last executing test programs: 8m13.836015632s ago: executing program 0 (id=801): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m12.237276442s ago: executing program 0 (id=807): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) 8m11.080552419s ago: executing program 0 (id=809): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x88, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8m10.775414514s ago: executing program 0 (id=813): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="000228bd70"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 8m10.568655044s ago: executing program 0 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x7) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x8) 8m0.816433558s ago: executing program 0 (id=832): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 7m45.074550947s ago: executing program 32 (id=832): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 7m4.217022371s ago: executing program 3 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 7m2.972508783s ago: executing program 3 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000280)=0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) pipe2$9p(0x0, 0x800) r6 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESOCT, @ANYBLOB=',wfdno']) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000080)=0x8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r8 = syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0xb2e8, 0x10000, 0x1, 0x2b}, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x4a9a, &(0x7f0000000180)={0x0, 0x60fd, 0x800, 0x3, 0x3c3, 0x0, r8}, &(0x7f0000000200), &(0x7f0000000240)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) 7m1.275635907s ago: executing program 3 (id=962): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 6m59.59050326s ago: executing program 3 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x90}}, 0x0) 6m58.623207308s ago: executing program 3 (id=973): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m57.099947273s ago: executing program 3 (id=976): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) read(r0, &(0x7f0000000640)=""/4, 0x4) 6m41.006210201s ago: executing program 33 (id=976): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) read(r0, &(0x7f0000000640)=""/4, 0x4) 6m40.989815942s ago: executing program 1 (id=1003): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x88, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m40.292710016s ago: executing program 1 (id=1005): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 6m38.4055918s ago: executing program 1 (id=1006): syz_open_dev$usbfs(0x0, 0x76, 0x101341) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x100, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) r0 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6m37.687229145s ago: executing program 1 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x0) 6m37.38865519s ago: executing program 1 (id=1009): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000280)=0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) pipe2$9p(0x0, 0x800) r6 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESOCT, @ANYBLOB, @ANYRESHEX=r6]) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000080)=0x8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r8 = syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0xb2e8, 0x10000, 0x1, 0x2b}, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x4a9a, &(0x7f0000000180)={0x0, 0x60fd, 0x800, 0x3, 0x3c3, 0x0, r8}, &(0x7f0000000200), &(0x7f0000000240)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) 6m35.724859092s ago: executing program 1 (id=1010): unshare(0x6a040000) syz_emit_ethernet(0x54, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a82f0081000f000011ababfc072393a40a000c0900000000951832d2000000916e667c8e87ad00e7906b821d77cb0800000000000000e2d809b9c7f368b25959ad548e63c44682"], 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) unshare(0x8000000) mmap(&(0x7f00004a9000/0x3000)=nil, 0x3000, 0x3000007, 0x10, r1, 0x54266000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x80000006}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r3, 0x2, &(0x7f0000001180)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x1c, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001407000007000000000000002bfa0000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 6m20.574018023s ago: executing program 34 (id=1010): unshare(0x6a040000) syz_emit_ethernet(0x54, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a82f0081000f000011ababfc072393a40a000c0900000000951832d2000000916e667c8e87ad00e7906b821d77cb0800000000000000e2d809b9c7f368b25959ad548e63c44682"], 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) unshare(0x8000000) mmap(&(0x7f00004a9000/0x3000)=nil, 0x3000, 0x3000007, 0x10, r1, 0x54266000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x80000006}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r3, 0x2, &(0x7f0000001180)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x1c, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001407000007000000000000002bfa0000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 11.956208493s ago: executing program 4 (id=2422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, 0x0, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f7274000000000c"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf16662c415719082abd70"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 11.728684824s ago: executing program 4 (id=2426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03000000000000000000020000080900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 11.571010732s ago: executing program 4 (id=2429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x478, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x8, 0x5, 0xff, 0x73, {0xf, 0x1, 0x436, 0x8, 0xff81, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x3, 0xc11}, 0x5, 0x8, 0x7d80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xfff7c33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x7, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0xcf28, 0x9, 0xd, 0x5, 0x7fffffff, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x2, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x2, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x4, 0x5, 0x9, 0x1, 0x8, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x9, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 8.36240597s ago: executing program 4 (id=2430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00", 0x29}, {&(0x7f0000002680)="76e69c0141", 0x5}], 0x2}, 0x4005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 7.966335779s ago: executing program 4 (id=2436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 7.562116989s ago: executing program 4 (id=2440): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="f9ff0000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="140002007767320000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000008000700060000001400020077673100000000000000000000000000140002007767310000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000000000000000000000000000060006004e210000060006004e200000"], 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000080)=0xb, 0x4) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r9, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 2.439159161s ago: executing program 6 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00", 0x29}, {&(0x7f0000002680)="76e69c0141", 0x5}], 0x2}, 0x4005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.923469566s ago: executing program 6 (id=2481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834eb", 0x10}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed66", 0xaf}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e6153", 