171527][T21611] loop1: detected capacity change from 0 to 4096 [ 1474.429947][T21615] 0XD: left allmulticast mode [ 1475.666117][ T165] ntfs3(loop1): ino=5, mi_enum_attr [ 1479.314250][T21615] vlan2: left promiscuous mode [ 1479.319301][T21615] veth0_virt_wifi: left promiscuous mode [ 1479.328185][T21615] vlan2: left allmulticast mode [ 1479.333396][T21615] veth0_virt_wifi: left allmulticast mode [ 1479.429794][ T165] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.493773][ T165] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.526139][ T165] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.564071][ T165] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.086990][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5020'. [ 1482.017808][ T30] audit: type=1804 audit(2000000207.379:636): pid=21681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5030" name="file0" dev="tmpfs" ino=1458 res=1 errno=0 [ 1483.316444][T21700] loop2: detected capacity change from 0 to 16 [ 1483.367987][T21700] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 66300) [ 1484.137551][T21712] uprobe: syz.9.5038:21712 failed to unregister, leaking uprobe [ 1484.781950][T21722] netlink: 'syz.9.5043': attribute type 13 has an invalid length. [ 1487.262101][T21756] netlink: 'syz.6.5054': attribute type 1 has an invalid length. [ 1487.514652][T21756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1487.612848][T21759] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1487.842459][T15184] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1487.865853][T21761] bond2: (slave ip6gretap2): making interface the new active one [ 1487.883079][T21761] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1488.070092][T15184] usb 2-1: Using ep0 maxpacket: 16 [ 1488.113379][T15184] usb 2-1: config 0 has an invalid interface number: 9 but max is 1 [ 1488.124707][T15184] usb 2-1: config 0 has an invalid interface number: 9 but max is 1 [ 1488.135756][T15184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1488.145091][T15184] usb 2-1: config 0 has no interface number 0 [ 1488.185128][T15184] usb 2-1: config 0 interface 9 has no altsetting 0 [ 1488.224068][T19220] kernel read not supported for file inotify (pid: 19220 comm: kworker/0:0) [ 1488.297142][T15184] usb 2-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice= 9.a0 [ 1488.306985][T15184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.318038][T15184] usb 2-1: Product: syz [ 1488.322610][T15184] usb 2-1: Manufacturer: syz [ 1488.327395][T15184] usb 2-1: SerialNumber: syz [ 1488.432873][T15184] usb 2-1: config 0 descriptor?? [ 1488.609019][T21775] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1488.765698][T15184] sierra 2-1:0.9: Sierra USB modem converter detected [ 1488.826102][T15184] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1488.889333][T15184] usb 2-1: USB disconnect, device number 42 [ 1488.911860][T21782] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5059'. [ 1488.921540][T21782] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5059'. [ 1488.922876][T15184] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1488.931018][T21782] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5059'. [ 1489.037129][T21782] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5059'. [ 1489.083646][T15184] sierra 2-1:0.9: device disconnected [ 1489.921784][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1490.707889][ T30] audit: type=1326 audit(2000000000.469:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.802255][ T30] audit: type=1326 audit(2000000000.499:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.825127][ T30] audit: type=1326 audit(2000000000.499:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.850129][ T30] audit: type=1326 audit(2000000000.509:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.873509][ T30] audit: type=1326 audit(2000000000.509:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.898035][ T30] audit: type=1326 audit(2000000000.509:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.920569][ T30] audit: type=1326 audit(2000000000.509:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.943475][ T30] audit: type=1326 audit(2000000000.509:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.966029][ T30] audit: type=1326 audit(2000000000.509:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1490.988696][ T30] audit: type=1326 audit(2000000000.509:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1493.741506][T21846] netlink: 'syz.1.5082': attribute type 1 has an invalid length. [ 1494.052999][T21846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1494.092290][T21850] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1494.405252][T21851] bond6: (slave ip6gretap1): making interface the new active one 35900 ms earlier [ 1494.488481][T21851] bond6: active interface up! [ 1494.544149][T21851] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1495.682033][T21875] netlink: 'syz.6.5093': attribute type 32 has an invalid length. [ 1495.692837][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5093'. [ 1495.760100][T21875] netlink: 'syz.6.5093': attribute type 32 has an invalid length. [ 1495.861478][T21877] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1496.095902][T21880] netlink: 'syz.9.5094': attribute type 4 has an invalid length. [ 1496.246169][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1496.246247][ T30] audit: type=1326 audit(2000000006.009:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.288830][T21549] libceph: connect (1)[c::]:6789 error -101 [ 1496.296157][T21549] libceph: mon0 (1)[c::]:6789 connect error [ 1496.316863][ T30] audit: type=1326 audit(2000000006.009:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.341138][ T30] audit: type=1326 audit(2000000006.049:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.363682][ T30] audit: type=1326 audit(2000000006.059:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.386498][ T30] audit: type=1326 audit(2000000006.069:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.496744][T21884] ceph: No mds server is up or the cluster is laggy [ 1496.547159][ T30] audit: type=1326 audit(2000000006.079:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.570584][ T30] audit: type=1326 audit(2000000006.079:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.594344][ T30] audit: type=1326 audit(2000000006.209:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d572b code=0x7ffc0000 [ 1496.617576][ T30] audit: type=1326 audit(2000000006.229:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1496.640466][ T30] audit: type=1326 audit(2000000006.249:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21883 comm="syz.2.5095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1497.396375][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5099'. [ 1497.551794][T21905] bridge4: port 1(veth0_to_bond) entered blocking state [ 1497.559317][T21905] bridge4: port 1(veth0_to_bond) entered disabled state [ 1497.610892][T21905] veth0_to_bond: entered allmulticast mode [ 1497.685422][T21905] veth0_to_bond: entered promiscuous mode [ 1501.098743][T21936] squashfs: Unknown parameter ' aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1501.439086][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1501.439161][ T30] audit: type=1326 audit(2000000011.199:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21935 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d572b code=0x7ffc0000 [ 1501.470848][ T30] audit: type=1326 audit(2000000011.199:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21935 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1501.493336][ T30] audit: type=1326 audit(2000000011.199:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21935 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71d572b code=0x7ffc0000 [ 1501.518432][ T30] audit: type=1326 audit(2000000011.199:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21935 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1501.831162][T21940] netlink: 'syz.9.5112': attribute type 4 has an invalid length. [ 1501.853226][ T30] audit: type=1326 audit(2000000011.379:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21935 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1503.300906][ T30] audit: type=1326 audit(2000000013.069:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21960 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1503.405492][ T30] audit: type=1326 audit(2000000013.099:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21960 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1503.428925][ T30] audit: type=1326 audit(2000000013.099:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21960 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1503.457531][ T30] audit: type=1326 audit(2000000013.109:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21960 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1503.482529][ T30] audit: type=1326 audit(2000000013.109:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21960 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1505.210202][T21984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1505.272381][T21984] overlayfs: failed to set xattr on upper [ 1505.278275][T21984] overlayfs: ...falling back to redirect_dir=nofollow. [ 1505.285740][T21984] overlayfs: ...falling back to index=off. [ 1505.292022][T21984] overlayfs: ...falling back to uuid=null. [ 1505.313775][T21986] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1505.427978][T21984] overlayfs: failed to clone lowerpath [ 1511.247209][T22061] loop1: detected capacity change from 0 to 512 [ 1511.638752][T22069] loop2: detected capacity change from 0 to 128 [ 1511.656732][T22061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.756776][T22061] ext4 filesystem being mounted at /1055/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.813307][T22064] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5152'. [ 1511.835076][T22061] tipc: Enabling of bearer rejected, failed to enable media [ 1512.582698][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.545277][T22086] tipc: Enabling of bearer rejected, failed to enable media [ 1513.827012][T22087] pim6reg9: entered allmulticast mode [ 1514.115445][T22093] loop2: detected capacity change from 0 to 164 [ 1514.219076][T22093] iso9660: Bad value for 'map' [ 1514.682252][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.688826][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1518.698698][T22128] loop1: detected capacity change from 0 to 2048 [ 1518.710821][T22136] ref_ctr_offset mismatch. inode: 0x651 offset: 0x0 ref_ctr_offset(old): 0x80000100 ref_ctr_offset(new): 0x0 [ 1518.841562][T22128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1518.932661][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 1518.932737][ T30] audit: type=1800 audit(2000000028.689:917): pid=22128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5168" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1519.016529][T22125] syz.9.5167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1519.300761][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.011089][T22153] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1521.560755][T22170] syzkaller0: entered promiscuous mode [ 1521.567019][T22170] syzkaller0: entered allmulticast mode [ 1522.000734][T22177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5184'. [ 1522.241050][T22182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5184'. [ 1522.408055][T22177] bond4: entered promiscuous mode [ 1522.413527][T22177] bond4: entered allmulticast mode [ 1522.567633][T22180] ip6gretap1: entered promiscuous mode [ 1522.577092][T22180] ip6gretap1: entered allmulticast mode [ 1522.607010][T22180] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1522.620466][T22185] bond5: (slave bond0): Releasing active interface [ 1522.643653][T22182] bond4: left promiscuous mode [ 1522.648652][T22182] ip6gretap1: left promiscuous mode [ 1522.654702][T22182] bond4: left allmulticast mode [ 1522.659943][T22182] ip6gretap1: left allmulticast mode [ 1522.675419][T22182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1522.922668][ T30] audit: type=1800 audit(2000000032.689:918): pid=22174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5183" name="bus" dev="ramfs" ino=76075 res=0 errno=0 [ 1523.334368][T22190] Set syz0 is full, maxelem 0 reached [ 1524.171182][T22196] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -14123, delta: 1 [ 1524.179880][T22196] ref_ctr increment failed for inode: 0x151f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811871e200 [ 1524.193405][ T30] audit: type=1804 audit(2000000033.929:919): pid=22196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5191" name="/newroot/1007/file0" dev="tmpfs" ino=5407 res=1 errno=0 [ 1524.305306][T22202] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -14123, delta: -1 [ 1524.314560][T22202] ref_ctr decrement failed for inode: 0x151f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811871e200 [ 1524.431109][T22202] uprobe: syz.2.5191:22202 failed to unregister, leaking uprobe [ 1524.953465][T22209] loop1: detected capacity change from 0 to 128 [ 1525.088510][T22209] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1525.102512][T22209] ext4 filesystem being mounted at /1065/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.139008][ T30] audit: type=1326 audit(2000000034.899:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22208 comm="syz.0.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1525.232593][ T30] audit: type=1326 audit(2000000034.919:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22208 comm="syz.0.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1525.254990][ T30] audit: type=1326 audit(2000000034.989:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.2.5199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1525.281169][ T30] audit: type=1326 audit(2000000034.989:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22215 comm="syz.2.5199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1525.416487][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1525.420106][ T30] audit: type=1326 audit(2000000035.099:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22208 comm="syz.0.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1525.450395][ T30] audit: type=1326 audit(2000000035.099:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22208 comm="syz.0.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1525.472857][ T30] audit: type=1326 audit(2000000035.139:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22208 comm="syz.0.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1525.497679][ T30] audit: type=1326 audit(2000000035.139:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22208 comm="syz.0.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1525.522942][ T30] audit: type=1326 audit(2000000035.139:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22208 comm="syz.0.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1526.869313][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1526.982523][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1527.010222][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1527.033166][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1527.058259][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1528.487173][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5212'. [ 1528.887070][T22259] loop2: detected capacity change from 0 to 2048 [ 1529.035140][T22259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1529.222411][T22268] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #12: comm syz.2.5214: corrupted in-inode xattr: invalid size in ea xattr [ 1529.962789][ T6737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1533.328670][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 1533.395764][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 1533.424854][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 1533.489132][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 1534.050343][T22361] bond1: option mode: unable to set because the bond device has slaves [ 1534.313454][T22361] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 1534.600931][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5231'. [ 1534.669808][T15212] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1534.866215][T15212] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 1534.875067][T15212] usb 2-1: config 0 has no interface number 1 [ 1534.923247][T15212] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1534.974525][T15212] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1535.034859][T15212] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1535.045250][T15212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1535.053824][T15212] usb 2-1: SerialNumber: syz [ 1535.107578][T22375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5234'. [ 1535.140048][T15212] usb 2-1: config 0 descriptor?? [ 1535.206057][T15212] uvcvideo 2-1:0.199: Found UVC 0.00 device (0002:0000) [ 1535.214999][T15212] uvcvideo 2-1:0.199: No valid video chain found. [ 1535.371232][T22380] netlink: 'syz.0.5234': attribute type 5 has an invalid length. [ 1535.379241][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5234'. [ 1536.122433][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5237'. [ 1536.226111][T21549] usb 2-1: USB disconnect, device number 43 [ 1536.256961][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5239'. [ 