0xea}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a55", 0x4d}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.597460882s ago: executing program 6 (id=2483): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80002, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.372821193s ago: executing program 5 (id=2485): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1.23303512s ago: executing program 2 (id=2486): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.219613271s ago: executing program 5 (id=2487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x3, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x81, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x200080, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0xea12, 0x4, 0x720, 0x2, 0x118, 0x6, 0x101, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0xfd, 0x0, 0x400, 0x2, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x6, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0xfffffeac, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x7, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x2, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x7, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x8, 0x5, 0xff, 0x73, {0xf, 0x1, 0x436, 0x8, 0xff81, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x3, 0xc11}, 0x5, 0x8, 0x7d80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xfff7c33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x7, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0xcf28, 0x9, 0xd, 0x5, 0x7fffffff, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x2, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x2, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x4, 0x5, 0x9, 0x1, 0x8, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x9, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, 0x0, 0x5) 1.069104488s ago: executing program 2 (id=2488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x840, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x810, 0x2, [@TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x3, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x81, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x200080, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0x9, 0x4, 0x720, 0x2, 0x118, 0x6, 0x101, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0xfd, 0x0, 0x400, 0x8, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x6, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0xfffffeac, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x400, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x2, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x7, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xffffc33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x7, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0xcf28, 0x9, 0xd, 0x5, 0x7fffffff, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x9, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x2, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0x1, 0x8, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x3, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 876.727458ms ago: executing program 5 (id=2489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00", 0x29}, {&(0x7f0000002680)="76e69c0141", 0x5}], 0x2}, 0x4005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 839.565749ms ago: executing program 2 (id=2490): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}}]}]}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 678.577528ms ago: executing program 2 (id=2491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 564.733863ms ago: executing program 6 (id=2492): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834eb", 0x10}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed66", 0xaf}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2", 0xf2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a55", 0x4d}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 522.214365ms ago: executing program 5 (id=2493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4000824, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0xfe, 0x6, @multicast}, 0x14) 443.526448ms ago: executing program 2 (id=2494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, 0x0, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f7274000000000c"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf16662c415719082abd70"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 369.580903ms ago: executing program 6 (id=2495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 215.29789ms ago: executing program 5 (id=2496): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 57.884518ms ago: executing program 6 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0x0, 0x3, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 55.300078ms ago: executing program 2 (id=2498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x840, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x810, 0x2, [@TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x3, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x81, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x200080, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0x9, 0x4, 0x720, 0x2, 0x118, 0x6, 0x101, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0xfd, 0x0, 0x400, 0x8, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x6, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0xfffffeac, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x400, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x2, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x7, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xffffc33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x7, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0xcf28, 0x9, 0xd, 0x5, 0x7fffffff, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x9, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x2, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0x1, 0x8, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x3, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 0s ago: executing program 5 (id=2499): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}}]}]}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) kernel console output (not intermixed with test programs): z0 as /devices/virtual/input/input19 [ 260.315789][ T6654] loop1: detected capacity change from 0 to 2048 [ 260.323184][ T6654] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 260.427206][ T5786] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.441794][ T6654] loop1: detected capacity change from 0 to 128 [ 261.205504][ T6663] 9pnet_fd: Insufficient options for proto=fd [ 267.772333][ T6679] input: syz0 as /devices/virtual/input/input20 [ 267.895989][ T6679] loop3: detected capacity change from 0 to 2048 [ 267.903663][ T6679] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 267.989717][ T6679] loop3: detected capacity change from 0 to 128 [ 268.392092][ T6698] x_tables: unsorted underflow at hook 3 [ 268.552821][ T6698] input: syz0 as /devices/virtual/input/input21 [ 269.667921][ T6697] loop0: detected capacity change from 0 to 2048 [ 269.675679][ T6697] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 269.757266][ T5772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.778595][ T6697] loop0: detected capacity change from 0 to 128 [ 272.799228][ T6722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.225'. [ 273.448142][ T6728] 9pnet_fd: Insufficient options for proto=fd [ 277.133836][ T6733] input: syz0 as /devices/virtual/input/input22 [ 277.156056][ T6733] loop0: detected capacity change from 0 to 2048 [ 277.163801][ T6733] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 277.253134][ T6733] loop0: detected capacity change from 0 to 128 [ 281.379282][ T6752] x_tables: unsorted underflow at hook 3 [ 281.581594][ T6752] loop2: detected capacity change from 0 to 2048 [ 281.596252][ T6752] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 283.511668][ T5772] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.561484][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.234'. [ 286.241926][ T6778] 9pnet_fd: Insufficient options for proto=fd [ 288.452568][ T6793] loop2: detected capacity change from 0 to 8 [ 288.871713][ T6795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.245'. [ 290.952353][ T6809] 9pnet_fd: Insufficient options for proto=fd [ 295.146148][ T6832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.256'. [ 295.295278][ T28] audit: type=1326 audit(1773761218.178:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 295.340232][ T28] audit: type=1326 audit(1773761218.218:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 295.381651][ T28] audit: type=1326 audit(1773761218.218:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 295.406523][ T28] audit: type=1326 audit(1773761218.218:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 295.456604][ T28] audit: type=1326 audit(1773761218.218:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 295.549665][ T28] audit: type=1326 audit(1773761218.218:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 295.613402][ T28] audit: type=1326 audit(1773761218.218:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 295.645528][ T28] audit: type=1326 audit(1773761218.218:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 296.144694][ T6839] 9pnet_fd: Insufficient options for proto=fd [ 297.391459][ T28] audit: type=1326 audit(1773761218.218:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 297.416859][ T28] audit: type=1326 audit(1773761218.218:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405e19c799 code=0x7ffc0000 [ 301.071506][ T6857] x_tables: unsorted underflow at hook 3 [ 301.117465][ T6857] input: syz0 as /devices/virtual/input/input23 [ 301.151150][ T6857] loop2: detected capacity change from 0 to 2048 [ 301.158960][ T6857] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 301.229488][ T6857] loop2: detected capacity change from 0 to 128 [ 301.480150][ T6865] netlink: 44 bytes leftover after parsing attributes in process `syz.0.267'. [ 302.137391][ T6868] input: syz0 as /devices/virtual/input/input24 [ 302.632599][ T6873] loop1: detected capacity change from 0 to 2048 [ 302.640657][ T6873] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 303.124134][ T5772] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 303.167077][ T6875] loop0: detected capacity change from 0 to 256 [ 306.074679][ T6897] x_tables: unsorted underflow at hook 3 [ 306.100040][ T6897] input: syz0 as /devices/virtual/input/input25 [ 306.623041][ T6901] loop0: detected capacity change from 0 to 2048 [ 306.631056][ T6901] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 307.103829][ T6895] loop0: detected capacity change from 0 to 128 [ 307.145416][ T6892] 9pnet_fd: Insufficient options for proto=fd [ 311.580681][ T5084] block nbd1: Receive control failed (result -32) [ 311.580680][ T5778] block nbd1: Receive control failed (result -32) [ 311.674804][ T6925] block nbd1: shutting down sockets [ 314.053160][ T6955] input: syz0 as /devices/virtual/input/input26 [ 314.573873][ T6960] loop3: detected capacity change from 0 to 2048 [ 314.581426][ T6960] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 315.235170][ T6952] loop3: detected capacity change from 0 to 128 [ 315.977796][ T6954] 9pnet_fd: Insufficient options for proto=fd [ 317.636348][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.651383][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.502044][ T6988] x_tables: unsorted underflow at hook 3 [ 318.530851][ T6988] input: syz0 as /devices/virtual/input/input27 [ 319.044191][ T6993] loop1: detected capacity change from 0 to 2048 [ 319.052105][ T6993] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 319.525506][ T5786] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.397380][ T6999] input: syz0 as /devices/virtual/input/input28 [ 320.903315][ T7004] loop3: detected capacity change from 0 to 2048 [ 320.910769][ T7004] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 321.342735][ T6998] loop3: detected capacity change from 0 to 128 [ 325.363728][ T7023] 9pnet_fd: Insufficient options for proto=fd [ 325.516388][ T7035] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 325.523595][ T7035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.533182][ T7035] vhci_hcd vhci_hcd.0: Device attached [ 325.568043][ T7035] capability: warning: `syz.1.312' uses deprecated v2 capabilities in a way that may be insecure [ 325.587129][ T7036] vhci_hcd: connection closed [ 325.589145][ T1110] vhci_hcd: stop threads [ 325.602288][ T1110] vhci_hcd: release socket [ 325.606930][ T1110] vhci_hcd: disconnect device [ 325.760368][ T7039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.313'. [ 325.825136][ T7039] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 326.345430][ T7048] bridge_slave_0: left allmulticast mode [ 326.363080][ T7048] bridge_slave_0: left promiscuous mode [ 326.371723][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.624444][ T7048] bridge_slave_1: left allmulticast mode [ 327.630272][ T7048] bridge_slave_1: left promiscuous mode [ 327.675296][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.776429][ T7048] bond0: (slave bond_slave_0): Releasing backup interface [ 327.914501][ T7048] bond0: (slave bond_slave_1): Releasing backup interface [ 328.112719][ T7048] team0: Port device team_slave_0 removed [ 328.197251][ T7048] team0: Port device team_slave_1 removed [ 328.247772][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.283967][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.325567][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.336730][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.442447][ T7051] bridge0: port 1(team0) entered blocking state [ 328.449447][ T7051] bridge0: port 1(team0) entered disabled state [ 328.496155][ T7051] team0: entered allmulticast mode [ 328.525930][ T7051] team0: entered promiscuous mode [ 328.556618][ T7057] vivid-007: disconnect [ 328.577196][ T7059] loop0: detected capacity change from 0 to 256 [ 328.585515][ T7051] bridge0: port 1(team0) entered blocking state [ 328.593103][ T7051] bridge0: port 1(team0) entered forwarding state [ 328.635137][ T7059] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 328.796909][ T7059] syz.0.321: attempt to access beyond end of device [ 328.796909][ T7059] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 328.812705][ T7059] syz.0.321: attempt to access beyond end of device [ 328.812705][ T7059] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 328.827360][ T7059] syz.0.321: attempt to access beyond end of device [ 328.827360][ T7059] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 328.860082][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 328.860097][ T28] audit: type=1800 audit(1773761251.728:67): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 328.889793][ T361] bridge0: port 1(team0) entered disabled state [ 329.323121][ T7055] vivid-007: reconnect [ 329.970137][ T7067] 9pnet_fd: Insufficient options for proto=fd [ 331.187252][ T7073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 331.194240][ T7073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.202705][ T7073] vhci_hcd vhci_hcd.0: Device attached [ 331.277263][ T7075] vhci_hcd: connection closed [ 331.289786][ T1099] vhci_hcd: stop threads [ 331.385101][ T1099] vhci_hcd: release socket [ 331.393310][ T1099] vhci_hcd: disconnect device [ 331.432321][ T5845] vhci_hcd: vhci_device speed not set [ 334.959541][ T7095] vivid-007: disconnect [ 335.711633][ T7091] vivid-007: reconnect [ 337.123215][ T7107] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 337.130905][ T7107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 337.140362][ T7107] vhci_hcd vhci_hcd.0: Device attached [ 338.371363][ T7110] vhci_hcd: connection closed [ 338.375199][ T1110] vhci_hcd: stop threads [ 338.388522][ T1110] vhci_hcd: release socket [ 338.394017][ T1110] vhci_hcd: disconnect device [ 338.441786][ T967] vhci_hcd: vhci_device speed not set [ 339.377574][ T7100] 9pnet_fd: Insufficient options for proto=fd [ 339.929565][ T7124] loop2: detected capacity change from 0 to 512 [ 340.023342][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.114584][ T7124] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.787492][ T7130] input: syz0 as /devices/virtual/input/input29 [ 341.303660][ T7135] loop3: detected capacity change from 0 to 2048 [ 341.311471][ T7135] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 341.682172][ T7127] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 341.765178][ T7129] loop3: detected capacity change from 0 to 128 [ 344.089137][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.477020][ T7153] vivid-007: disconnect [ 346.818523][ T7156] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 346.825444][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 346.833737][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 346.902197][ T7161] Cannot find add_set index 0 as target [ 347.233720][ T7151] vivid-007: reconnect [ 347.655417][ T7159] vhci_hcd: connection closed [ 347.665923][ T6941] vhci_hcd: stop threads [ 347.697859][ T6941] vhci_hcd: release socket [ 347.704051][ T6941] vhci_hcd: disconnect device [ 348.581923][ T7163] 9pnet_fd: Insufficient options for proto=fd [ 348.679699][ T5869] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 348.743080][ T5869] usb 37-1: enqueue for inactive port 0 [ 348.859018][ T5869] vhci_hcd: vhci_device speed not set [ 351.105182][ T7167] 9pnet_fd: Insufficient options for proto=fd [ 351.362184][ T7178] loop2: detected capacity change from 0 to 512 [ 351.438134][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.511497][ T7178] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.761604][ T7188] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 352.777577][ T7188] Quota error (device loop2): write_blk: dquota write failed [ 352.785960][ T7188] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 352.797006][ T7188] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.352: Failed to acquire dquot type 0 [ 353.160947][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.373555][ T7191] loop0: detected capacity change from 0 to 256 [ 353.461915][ T7191] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 353.634323][ T7197] vivid-007: disconnect [ 354.370451][ T7193] vivid-007: reconnect [ 355.440661][ T7200] 9pnet_fd: Insufficient options for proto=fd [ 358.042107][ T7211] 9pnet_fd: Insufficient options for proto=fd [ 358.240776][ T7218] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 358.247360][ T7218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.255471][ T7218] vhci_hcd vhci_hcd.0: Device attached [ 358.304397][ T7224] loop1: detected capacity change from 0 to 512 [ 358.317902][ T7219] vhci_hcd: connection closed [ 358.318279][ T6436] vhci_hcd: stop threads [ 358.351658][ T6436] vhci_hcd: release socket [ 358.357943][ T6436] vhci_hcd: disconnect device [ 358.398421][ T7224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.427813][ T7224] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.038148][ T7229] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 359.053826][ T7229] Quota error (device loop1): write_blk: dquota write failed [ 359.062281][ T7229] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 359.073243][ T7229] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.362: Failed to acquire dquot type 0 [ 359.477087][ T7235] vivid-007: disconnect [ 360.140964][ T7230] vivid-007: reconnect [ 360.447401][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.325659][ T7245] loop2: detected capacity change from 0 to 256 [ 361.436828][ T7245] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 362.394620][ T7252] loop3: detected capacity change from 0 to 2048 [ 362.410657][ T7252] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 363.497179][ T7258] syz.2.369: attempt to access beyond end of device [ 363.497179][ T7258] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 363.897241][ T7258] syz.2.369: attempt to access beyond end of device [ 363.897241][ T7258] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 364.122473][ T7258] syz.2.369: attempt to access beyond end of device [ 364.122473][ T7258] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 364.371913][ T28] audit: type=1800 audit(1773761287.248:68): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.369" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 365.044132][ T7263] 9pnet_fd: Insufficient options for proto=fd [ 366.025049][ T7266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 366.032626][ T7266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.043729][ T7266] vhci_hcd vhci_hcd.0: Device attached [ 366.115451][ T7267] vhci_hcd: connection closed [ 366.118084][ T1076] vhci_hcd: stop threads [ 366.181498][ T1076] vhci_hcd: release socket [ 366.189439][ T1076] vhci_hcd: disconnect device [ 366.261369][ T5836] vhci_hcd: vhci_device speed not set [ 366.755509][ T7280] vivid-007: disconnect [ 367.488331][ T7274] vivid-007: reconnect [ 370.571598][ T7293] x_tables: unsorted underflow at hook 3 [ 370.871979][ T7293] input: syz0 as /devices/virtual/input/input31 [ 371.277244][ T7297] loop0: detected capacity change from 0 to 2048 [ 371.284943][ T7297] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 371.491043][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 371.747234][ T7301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.382'. [ 373.045363][ T7311] 9pnet_fd: Insufficient options for proto=fd [ 376.581570][ T7332] vivid-007: disconnect [ 377.292634][ T7326] vivid-007: reconnect [ 378.011764][ T7333] x_tables: unsorted underflow at hook 3 [ 378.312068][ T7333] input: syz0 as /devices/virtual/input/input32 [ 378.759744][ T7337] loop2: detected capacity change from 0 to 2048 [ 378.767440][ T7337] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 379.099607][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.206729][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.701113][ T7353] loop3: detected capacity change from 0 to 1024 [ 387.061702][ T7382] x_tables: unsorted underflow at hook 3 [ 387.372072][ T7382] input: syz0 as /devices/virtual/input/input33 [ 387.816380][ T7386] loop2: detected capacity change from 0 to 2048 [ 387.823902][ T7386] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 387.888753][ T7381] loop1: detected capacity change from 0 to 256 [ 387.965505][ T7381] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 389.939774][ T5772] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 390.053009][ T7393] syz.1.400: attempt to access beyond end of device [ 390.053009][ T7393] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 390.073769][ T7393] syz.1.400: attempt to access beyond end of device [ 390.073769][ T7393] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 390.090126][ T7393] syz.1.400: attempt to access beyond end of device [ 390.090126][ T7393] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 390.109714][ T28] audit: type=1800 audit(1773761312.988:69): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.400" name="file1" dev="loop1" ino=1048599 res=0 errno=0 [ 391.975279][ T7405] input: syz0 as /devices/virtual/input/input34 [ 392.443458][ T7410] loop0: detected