1536.356736][T22392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5239'. [ 1536.366577][T22382] loop2: detected capacity change from 0 to 8192 [ 1536.443242][T22382] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1537.755858][T15184] kernel write not supported for file bpf-prog (pid: 15184 comm: kworker/0:13) [ 1541.132410][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1541.132480][ T30] audit: type=1326 audit(2000000050.899:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22413 comm="syz.1.5246" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x0 [ 1543.717819][T22451] netlink: 'syz.6.5261': attribute type 14 has an invalid length. [ 1544.526541][T22462] netlink: 'syz.9.5263': attribute type 27 has an invalid length. [ 1545.025098][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 1545.063671][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 1545.115838][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 1545.191362][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 1545.231323][ T30] audit: type=1804 audit(2000000054.999:938): pid=22470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5269" name="bus" dev="ramfs" ino=76399 res=1 errno=0 [ 1545.355109][ T30] audit: type=1804 audit(2000000055.059:939): pid=22470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5269" name="bus" dev="ramfs" ino=76399 res=1 errno=0 [ 1546.195462][T22479] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5272'. [ 1546.616445][T22482] loop1: detected capacity change from 0 to 128 [ 1546.662398][T22482] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1547.415495][T22492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5277'. [ 1547.571370][T22487] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1548.141454][T22497] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1550.063424][T22500] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5280'. [ 1550.182535][T15184] kernel write not supported for file bpf-prog (pid: 15184 comm: kworker/0:13) [ 1551.805758][T22528] netlink: 'syz.6.5289': attribute type 1 has an invalid length. [ 1552.537656][T22532] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1552.549354][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5293'. [ 1552.559182][T22541] netlink: 'syz.1.5293': attribute type 5 has an invalid length. [ 1552.567402][T22541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5293'. [ 1552.618266][T22532] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1552.746611][T22533] bond3: (slave gretap0): making interface the new active one [ 1552.756424][T22533] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 1553.011809][T22541] geneve2: entered promiscuous mode [ 1553.017332][T22541] geneve2: entered allmulticast mode [ 1553.030284][T22313] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1553.082875][T22313] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1553.106922][T22313] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1553.128173][T22313] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1553.228438][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5295'. [ 1553.631919][T22551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5296'. [ 1554.039606][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5297'. [ 1556.398803][T22584] netlink: 'syz.0.5305': attribute type 83 has an invalid length. [ 1556.964329][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 1556.974510][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 1557.401501][T22595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1557.447186][T22595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.142471][T22615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1559.336790][ T30] audit: type=1326 audit(2000000069.089:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.361920][ T30] audit: type=1326 audit(2000000069.099:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.387167][ T30] audit: type=1326 audit(2000000069.099:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.566828][ T30] audit: type=1326 audit(2000000069.109:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.592478][ T30] audit: type=1326 audit(2000000069.109:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.616043][ T30] audit: type=1326 audit(2000000069.109:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.641105][ T30] audit: type=1326 audit(2000000069.109:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.663751][ T30] audit: type=1326 audit(2000000069.119:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.688657][ T30] audit: type=1326 audit(2000000069.119:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1559.713689][ T30] audit: type=1326 audit(2000000069.119:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22617 comm="syz.6.5314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1560.663798][T22629] loop2: detected capacity change from 0 to 512 [ 1560.732663][T22629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1560.787626][T22629] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.5318: Unimplemented hash flags: 0x0001 [ 1560.800061][T22629] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5318: Corrupt directory, running e2fsck is recommended [ 1560.883864][T22629] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.5318: path /1033/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 1562.038505][ T6737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.314292][T22667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5328'. [ 1564.117255][T21198] udevd[21198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1564.227483][T21198] udevd[21198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1564.238779][T22676] loop2: detected capacity change from 0 to 512 [ 1564.299878][T22676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1564.416184][T22676] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5329: invalid indirect mapped block 4294967295 (level 0) [ 1564.529341][T22676] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5329: invalid indirect mapped block 4294967295 (level 1) [ 1564.588481][T22676] EXT4-fs (loop2): 1 orphan inode deleted [ 1564.600440][T22676] EXT4-fs (loop2): 1 truncate cleaned up [ 1564.644837][T22676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1564.853696][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5334'. [ 1564.892218][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5334'. [ 1564.923581][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5334'. [ 1565.235230][ T6737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.315603][T22690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5336'. [ 1565.651863][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 1565.651940][ T30] audit: type=1804 audit(2000000075.419:1058): pid=22695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5339" name="file0" dev="tmpfs" ino=3629 res=1 errno=0 [ 1566.907369][T22708] 8021q: VLANs not supported on ip6tnl0 [ 1568.311404][T22732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.357745][T22732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1568.680106][T22736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1568.902477][T22743] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1569.417681][T22751] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 1569.473382][T22760] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5358'. [ 1569.573068][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5358'. [ 1569.648994][T22755] macvlan2: entered promiscuous mode [ 1569.658862][T22755] macvlan2: entered allmulticast mode [ 1569.742647][T22755] bond5: entered promiscuous mode [ 1569.754807][T22755] bridge0: entered promiscuous mode [ 1569.853297][T22755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1569.914747][T22755] bond5: left promiscuous mode [ 1569.921302][T22755] bridge0: left promiscuous mode [ 1572.553186][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5363'. [ 1572.592390][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5363'. [ 1574.390755][T22797] lo speed is unknown, defaulting to 1000 [ 1574.771127][T22802] lo speed is unknown, defaulting to 1000 [ 1576.145131][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.152083][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.153850][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1576.325022][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1581.183816][T22885] siw: device registration error -23 [ 1581.579290][T22892] fuse: Bad value for 'fd' [ 1583.236662][T22907] lo speed is unknown, defaulting to 1000 [ 1583.267682][T22910] lo speed is unknown, defaulting to 1000 [ 1586.213070][T17337] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 1586.585425][T22959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1586.597427][T22959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1586.606962][T22959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1586.644855][T22959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1587.887919][T22969] lo speed is unknown, defaulting to 1000 [ 1588.241378][ T30] audit: type=1326 audit(2000000097.999:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.327996][ T30] audit: type=1326 audit(2000000098.049:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.350931][ T30] audit: type=1326 audit(2000000098.049:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.373882][ T30] audit: type=1326 audit(2000000098.059:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.396563][ T30] audit: type=1326 audit(2000000098.069:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.419281][ T30] audit: type=1326 audit(2000000098.069:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.441973][ T30] audit: type=1326 audit(2000000098.069:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.464627][ T30] audit: type=1326 audit(2000000098.069:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.487716][ T30] audit: type=1326 audit(2000000098.069:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1588.512656][ T30] audit: type=1326 audit(2000000098.079:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.0.5430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1590.690944][T23008] gretap0: left promiscuous mode [ 1591.187886][T23008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.262441][T23008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.388572][T23008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1591.753845][T23011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1594.237470][T23051] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5465'. [ 1594.280090][T23051] dummy0: Caught tx_queue_len zero misconfig [ 1594.512218][T23050] lo speed is unknown, defaulting to 1000 [ 1594.930373][T23060] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5456'. [ 1595.131244][T23063] bridge8: port 1(veth0_to_bond) entered blocking state [ 1595.138781][T23063] bridge8: port 1(veth0_to_bond) entered disabled state [ 1595.144651][T23065] netlink: 'syz.6.5457': attribute type 1 has an invalid length. [ 1595.182298][T23063] veth0_to_bond: entered allmulticast mode [ 1595.214035][T23063] veth0_to_bond: entered promiscuous mode [ 1595.536552][T23065] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1595.625929][T23066] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1597.236265][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1597.442705][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1598.133206][T23109] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 1598.267441][T23109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1598.337330][T23114] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1598.752356][T23109] bond5: (slave ip6gretap2): making interface the new active one 35900 ms earlier [ 1598.778743][T23109] bond5: active interface up! [ 1598.795418][T23109] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1598.903302][T23119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1599.699264][T23133] bond0: Caught tx_queue_len zero misconfig [ 1599.946864][T23130] lo speed is unknown, defaulting to 1000 [ 1600.737186][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1600.737261][ T30] audit: type=1326 audit(2000000110.499:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23141 comm="syz.9.5480" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0 [ 1602.666360][T23166] netlink: 'syz.9.5487': attribute type 1 has an invalid length. [ 1603.088756][T23166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1603.150100][T23170] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1604.326291][T23189] tipc: Started in network mode [ 1604.331917][T23189] tipc: Node identity ff, cluster identity 4711 [ 1604.338703][T23189] tipc: Enabling of bearer rejected, failed to enable media [ 1604.827224][ T30] audit: type=1326 audit(2000000114.589:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.0.5496" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x0 [ 1605.252754][T23201] lo speed is unknown, defaulting to 1000 [ 1607.733981][T23248] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1607.768063][T23249] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1607.790866][T23248] overlayfs: failed to set xattr on upper [ 1607.797038][T23248] overlayfs: ...falling back to redirect_dir=nofollow. [ 1607.804784][T23248] overlayfs: ...falling back to index=off. [ 1607.816161][T23248] overlayfs: ...falling back to uuid=null. [ 1607.883211][T23250] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1607.990229][T23248] overlayfs: failed to clone lowerpath [ 1608.183938][T23255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5523'. [ 1608.427090][T23262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5523'. [ 1608.531260][T23255] bond7: entered promiscuous mode [ 1608.536601][T23255] bond7: entered allmulticast mode [ 1608.672518][T23261] ip6gretap3: entered promiscuous mode [ 1608.680203][T23261] ip6gretap3: entered allmulticast mode [ 1608.733487][T23261] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1608.820989][T23262] bond7: left promiscuous mode [ 1608.825962][T23262] ip6gretap3: left promiscuous mode [ 1608.832560][T23262] bond7: left allmulticast mode [ 1608.837584][T23262] ip6gretap3: left allmulticast mode [ 1609.024513][T23262] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1609.753159][T15186] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1610.385261][T15186] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1611.238142][T23301] lo speed is unknown, defaulting to 1000 [ 1612.612802][T23323] netlink: 'syz.9.5536': attribute type 10 has an invalid length. [ 1612.627085][T23321] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1612.820597][T23323] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1613.852356][T23326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.913819][T23326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.951740][T23326] batman_adv: batadv0: Interface activated: dummy0 [ 1613.958652][T23326] batadv0: mtu less than device minimum [ 1613.969717][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1613.982626][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1613.995597][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.008552][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.021567][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.034430][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.047472][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.060635][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1614.073570][T23326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1615.047829][ T30] audit: type=1326 audit(2000000124.809:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.115042][ T30] audit: type=1326 audit(2000000124.839:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.138846][ T30] audit: type=1326 audit(2000000124.859:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.161526][ T30] audit: type=1326 audit(2000000124.859:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.184053][ T30] audit: type=1326 audit(2000000124.859:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.213566][ T30] audit: type=1326 audit(2000000124.899:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.237311][ T30] audit: type=1326 audit(2000000124.899:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.260143][ T30] audit: type=1326 audit(2000000124.899:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.282648][ T30] audit: type=1326 audit(2000000124.969:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1615.306043][ T30] audit: type=1326 audit(2000000124.969:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.2.5547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1616.251216][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1616.295977][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1616.371135][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1616.394356][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1616.424896][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1617.113730][T17337] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 1617.405120][T23388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.551570][T21552] lo speed is unknown, defaulting to 1000 [ 1617.557475][T21552] syz2: Port: 1 Link ACTIVE [ 1618.904452][T23411] bond4: (slave veth13): Enslaving as an active interface with a down link [ 1619.796601][T23426] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5567'. [ 1620.935473][T23446] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1621.025509][T23447] netlink: 'syz.6.5574': attribute type 10 