capacity change from 0 to 2048 [ 392.459952][ T7410] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 393.497352][ T7411] 9pnet_fd: Insufficient options for proto=fd [ 398.794349][ T7434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 400.177050][ T7443] input: syz0 as /devices/virtual/input/input35 [ 400.518254][ T7447] loop3: detected capacity change from 0 to 2048 [ 400.541519][ T7447] UDF-fs: bad mount option "0xffffffffffffffffÿÿ" or missing value [ 401.184794][ T7442] loop3: detected capacity change from 0 to 128 [ 403.178559][ T7454] 9pnet_fd: Insufficient options for proto=fd [ 408.101865][ T7470] loop3: detected capacity change from 0 to 256 [ 408.219908][ T7470] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 408.719283][ T7475] syz.3.414: attempt to access beyond end of device [ 408.719283][ T7475] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 409.229880][ T7475] syz.3.414: attempt to access beyond end of device [ 409.229880][ T7475] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 409.266878][ T7475] syz.3.414: attempt to access beyond end of device [ 409.266878][ T7475] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 409.407354][ T28] audit: type=1800 audit(1773761332.248:70): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.414" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 410.390001][ T7483] input: syz0 as /devices/virtual/input/input36 [ 410.913802][ T7488] loop2: detected capacity change from 0 to 2048 [ 410.921570][ T7488] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 411.333803][ T7482] loop2: detected capacity change from 0 to 128 [ 412.707938][ T7495] input: syz0 as /devices/virtual/input/input37 [ 413.103365][ T7494] loop0: detected capacity change from 0 to 2048 [ 413.110523][ T7494] UDF-fs: bad mount option "0xffffffffffffffffÿÿ" or missing value [ 413.370602][ T7494] loop0: detected capacity change from 0 to 128 [ 419.797513][ T7536] input: syz0 as /devices/virtual/input/input38 [ 420.140486][ T7540] loop2: detected capacity change from 0 to 2048 [ 420.154037][ T7540] UDF-fs: bad mount option "0xffffffffffffffffÿÿ" or missing value [ 420.713711][ T7535] loop2: detected capacity change from 0 to 128 [ 424.386526][ T7558] x_tables: unsorted underflow at hook 3 [ 424.401453][ T7558] input: syz0 as /devices/virtual/input/input39 [ 424.644141][ T7562] loop3: detected capacity change from 0 to 2048 [ 424.654366][ T7562] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 426.008377][ T7574] loop2: detected capacity change from 0 to 512 [ 426.936010][ T7575] input: syz0 as /devices/virtual/input/input40 [ 426.959804][ T7575] loop1: detected capacity change from 0 to 2048 [ 426.967136][ T7575] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 427.091997][ T5786] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.146187][ T7570] loop1: detected capacity change from 0 to 128 [ 427.160707][ T7574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.291499][ T7574] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.884925][ T7584] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 427.900484][ T7584] Quota error (device loop2): write_blk: dquota write failed [ 427.908512][ T7584] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 427.919452][ T7584] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.436: Failed to acquire dquot type 0 [ 428.102374][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.966205][ T7605] 9pnet_fd: Insufficient options for proto=fd [ 434.679153][ T7609] x_tables: unsorted underflow at hook 3 [ 434.692376][ T7609] input: syz0 as /devices/virtual/input/input41 [ 434.789500][ T7609] loop0: detected capacity change from 0 to 2048 [ 434.800072][ T7609] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 436.081266][ T7613] 9pnet_fd: Insufficient options for proto=fd [ 440.002353][ T7628] x_tables: unsorted underflow at hook 3 [ 440.029651][ T7628] input: syz0 as /devices/virtual/input/input42 [ 440.535018][ T7633] loop1: detected capacity change from 0 to 2048 [ 440.542573][ T7633] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 440.930682][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.937764][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.013824][ T7627] loop1: detected capacity change from 0 to 128 [ 441.833616][ T7642] input: syz0 as /devices/virtual/input/input43 [ 442.176049][ T7646] loop2: detected capacity change from 0 to 2048 [ 442.189004][ T7646] UDF-fs: bad mount option "0x0000000000000006" or missing value [ 442.827756][ T7641] loop2: detected capacity change from 0 to 128 [ 443.849163][ T7655] 9pnet_fd: Insufficient options for proto=fd [ 444.823626][ T7658] loop0: detected capacity change from 0 to 512 [ 444.915288][ T7658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.016279][ T7658] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.468245][ T7663] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 445.485155][ T7663] Quota error (device loop0): write_blk: dquota write failed [ 445.493005][ T7663] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 445.503596][ T7663] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.464: Failed to acquire dquot type 0 [ 445.969713][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.780908][ T7690] 9pnet_fd: Insufficient options for proto=fd [ 452.263711][ T7698] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 452.270399][ T7698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 452.278840][ T7698] vhci_hcd vhci_hcd.0: Device attached [ 452.581876][ T967] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 453.051751][ T7699] vhci_hcd: connection reset by peer [ 453.176822][ T6436] vhci_hcd: stop threads [ 453.236771][ T6436] vhci_hcd: release socket [ 453.302944][ T6436] vhci_hcd: disconnect device [ 456.398047][ T7720] 9pnet_fd: Insufficient options for proto=fd [ 457.890305][ T7722] 9pnet_fd: Insufficient options for proto=fd [ 458.909493][ T967] vhci_hcd: vhci_device speed not set [ 459.012666][ T7726] Cannot find add_set index 0 as target [ 459.765953][ T7729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 459.772726][ T7729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.799802][ T7729] vhci_hcd vhci_hcd.0: Device attached [ 460.295809][ T5836] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 460.525320][ T7730] vhci_hcd: connection reset by peer [ 460.622792][ T1146] vhci_hcd: stop threads [ 460.696656][ T1146] vhci_hcd: release socket [ 460.783871][ T1146] vhci_hcd: disconnect device [ 464.327438][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 464.364337][ T7747] bond0: Unable to set up delay as MII monitoring is disabled [ 465.491456][ T5836] vhci_hcd: vhci_device speed not set [ 466.976089][ T7762] 9pnet_fd: Insufficient options for proto=fd [ 472.972205][ T7791] 9pnet_fd: Insufficient options for proto=fd [ 474.863404][ T7803] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 474.870175][ T7803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 474.879103][ T7803] vhci_hcd vhci_hcd.0: Device attached [ 476.157972][ T7804] vhci_hcd: connection closed [ 476.164583][ T1088] vhci_hcd: stop threads [ 476.225691][ T1088] vhci_hcd: release socket [ 476.230681][ T1088] vhci_hcd: disconnect device [ 476.776922][ T7808] 9pnet_fd: Insufficient options for proto=fd [ 477.992311][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 479.791601][ T7824] 9pnet_fd: Insufficient options for proto=fd [ 481.977454][ T7834] loop1: detected capacity change from 0 to 512 [ 482.394693][ T7834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.461366][ T7834] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.703421][ T7843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.515'. [ 482.713129][ T7839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 483.297928][ T7847] 9pnet_fd: Insufficient options for proto=fd [ 484.279027][ T7846] Quota error (device loop1): write_blk: dquota write failed [ 484.287099][ T7846] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 484.298339][ T7846] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.506: Failed to acquire dquot type 0 [ 484.459098][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.796592][ T7870] 9pnet_fd: Insufficient options for proto=fd [ 486.974437][ T7878] loop3: detected capacity change from 0 to 512 [ 487.132826][ T7878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.192165][ T7878] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.449945][ T7884] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 487.465886][ T7884] Quota error (device loop3): write_blk: dquota write failed [ 487.475152][ T7884] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 487.485666][ T7884] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.526: Failed to acquire dquot type 0 [ 487.666201][ T7890] loop2: detected capacity change from 0 to 128 [ 487.693413][ T7888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.528'. [ 487.841059][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.892135][ T7890] loop2: detected capacity change from 128 to 0 [ 487.973274][ T7891] syz.2.529: attempt to access beyond end of device [ 487.973274][ T7891] loop2: rw=2049, sector=0, nr_sectors = 4 limit=0 [ 488.012280][ T7891] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 489.228329][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'. [ 490.287404][ T7922] tmpfs: Too small a size for current use [ 490.565217][ T7925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.539'. [ 491.761728][ T7928] x_tables: unsorted underflow at hook 3 [ 492.021598][ T7928] input: syz0 as /devices/virtual/input/input44 [ 492.067397][ T7928] loop3: detected capacity change from 0 to 2048 [ 492.076497][ T7928] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 492.217768][ T5786] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.645684][ T7971] netlink: 44 bytes leftover after parsing attributes in process `syz.2.552'. [ 500.343107][ T7992] 9pnet_fd: Insufficient options for proto=fd [ 502.631700][ T7995] x_tables: unsorted underflow at hook 3 [ 502.883422][ T7995] input: syz0 as /devices/virtual/input/input45 [ 502.910757][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.916038][ T7995] loop0: detected capacity change from 0 to 2048 [ 502.921624][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.925343][ T7995] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 503.127663][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 503.440915][ T8004] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 503.447867][ T8004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 503.457344][ T8004] vhci_hcd vhci_hcd.0: Device attached [ 504.702809][ T8005] vhci_hcd: connection closed [ 504.739603][ T1110] vhci_hcd: stop threads [ 504.771176][ T1110] vhci_hcd: release socket [ 504.811200][ T1110] vhci_hcd: disconnect device [ 504.852858][ T5773] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 507.580169][ T8032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.563'. [ 508.341255][ T8038] 9pnet_fd: Insufficient options for proto=fd [ 509.961292][ T5773] vhci_hcd: vhci_device speed not set [ 514.159776][ T8076] can: request_module (can-proto-3) failed. [ 514.917865][ T8081] 9pnet_fd: Insufficient options for proto=fd [ 518.212978][ T8090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 518.220110][ T8090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 518.228155][ T8090] vhci_hcd vhci_hcd.0: Device attached [ 518.821370][ T5836] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 518.969140][ T8091] vhci_hcd: connection reset by peer [ 519.062663][ T1066] vhci_hcd: stop threads [ 519.125642][ T1066] vhci_hcd: release socket [ 519.185833][ T1066] vhci_hcd: disconnect device [ 521.274462][ T8118] 9pnet_fd: Insufficient options for proto=fd [ 522.248913][ T8117] bond_slave_0: entered promiscuous mode [ 522.255253][ T8117] bond_slave_1: entered promiscuous mode [ 522.292585][ T8117] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 522.307398][ T8117] team0: Port device macvlan2 added [ 522.752611][ T8128] Cannot find add_set index 0 as target [ 523.784106][ T8131] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 523.791049][ T8131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.799485][ T8131] vhci_hcd vhci_hcd.0: Device attached [ 524.041296][ T5836] vhci_hcd: vhci_device speed not set [ 524.252119][ T5773] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 524.260018][ T8132] vhci_hcd: connection closed [ 524.295820][ T1099] vhci_hcd: stop threads [ 524.404957][ T1099] vhci_hcd: release socket [ 524.485663][ T1099] vhci_hcd: disconnect device [ 524.884451][ T28] audit: type=1326 audit(1773761447.748:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf9c799 code=0x7ffc0000 [ 524.907536][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.051630][ T28] audit: type=1326 audit(1773761447.748:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf9c799 code=0x7ffc0000 [ 525.131191][ T28] audit: type=1326 audit(1773761447.758:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96fcf9c799 code=0x7ffc0000 [ 525.181641][ T28] audit: type=1326 audit(1773761447.758:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf9c799 code=0x7ffc0000 [ 525.241191][ T28] audit: type=1326 audit(1773761447.758:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf9c799 code=0x7ffc0000 [ 525.391176][ T28] audit: type=1326 audit(1773761447.768:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f96fcf9c799 code=0x7ffc0000 [ 527.141245][ T8135] x_tables: unsorted underflow at hook 3 [ 527.251314][ T8135] input: syz0 as /devices/virtual/input/input46 [ 527.321799][ T8142] loop1: detected capacity change from 0 to 2048 [ 527.329034][ T8142] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 529.478583][ T5773] vhci_hcd: vhci_device speed not set [ 530.305151][ T8189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 530.311921][ T8189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.322095][ T8189] vhci_hcd vhci_hcd.0: Device attached [ 531.183661][ T8190] vhci_hcd: connection closed [ 531.238346][ T1066] vhci_hcd: stop threads [ 531.327305][ T1066] vhci_hcd: release socket [ 531.374080][ T1066] vhci_hcd: disconnect device [ 532.147349][ T8196] x_tables: unsorted underflow at hook 3 [ 532.178263][ T8196] input: syz0 as /devices/virtual/input/input47 [ 534.276741][ T8211] loop2: detected capacity change from 0 to 2048 [ 534.362700][ T8211] UDF-fs: bad mount option "0xffffffffffffffffÿÿ" or missing value [ 544.320082][ T8301] overlayfs: upper fs does not support file handles, falling back to index=off. [ 551.100179][ T8370] 9pnet_fd: Insufficient options for proto=fd [ 552.550573][ T8379] x_tables: ip_tables: osf match: only valid for protocol 6 [ 556.058928][ T8393] 9pnet_fd: Insufficient options for proto=fd [ 561.878270][ T8429] 9pnet_fd: Insufficient options for proto=fd [ 563.431645][ T8437] x_tables: unsorted underflow at hook 3 [ 563.463010][ T8437] input: syz0 as /devices/virtual/input/input48 [ 563.639854][ T8442] loop1: detected capacity change from 0 to 2048 [ 563.647512][ T8442] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 564.117875][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.131499][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.421986][ T8446] cgroup: Bad value for 'name' [ 565.210351][ T8451] 9pnet_fd: Insufficient options for proto=fd [ 567.395192][ T8465] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 567.755698][ T8473] x_tables: unsorted underflow at hook 3 [ 567.806818][ T8473] input: syz0 as /devices/virtual/input/input49 [ 568.874638][ T8472] loop1: detected capacity change from 0 to 2048 [ 568.882429][ T8472] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 569.317934][ T8485] Zero length message leads to an empty skb [ 573.007482][ T8515] x_tables: unsorted underflow at hook 3 [ 573.015260][ T8515] input: syz0 as /devices/virtual/input/input50 [ 573.186574][ T8521] loop2: detected capacity change from 0 to 2048 [ 573.194092][ T8521] UDF-fs: bad mount option "0x0000000000000007" or missing value [ 574.331842][ T8522] 9pnet_fd: Insufficient options for proto=fd [ 575.285649][ T5786] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 584.797178][ T8572] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 584.804412][ T8572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.813190][ T8572] vhci_hcd vhci_hcd.0: Device attached [ 585.152706][ T5773] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 585.309076][ T8573] vhci_hcd: connection reset by peer [ 585.410523][ T1066] vhci_hcd: stop threads [ 585.463029][ T1066] vhci_hcd: release socket [ 585.538798][ T1066] vhci_hcd: disconnect device [ 587.257139][ T8603] Cannot find add_set index 0 as target [ 587.640728][ T8611] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 587.647597][ T8611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 587.656629][ T8611] vhci_hcd vhci_hcd.0: Device attached [ 587.961293][ T5869] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 588.902514][ T8612] vhci_hcd: connection reset by peer [ 588.964540][ T12] vhci_hcd: stop threads [ 588.992540][ T12] vhci_hcd: release socket [ 588.997260][ T12] vhci_hcd: disconnect device [ 591.281219][ T5773] vhci_hcd: vhci_device speed not set [ 593.188974][ T5869] vhci_hcd: vhci_device speed not set [ 594.804511][ T8703] tmpfs: Too few inodes for current use [ 595.131717][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 595.174853][ T8707] syzkaller0: entered promiscuous mode [ 595.180632][ T8707] syzkaller0: entered allmulticast mode [ 596.603823][ T8721] loop2: detected capacity change from 0 to 256 [ 596.676052][ T8721] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 597.347537][ T8732] tmpfs: Too few inodes for current use [ 597.563546][ T8733] syz.2.756: attempt to access beyond end of device [ 597.563546][ T8733] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 597.582605][ T8733] syz.2.756: attempt to access beyond end of device [ 597.582605][ T8733] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 597.597915][ T8733] syz.2.756: attempt to access beyond end of device [ 597.597915][ T8733] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 597.617669][ T28] audit: type=1800 audit(1773761520.498:77): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.756" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 597.749699][ T8737] Cannot find add_set index 0 as target [ 599.557762][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 600.044537][ T8759] tmpfs: Too few inodes for current use [ 600.235414][ T8765] loop0: detected capacity change from 0 to 512 [ 600.372151][ T8765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.391591][ T8765] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.552510][ T8781] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 601.567442][ T8781] Quota error (device loop0): write_blk: dquota write failed [ 601.575145][ T8781] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 601.585315][ T8781] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.770: Failed to acquire dquot type 0 [ 601.615962][ T8782] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 601.623011][ T8782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.631729][ T8782] vhci_hcd vhci_hcd.0: Device attached [ 601.826740][ T8783] vhci_hcd: connection closed [ 601.827499][ T8661] vhci_hcd: stop threads [ 601.887064][ T8661] vhci_hcd: release socket [ 601.939395][ T8661] vhci_hcd: disconnect device [ 601.952132][ T27] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 602.372801][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.789746][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 602.937596][ T8796] Cannot find add_set index 0 as target [ 602.938680][ T8795] tmpfs: Too few inodes for current use [ 603.732596][ T8806] loop2: detected capacity change from 0 to 512 [ 603.894030][ T8806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.922741][ T8812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 603.930407][ T8812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 603.957760][ T8812] vhci_hcd vhci_hcd.0: Device attached [ 604.125768][ T8806] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.282580][ T1622] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 604.577929][ T8771] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 605.414382][ T8813] vhci_hcd: connection reset by peer [ 605.542999][ T1076] vhci_hcd: stop threads [ 605.564994][ T8816] Quota error (device loop2): write_blk: dquota write failed [ 605.572861][ T8816] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 605.583292][ T8816] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.784: Failed to acquire dquot type 0 [ 605.590679][ T1076] vhci_hcd: release socket [ 605.680322][ T1076] vhci_hcd: disconnect device [ 606.104886][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.580374][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 607.071236][ T27] vhci_hcd: vhci_device speed not set [ 609.474979][ T1622] vhci_hcd: vhci_device speed not set [ 609.736400][ T8830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.964323][ T8846] loop2: detected capacity change from 0 to 512 [ 611.498932][ T8846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.541584][ T8846] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.973059][ T8864] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 611.992365][ T8864] Quota error (device loop2): write_blk: dquota write failed [ 612.000944][ T8864] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 612.011507][ T8864] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.795: Failed to acquire dquot type 0 [ 613.427202][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.617505][ T8879] Cannot find add_set index 0 as target [ 614.365623][ T8887] warning: `syz.1.808' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 615.263991][ T8897] loop2: detected capacity change from 0 to 512 [ 615.329832][ T8897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.355972][ T8897] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.769698][ T8911] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 615.786584][ T8911] Quota error (device loop2): write_blk: dquota write failed [ 615.795089][ T8911] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 615.805800][ T8911] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.811: Failed to acquire dquot type 0 [ 616.455638][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.463391][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.591219][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.726180][ T8892] bond_slave_0: left promiscuous mode [ 616.734153][ T8892] bond_slave_1: left promiscuous mode [ 617.330191][ T8925] Cannot find add_set index 0 as target [ 620.978788][ T8936] 9pnet_fd: Insufficient options for proto=fd [ 622.120188][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.192214][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.936893][ T8892] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.961152][ T8892] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.970403][ T8892] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.979834][ T8892] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.070228][ T8953] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 624.077355][ T8953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 