has an invalid length. [ 1622.295761][T23456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5577'. [ 1622.687133][T23457] delete_channel: no stack [ 1622.961258][T23461] overlayfs: failed to clone upperpath [ 1624.304166][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1624.344391][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1624.380002][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1624.416880][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1624.416954][ T30] audit: type=1326 audit(2000000134.179:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.457375][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1624.505431][ T30] audit: type=1326 audit(2000000134.219:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.528906][ T30] audit: type=1326 audit(2000000134.259:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.551849][ T30] audit: type=1326 audit(2000000134.259:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.575138][ T30] audit: type=1326 audit(2000000134.259:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.597771][ T30] audit: type=1326 audit(2000000134.259:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.620840][ T30] audit: type=1326 audit(2000000134.259:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.643373][ T30] audit: type=1326 audit(2000000134.259:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.666426][ T30] audit: type=1326 audit(2000000134.259:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1624.689015][ T30] audit: type=1326 audit(2000000134.259:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5585" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1625.914068][T23502] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1625.976417][T23504] netlink: 'syz.2.5591': attribute type 10 has an invalid length. [ 1626.113836][T23504] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1630.170767][T23578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1633.060730][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1633.060812][ T30] audit: type=1326 audit(2000000142.809:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.5612" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0 [ 1634.330076][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1634.544107][T23638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5616'. [ 1635.748718][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1635.842889][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1635.922989][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1636.018627][T23658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1637.554590][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.561525][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1638.050058][T23703] netlink: 'syz.2.5621': attribute type 27 has an invalid length. [ 1638.742942][ T30] audit: type=1804 audit(2000000148.509:1186): pid=23706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5624" name="bus" dev="ramfs" ino=81976 res=1 errno=0 [ 1638.865548][ T30] audit: type=1804 audit(2000000148.559:1187): pid=23706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5624" name="bus" dev="ramfs" ino=81976 res=1 errno=0 [ 1639.000342][T23713] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1639.114060][T23713] netlink: 'syz.1.5625': attribute type 10 has an invalid length. [ 1643.256600][T23759] lo: Caught tx_queue_len zero misconfig [ 1643.696422][T23773] lo: Caught tx_queue_len zero misconfig [ 1643.824420][ T30] audit: type=1326 audit(2000000153.589:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23774 comm="syz.0.5647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1643.928337][ T30] audit: type=1326 audit(2000000153.619:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23774 comm="syz.0.5647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1644.344743][ T30] audit: type=1326 audit(2000000154.029:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23774 comm="syz.0.5647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1645.865026][T23802] lo speed is unknown, defaulting to 1000 [ 1646.400483][T23821] netlink: 'syz.1.5660': attribute type 1 has an invalid length. [ 1646.966911][T23824] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1646.981359][T23824] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1647.162453][T23825] bond7: (slave gretap2): making interface the new active one [ 1647.214021][T23825] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1647.250169][T23831] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5662'. [ 1647.319599][T23833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5673'. [ 1647.328954][T23833] netlink: 'syz.0.5673': attribute type 5 has an invalid length. [ 1647.340061][T23833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5673'. [ 1647.506587][T23833] geneve2: entered promiscuous mode [ 1647.512525][T23833] geneve2: entered allmulticast mode [ 1647.570458][T22318] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1647.615340][T22318] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1647.661825][T22318] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1647.690286][T22318] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1651.177327][T24042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5672'. [ 1651.805121][T24052] netlink: 'syz.9.5677': attribute type 1 has an invalid length. [ 1651.855902][T24053] batman_adv: batadv0: Interface deactivated: dummy0 [ 1651.912945][T24053] batman_adv: batadv0: Removing interface: dummy0 [ 1652.194101][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5678'. [ 1652.204248][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5678'. [ 1652.570942][T24055] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1652.637054][T24055] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 1653.032835][T24057] bond5: (slave gretap1): making interface the new active one [ 1653.070132][T24057] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1655.121799][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5687'. [ 1655.133725][T24093] netlink: 'syz.2.5687': attribute type 5 has an invalid length. [ 1655.141924][T24093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5687'. [ 1655.931362][T24103] netlink: 'syz.1.5688': attribute type 83 has an invalid length. [ 1656.588964][T24093] geneve2: entered promiscuous mode [ 1656.594576][T24093] geneve2: entered allmulticast mode [ 1656.707260][T22322] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1656.793708][T22322] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1656.833056][T22322] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1656.897701][T22322] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1656.911293][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5690'. [ 1657.051998][T24115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.270319][T24134] lo: Caught tx_queue_len zero misconfig [ 1659.125440][T24150] syz_tun: entered allmulticast mode [ 1659.192488][T24150] syz_tun: left allmulticast mode [ 1659.379921][ T30] audit: type=1326 audit(2000000169.139:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.407428][ T30] audit: type=1326 audit(2000000169.139:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.534367][ T30] audit: type=1326 audit(2000000169.199:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.557100][ T30] audit: type=1326 audit(2000000169.199:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.580414][ T30] audit: type=1326 audit(2000000169.229:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.603098][ T30] audit: type=1326 audit(2000000169.229:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.625767][ T30] audit: type=1326 audit(2000000169.229:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.648249][ T30] audit: type=1326 audit(2000000169.229:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.670700][ T30] audit: type=1326 audit(2000000169.229:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1659.693721][ T30] audit: type=1326 audit(2000000169.229:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24153 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1661.793347][T24177] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1661.867823][T24177] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1662.155818][T24182] 8021q: VLANs not supported on ip6tnl0 [ 1662.736728][T24188] netlink: 'syz.6.5718': attribute type 1 has an invalid length. [ 1663.299232][T24188] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1663.464429][T24193] gretap1: entered promiscuous mode [ 1663.803703][T24193] bond8: (slave gretap1): making interface the new active one [ 1663.971563][T24193] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1664.145130][T24195] macvlan0: entered promiscuous mode [ 1664.150750][T24195] macvlan0: entered allmulticast mode [ 1664.209138][T24195] bond8: entered promiscuous mode [ 1664.287906][T24195] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1664.334497][T24195] bond8: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1664.408330][T24195] bond8: left promiscuous mode [ 1669.080357][T24282] netlink: 'syz.9.5732': attribute type 1 has an invalid length. [ 1669.566339][T24282] bond6: entered promiscuous mode [ 1669.572839][T24282] bond6: entered allmulticast mode [ 1669.925338][T24291] bond6: (slave ip6gretap1): making interface the new active one [ 1669.934292][T24291] ip6gretap1: entered promiscuous mode [ 1669.941370][T24291] ip6gretap1: entered allmulticast mode [ 1670.013163][T24291] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1671.019799][T24311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1671.229944][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5736'. [ 1673.577089][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 1673.577168][ T30] audit: type=1326 audit(2000000183.339:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.738509][ T30] audit: type=1326 audit(2000000183.419:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.761767][ T30] audit: type=1326 audit(2000000183.419:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.782320][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1673.784584][ T30] audit: type=1326 audit(2000000183.419:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.793749][T24351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1673.815413][ T30] audit: type=1326 audit(2000000183.419:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.815630][ T30] audit: type=1326 audit(2000000183.419:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.824913][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1673.847291][ T30] audit: type=1326 audit(2000000183.429:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.869643][T24351] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1673.878682][ T30] audit: type=1326 audit(2000000183.439:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1673.932763][ T30] audit: type=1326 audit(2000000183.439:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24344 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1674.050384][T24351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1674.348415][T24355] bond0: (slave bridge0): Releasing backup interface [ 1674.498629][T24355] team0: left allmulticast mode [ 1674.504020][T24355] team_slave_0: left allmulticast mode [ 1674.510144][T24355] team_slave_1: left allmulticast mode [ 1674.515811][T24355] bridge1: left allmulticast mode [ 1674.521436][T24355] team0: left promiscuous mode [ 1674.526506][T24355] team_slave_0: left promiscuous mode [ 1674.533167][T24355] team_slave_1: left promiscuous mode [ 1674.540057][T24355] bridge1: left promiscuous mode [ 1674.546806][T24355] bridge0: port 3(team0) entered disabled state [ 1674.590397][T24355] bridge_slave_0: left allmulticast mode [ 1674.596340][T24355] bridge_slave_0: left promiscuous mode [ 1674.604300][T24355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.764472][T24355] veth0_to_bond: left allmulticast mode [ 1674.770786][T24355] veth0_to_bond: left promiscuous mode [ 1674.777336][T24355] bridge8: port 1(veth0_to_bond) entered disabled state [ 1675.002084][T24355] bond0: (slave bond_slave_0): Releasing backup interface [ 1675.095033][T24355] bond0: (slave bond_slave_1): Releasing backup interface [ 1675.096746][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1675.223152][T24355] team0: Port device team_slave_0 removed [ 1675.285350][T24355] team0: Port device team_slave_1 removed [ 1675.315857][T24355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.367415][T24355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.408072][T24355] net_ratelimit: 14 callbacks suppressed [ 1675.408152][T24355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1675.523382][T24367] bond4: (slave dummy0): Releasing active interface [ 1676.634336][ T30] audit: type=1326 audit(2000000186.389:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24376 comm="syz.0.5756" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742d539 code=0x0 [ 1676.876061][T24374] lo speed is unknown, defaulting to 1000 [ 1677.579726][T24363] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5751'. [ 1677.589300][T24363] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5751'. [ 1678.995383][ T30] audit: type=1326 audit(2000000188.729:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.019150][ T30] audit: type=1326 audit(2000000188.729:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.046993][ T30] audit: type=1326 audit(2000000188.749:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.069894][ T30] audit: type=1326 audit(2000000188.749:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.379019][ T30] audit: type=1326 audit(2000000188.789:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.402554][ T30] audit: type=1326 audit(2000000188.789:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.426292][ T30] audit: type=1326 audit(2000000188.789:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.449705][ T30] audit: type=1326 audit(2000000188.859:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.473890][ T30] audit: type=1326 audit(2000000188.859:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.496824][ T30] audit: type=1326 audit(2000000188.859:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24402 comm="syz.1.5762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1679.654706][T24408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5763'. [ 1681.274790][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5767'. [ 1681.494287][T24433] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5770'. [ 1683.888386][T24439] veth15: entered promiscuous mode [ 1683.897778][T24439] veth15: entered allmulticast mode [ 1683.991632][T24439] bridge9: port 1(veth15) entered blocking state [ 1683.998644][T24439] bridge9: port 1(veth15) entered disabled state [ 1684.169173][T24439] bridge9: port 1(veth15) entered blocking state [ 1684.176217][T24439] bridge9: port 1(veth15) entered forwarding state [ 1684.392393][T22329] bridge9: port 1(veth15) entered disabled state [ 1689.259217][T24496] netlink: 'syz.9.5789': attribute type 10 has an invalid length. [ 1689.683278][T24505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5790'. [ 1693.194989][T24548] lo speed is unknown, defaulting to 1000 [ 1694.036007][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5806'. [ 1694.198432][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5806'. [ 1698.995528][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.002786][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1702.525656][T24634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5828'. [ 1702.700704][T23563] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1702.739900][T23563] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1702.764332][T23563] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1702.784891][T23563] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1704.089908][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1705.842591][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1705.842661][ T30] audit: type=1326 audit(2000000002.629:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1705.871866][ T30] audit: type=1326 audit(2000000002.639:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1705.895410][ T30] audit: type=1326 audit(2000000002.639:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1705.918260][ T30] audit: type=1326 audit(2000000002.649:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1705.943435][ T30] audit: type=1326 audit(2000000002.649:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1706.305421][ T30] audit: type=1326 audit(2000000002.679:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1706.329036][ T30] audit: type=1326 audit(2000000002.679:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1706.358674][ T30] audit: type=1326 audit(2000000002.679:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1706.381276][ T30] audit: type=1326 audit(2000000002.679:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24675 comm="syz.6.5842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 1706.460770][T24682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1706.548846][T24686] team0: No ports can be present during mode change [ 1706.556872][T24687] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5844'. [ 1706.742290][T24687] team0 (unregistering): Port device bridge1 removed [ 1712.071476][T24739] netlink: 'syz.2.5859': attribute type 5 has an invalid length. [ 1712.453533][T24744] team0: Port device bond0 removed [ 1712.474787][T24744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1712.629988][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5860'. [ 1712.817094][T24745] team0: Mode changed to "loadbalance" [ 1714.888370][ T30] audit: type=1326 audit(2000000008.009:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1714.984555][ T30] audit: type=1326 audit(2000000008.039:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.007437][ T30] audit: type=1326 audit(2000000008.039:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.030179][ T30] audit: type=1326 audit(2000000008.049:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.052611][ T30] audit: type=1326 audit(2000000008.049:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.075258][ T30] audit: type=1326 audit(2000000008.059:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.097887][ T30] audit: type=1326 audit(2000000008.059:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.120379][ T30] audit: type=1326 audit(2000000008.069:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.142888][ T30] audit: type=1326 audit(2000000008.069:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24772 comm="syz.2.5873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7ffc0000 [ 1715.652576][ T30] audit: type=1326 audit(2000000008.719:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24778 comm="syz.0.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1716.372705][T24782] overlayfs: failed to resolve './file0': -2 [ 1718.629168][T24793] bridge_slave_0: left allmulticast mode [ 1718.635409][T24793] bridge_slave_0: left promiscuous mode [ 1718.642307][T24793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.761899][T24793] bridge_slave_1: left allmulticast mode [ 1718.768146][T24793] bridge_slave_1: left promiscuous mode [ 1718.776043][T24793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.844296][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5880'. [ 1718.892320][T24793] veth0_to_bond: left allmulticast mode [ 1718.898355][T24793] veth0_to_bond: left promiscuous mode [ 1718.905592][T24793] bridge4: port 1(veth0_to_bond) entered disabled state [ 1719.006223][T24793] team_slave_0: left allmulticast mode [ 1719.053559][T24793] team0: Port device team_slave_0 removed [ 1719.095471][T24793] team_slave_1: left allmulticast mode [ 1719.116024][T24793] team0: Port device team_slave_1 removed [ 1719.161199][T24793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.204428][T24793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1719.349743][T24797] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1719.805924][T24799] team0: Mode changed to "loadbalance" [ 1720.020878][T24802] bond0: (slave macvlan2): Releasing active interface [ 1720.341957][ T8093] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1720.390628][ T8093] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1720.428656][ T8093] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1720.540883][ T8093] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1720.680652][T24813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5887'. [ 1722.099947][T24838] netlink: 'syz.6.5895': attribute type 14 has an invalid length. [ 1723.936165][T24865] lo speed is unknown, defaulting to 1000 [ 1724.404879][T24582] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1724.423122][T24877] bond0: (slave bridge0): Releasing backup interface [ 1724.451640][T24582] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1724.475474][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5903'. [ 1724.648686][T24877] team0: left allmulticast mode [ 1724.654211][T24877] team_slave_1: left allmulticast mode [ 1724.661539][T24877] bridge1: left allmulticast mode [ 1724.666769][T24877] team0: left promiscuous mode [ 1724.671979][T24877] team_slave_1: left promiscuous mode [ 1724.678431][T24877] bridge1: left promiscuous mode [ 1724.685272][T24877] bridge0: port 3(team0) entered disabled state [ 1724.778891][T24877] bridge_slave_1: left allmulticast mode [ 1724.785189][T24877] bridge_slave_1: left promiscuous mode [ 1724.792315][T24877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.892006][T24877] bond0: (slave bond_slave_0): Releasing backup interface [ 1724.950160][T24877] bond0: (slave bond_slave_1): Releasing backup interface [ 1725.005903][T24877] team0: Port device team_slave_1 removed [ 1725.039875][T24877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1725.095473][T24880] team0: No ports can be present during mode change [ 1725.162412][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5904'. [ 1725.255170][T24883] team0 (unregistering): Port device bridge1 removed [ 1725.327007][T24894] netlink: 'syz.6.5916': attribute type 1 has an invalid length. [ 1725.761866][T24898] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1725.777258][T24898] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 1725.843960][T24899] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 1725.874826][T24903] macvlan0: entered promiscuous mode [ 1725.880477][T24903] macvlan0: entered allmulticast mode [ 1725.888624][T24903] bond9: entered promiscuous mode [ 1725.897568][T24903] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1725.917855][T24903] bond9: left promiscuous mode [ 1726.566542][T24918] netlink: 'syz.2.5910': attribute type 14 has an invalid length. [ 1727.446825][T24931] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1727.456268][T22329] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.490392][T22329] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.498873][T22329] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.538228][T22329] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.798903][T24941] netlink: 'syz.2.5918': attribute type 10 has an invalid length. [ 1727.824064][T24941] netlink: 'syz.2.5918': attribute type 10 has an invalid length. [ 1727.922348][T24948] siw: device registration error -23 [ 1727.968732][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1728.047180][T24947] syz_tun (unregistering): left allmulticast mode [ 1729.008785][T24964] team0: left allmulticast mode [ 1729.014635][T24964] team_slave_0: left allmulticast mode [ 1729.020623][T24964] team_slave_1: left allmulticast mode [ 1729.026289][T24964] bridge3: left allmulticast mode [ 1729.039080][T24964] bridge0: port 1(team0) entered disabled state [ 1729.244616][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1729.271343][T24964] bond0: (slave bond_slave_0): Releasing backup interface [ 1729.304082][T24964] bond0: (slave bond_slave_1): Releasing backup interface [ 1729.357917][T24964] team0: Port device team_slave_0 removed [ 1729.378319][T24964] team0: Port device team_slave_1 removed [ 1729.388783][T24964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1729.406662][T24967] team0: No ports can be present during mode change [ 1729.523677][T24974] team0 (unregistering): Port device bridge3 removed [ 1730.524101][T24995] netlink: 'syz.9.5927': attribute type 1 has an invalid length. [ 1730.835897][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1730.845344][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1731.425426][T25015] netlink: 'syz.9.5934': attribute type 10 has an invalid length. [ 1731.440391][T25015] netlink: 'syz.9.5934': attribute type 10 has an invalid length. [ 1731.532086][T25020] siw: device registration error -23 [ 1732.581926][T25028] tipc: Enabling of bearer rejected, failed to enable media [ 1732.953951][T25033] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1733.080710][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1733.739525][T25051] siw: device registration error -23 [ 1734.137836][T25056] ===================================================== [ 1734.145370][T25056] BUG: KMSAN: uninit-value in vxlan_find_mac_rcu+0x5da/0x7f0 [ 1734.153086][T25056] vxlan_find_mac_rcu+0x5da/0x7f0 [ 1734.158305][T25056] vxlan_xmit+0x17c5/0x3e70 [ 1734.163173][T25056] dev_hard_start_xmit+0x22f/0xa30 [ 1734.168503][T25056] __dev_queue_xmit+0x350d/0x5890 [ 1734.173909][T25056] bond_start_xmit+0x120b/0x1dd0 [ 1734.179041][T25056] dev_hard_start_xmit+0x22f/0xa30 [ 1734.184545][T25056] __dev_queue_xmit+0x350d/0x5890 [ 1734.189886][T25056] __bpf_redirect+0x162e/0x1760 [ 1734.194930][T25056] bpf_clone_redirect+0x4a6/0x6c0 [ 1734.200289][T25056] ___bpf_prog_run+0x12af/0xeb60 [ 1734.205428][T25056] __bpf_prog_run32+0xc2/0xf0 [ 1734.210431][T25056] bpf_test_run+0x493/0xdf0 [ 1734.215115][T25056] bpf_prog_test_run_skb+0x2376/0x3200 [ 1734.221016][T25056] bpf_prog_test_run+0x5bb/0x9f0 [ 1734.226141][T25056] __sys_bpf+0x873/0xeb0 [ 1734.230698][T25056] __ia32_sys_bpf+0xa4/0xf0 [ 1734.235396][T25056] ia32_sys_call+0xa53/0x4340 [ 1734.240402][T25056] __do_fast_syscall_32+0x14a/0x310 [ 1734.245777][T25056] do_fast_syscall_32+0x37/0x80 [ 1734.251026][T25056] do_SYSENTER_32+0x1f/0x30 [ 1734.255715][T25056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1734.262379][T25056] [ 1734.264772][T25056] Uninit was stored to memory at: [ 1734.270479][T25056] vxlan_find_mac_rcu+0x6f/0x7f0 [ 1734.275593][T25056] vxlan_xmit+0x17c5/0x3e70 [ 1734.280444][T25056] dev_hard_start_xmit+0x22f/0xa30 [ 1734.285758][T25056] __dev_queue_xmit+0x350d/0x5890 [ 1734.291209][T25056] bond_start_xmit+0x120b/0x1dd0 [ 1734.296328][T25056] dev_hard_start_xmit+0x22f/0xa30 [ 1734.302113][T25056] __dev_queue_xmit+0x350d/0x5890 [ 1734.307340][T25056] __bpf_redirect+0x162e/0x1760 [ 1734.312538][T25056] bpf_clone_redirect+0x4a6/0x6c0 [ 1734.317788][T25056] ___bpf_prog_run+0x12af/0xeb60 [ 1734.323068][T25056] __bpf_prog_run32+0xc2/0xf0 [ 1734.327921][T25056] bpf_test_run+0x493/0xdf0 [ 1734.332769][T25056] bpf_prog_test_run_skb+0x2376/0x3200 [ 1734.338512][T25056] bpf_prog_test_run+0x5bb/0x9f0 [ 1734.343784][T25056] __sys_bpf+0x873/0xeb0 [ 1734.348631][T25056] __ia32_sys_bpf+0xa4/0xf0 [ 1734.353433][T25056] ia32_sys_call+0xa53/0x4340 [ 1734.358401][T25056] __do_fast_syscall_32+0x14a/0x310 [ 1734.363961][T25056] do_fast_syscall_32+0x37/0x80 [ 1734.369011][T25056] do_SYSENTER_32+0x1f/0x30 [ 1734.373846][T25056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1734.380518][T25056] [ 1734.382920][T25056] Uninit was created at: [ 1734.387472][T25056] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 1734.393805][T25056] kmalloc_reserve+0x13c/0x4b0 [ 1734.398767][T25056] pskb_expand_head+0x205/0x1900 [ 1734.403990][T25056] skb_ensure_writable+0x44e/0x510 [ 1734.409438][T25056] bpf_clone_redirect+0x301/0x6c0 [ 1734.414710][T25056] ___bpf_prog_run+0x12af/0xeb60 [ 1734.419952][T25056] __bpf_prog_run32+0xc2/0xf0 [ 1734.424809][T25056] bpf_test_run+0x493/0xdf0 [ 1734.429618][T25056] bpf_prog_test_run_skb+0x2376/0x3200 [ 1734.435267][T25056] bpf_prog_test_run+0x5bb/0x9f0 [ 1734.440605][T25056] __sys_bpf+0x873/0xeb0 [ 1734.445010][T25056] __ia32_sys_bpf+0xa4/0xf0 [ 1734.449819][T25056] ia32_sys_call+0xa53/0x4340 [ 1734.454687][T25056] __do_fast_syscall_32+0x14a/0x310 [ 1734.460215][T25056] do_fast_syscall_32+0x37/0x80 [ 1734.465237][T25056] do_SYSENTER_32+0x1f/0x30 [ 1734.470055][T25056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1734.476741][T25056] [ 1734.479168][T25056] CPU: 1 UID: 0 PID: 25056 Comm: syz.9.5949 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1734.491036][T25056] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1734.496323][T25056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1734.506658][T25056] ===================================================== [ 1734.513794][T25056] Disabling lock debugging due to kernel taint [ 1734.520186][T25056] Kernel panic - not syncing: kmsan.panic set ... [ 1734.526731][T25056] CPU: 1 UID: 0 PID: 25056 Comm: syz.9.5949 Tainted: G B W L syzkaller #0 PREEMPT(voluntary) [ 1734.538379][T25056] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1734.544890][T25056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1734.555095][T25056] Call Trace: [ 1734.558474][T25056] [ 1734.561484][T25056] __dump_stack+0x26/0x30 [ 1734.565983][T25056] dump_stack_lvl+0x50/0x1c0 [ 1734.570737][T25056] ? dump_stack+0x12/0x25 [ 1734.575278][T25056] dump_stack+0x1e/0x25 [ 1734.579596][T25056] vpanic+0x435/0xd40 [ 1734.583774][T25056] panic+0x15d/0x160 [ 1734.587919][T25056] kmsan_report+0x31a/0x320 [ 1734.592643][T25056] ? __sys_bpf+0x873/0xeb0 [ 1734.597227][T25056] ? __msan_warning+0x1b/0x30 [ 1734.602096][T25056] ? vxlan_find_mac_rcu+0x5da/0x7f0 [ 1734.607470][T25056] ? vxlan_xmit+0x17c5/0x3e70 [ 1734.612327][T25056] ? dev_hard_start_xmit+0x22f/0xa30 [ 1734.617805][T25056] ? __dev_queue_xmit+0x350d/0x5890 [ 1734.623204][T25056] ? bond_start_xmit+0x120b/0x1dd0 [ 1734.628505][T25056] ? dev_hard_start_xmit+0x22f/0xa30 [ 1734.633968][T25056] ? __dev_queue_xmit+0x350d/0x5890 [ 1734.639362][T25056] ? __bpf_redirect+0x162e/0x1760 [ 1734.644579][T25056] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1734.649976][T25056] ? ___bpf_prog_run+0x12af/0xeb60 [ 1734.655350][T25056] ? __bpf_prog_run32+0xc2/0xf0 [ 1734.660369][T25056] ? bpf_test_run+0x493/0xdf0 [ 1734.665227][T25056] ? bpf_prog_test_run_skb+0x2376/0x3200 [ 1734.671048][T25056] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1734.676354][T25056] ? __sys_bpf+0x873/0xeb0 [ 1734.680952][T25056] ? __ia32_sys_bpf+0xa4/0xf0 [ 1734.685789][T25056] ? ia32_sys_call+0xa53/0x4340 [ 1734.690831][T25056] ? __do_fast_syscall_32+0x14a/0x310 [ 1734.696394][T25056] ? do_fast_syscall_32+0x37/0x80 [ 1734.701600][T25056] ? do_SYSENTER_32+0x1f/0x30 [ 1734.706453][T25056] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1734.713153][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.719276][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.725316][T25056] ? vxlan_fdb_find_uc+0x651/0x6a0 [ 1734.730605][T25056] ? filter_irq_stacks+0x49/0x190 [ 1734.735806][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.741150][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.747175][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.752494][T25056] __msan_warning+0x1b/0x30 [ 1734.757182][T25056] vxlan_find_mac_rcu+0x5da/0x7f0 [ 1734.762398][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.768445][T25056] vxlan_xmit+0x17c5/0x3e70 [ 1734.773145][T25056] ? __rcu_read_unlock+0x46/0xd0 [ 1734.778270][T25056] ? __pfx_packet_rcv+0x10/0x10 [ 1734.783295][T25056] ? dev_queue_xmit_nit+0xece/0x1170 [ 1734.788779][T25056] ? __pfx_vxlan_xmit+0x10/0x10 [ 1734.793806][T25056] dev_hard_start_xmit+0x22f/0xa30 [ 1734.799127][T25056] __dev_queue_xmit+0x350d/0x5890 [ 1734.804335][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.810436][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.815755][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.821787][T25056] ? bond_get_slave_by_id+0x3a3/0x7e0 [ 1734.827395][T25056] ? __dev_queue_xmit+0x27d/0x5890 [ 1734.832736][T25056] bond_start_xmit+0x120b/0x1dd0 [ 1734.837906][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.843217][T25056] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1734.849743][T25056] ? __pfx_bond_start_xmit+0x10/0x10 [ 1734.855304][T25056] dev_hard_start_xmit+0x22f/0xa30 [ 1734.860635][T25056] __dev_queue_xmit+0x350d/0x5890 [ 1734.865860][T25056] ? skb_release_data+0xc1f/0xdf0 [ 1734.871054][T25056] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1734.877488][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.882779][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.888800][T25056] ? __dev_queue_xmit+0x27d/0x5890 [ 1734.894155][T25056] __bpf_redirect+0x162e/0x1760 [ 1734.899213][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.904527][T25056] bpf_clone_redirect+0x4a6/0x6c0 [ 1734.909757][T25056] ___bpf_prog_run+0x12af/0xeb60 [ 1734.914902][T25056] __bpf_prog_run32+0xc2/0xf0 [ 1734.919739][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.925054][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.931039][T25056] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1734.936578][T25056] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1734.942111][T25056] bpf_test_run+0x493/0xdf0 [ 1734.946788][T25056] ? csum_partial+0x424/0x480 [ 1734.951643][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.956952][T25056] ? bpf_test_run+0x2f4/0xdf0 [ 1734.961813][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.967109][T25056] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1734.973134][T25056] bpf_prog_test_run_skb+0x2376/0x3200 [ 1734.978824][T25056] ? kmsan_get_metadata+0xf1/0x160 [ 1734.984156][T25056] ? __rcu_read_unlock+0x6c/0xd0 [ 1734.989295][T25056] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1734.995286][T25056] bpf_prog_test_run+0x5bb/0x9f0 [ 1735.000416][T25056] __sys_bpf+0x873/0xeb0 [ 1735.004859][T25056] __ia32_sys_bpf+0xa4/0xf0 [ 1735.009531][T25056] ia32_sys_call+0xa53/0x4340 [ 1735.014392][T25056] __do_fast_syscall_32+0x14a/0x310 [ 1735.019768][T25056] do_fast_syscall_32+0x37/0x80 [ 1735.024787][T25056] do_SYSENTER_32+0x1f/0x30 [ 1735.029451][T25056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1735.035952][T25056] RIP: 0023:0xf7f53539 [ 1735.040121][T25056] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1735.059886][T25056] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1735.068441][T25056] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 1735.076518][T25056] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.084589][T25056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1735.092654][T25056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1735.100723][T25056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.108830][T25056] [ 1735.112420][T25056] Kernel Offset: disabled [ 1735.116796][T25056] Rebooting in 86400 seconds..