624.085339][ T8953] vhci_hcd vhci_hcd.0: Device attached [ 624.239698][ T8954] vhci_hcd: connection closed [ 624.267451][ T11] vhci_hcd: stop threads [ 624.420947][ T11] vhci_hcd: release socket [ 624.499196][ T11] vhci_hcd: disconnect device [ 624.949094][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.970969][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.090400][ T8892] syz.3.810 (8892) used greatest stack depth: 19944 bytes left [ 625.476154][ T8977] loop3: detected capacity change from 0 to 512 [ 625.513909][ T8977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.535110][ T8977] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.668154][ T8985] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 626.683827][ T8985] Quota error (device loop3): write_blk: dquota write failed [ 626.691382][ T8985] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 626.702024][ T8985] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.838: Failed to acquire dquot type 0 [ 626.738917][ T8984] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 626.745499][ T8984] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.753604][ T8984] vhci_hcd vhci_hcd.0: Device attached [ 626.962764][ T8986] vhci_hcd: connection closed [ 626.971511][ T8659] vhci_hcd: stop threads [ 626.980817][ T8659] vhci_hcd: release socket [ 626.989246][ T8659] vhci_hcd: disconnect device [ 627.031270][ T5836] vhci_hcd: vhci_device speed not set [ 627.066696][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.070618][ T8991] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 629.859201][ T9014] loop1: detected capacity change from 0 to 512 [ 629.933080][ T9014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.946904][ T9014] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.291869][ T9024] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 630.308962][ T9024] Quota error (device loop1): write_blk: dquota write failed [ 630.318884][ T9024] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 630.329963][ T9024] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.848: Failed to acquire dquot type 0 [ 630.854865][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.331306][ T9033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 631.338014][ T9033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 631.346886][ T9033] vhci_hcd vhci_hcd.0: Device attached [ 632.472607][ T9034] vhci_hcd: connection closed [ 632.482566][ T8661] vhci_hcd: stop threads [ 632.532174][ T8661] vhci_hcd: release socket [ 632.690512][ T8661] vhci_hcd: disconnect device [ 632.741263][ T5836] vhci_hcd: vhci_device speed not set [ 636.635182][ T9089] syzkaller0: entered promiscuous mode [ 636.651724][ T9089] syzkaller0: entered allmulticast mode [ 636.749105][ T9092] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 636.756161][ T9092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 636.764370][ T9092] vhci_hcd vhci_hcd.0: Device attached [ 637.154063][ T5836] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 637.495772][ T9093] vhci_hcd: connection reset by peer [ 637.552871][ T8668] vhci_hcd: stop threads [ 637.609572][ T8668] vhci_hcd: release socket [ 637.671567][ T8668] vhci_hcd: disconnect device [ 641.487014][ T9120] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 641.493884][ T9120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 641.502342][ T9120] vhci_hcd vhci_hcd.0: Device attached [ 641.902700][ T8698] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 642.312682][ T9121] vhci_hcd: connection reset by peer [ 642.420455][ T49] vhci_hcd: stop threads [ 642.451543][ T5836] vhci_hcd: vhci_device speed not set [ 642.496056][ T49] vhci_hcd: release socket [ 642.600092][ T49] vhci_hcd: disconnect device [ 643.852813][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.863278][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.919641][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.381265][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 645.395299][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 645.411231][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 646.631112][ T9140] 9pnet: Could not find request transport: f [ 647.171530][ T8698] vhci_hcd: vhci_device speed not set [ 647.487597][ T5084] Bluetooth: hci4: command tx timeout [ 647.726455][ T8666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.906570][ T8666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.530086][ T8666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.008614][ T8666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.166379][ T9131] chnl_net:caif_netlink_parms(): no params data found [ 649.308973][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.889'. [ 650.843053][ T5084] Bluetooth: hci4: command tx timeout [ 651.105657][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.220284][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.328541][ T9131] bridge_slave_0: entered allmulticast mode [ 651.484421][ T9131] bridge_slave_0: entered promiscuous mode [ 651.865571][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.881300][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.889279][ T9131] bridge_slave_1: entered allmulticast mode [ 651.900444][ T9131] bridge_slave_1: entered promiscuous mode [ 653.319148][ T5778] Bluetooth: hci4: command tx timeout [ 653.514156][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.564642][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.016223][ T9131] team0: Port device team_slave_0 added [ 654.065668][ T9131] team0: Port device team_slave_1 added [ 654.287670][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.311249][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.381313][ T9131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.443544][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.450745][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.546940][ T9131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.615461][ T9191] bond0: entered promiscuous mode [ 654.650812][ T9191] batadv0: entered promiscuous mode [ 654.676231][ T9191] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 654.701760][ T9191] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 655.759788][ T9205] 9pnet: Could not find request transport: f [ 656.275133][ T5778] Bluetooth: hci4: command tx timeout [ 656.478441][ T9131] hsr_slave_0: entered promiscuous mode [ 656.536707][ T9131] hsr_slave_1: entered promiscuous mode [ 656.557790][ T9131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.581257][ T9131] Cannot create hsr debugfs directory [ 659.663799][ T9213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.928516][ T8666] hsr_slave_0: left promiscuous mode [ 659.949709][ T8666] hsr_slave_1: left promiscuous mode [ 661.071098][ T9241] 9pnet: Could not find request transport: f [ 661.441379][ T8666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.456312][ T8666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.489602][ T8666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.511197][ T8666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.533200][ T8666] bridge_slave_1: left allmulticast mode [ 661.539229][ T8666] bridge_slave_1: left promiscuous mode [ 661.563643][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.632568][ T8666] bridge_slave_0: left allmulticast mode [ 661.638479][ T8666] bridge_slave_0: left promiscuous mode [ 661.673565][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.734033][ T8666] veth1_macvtap: left promiscuous mode [ 661.740288][ T8666] veth0_macvtap: left promiscuous mode [ 661.765330][ T8666] veth1_vlan: left promiscuous mode [ 661.781837][ T8666] veth0_vlan: left promiscuous mode [ 664.190198][ T8666] team0 (unregistering): Port device team_slave_1 removed [ 664.268002][ T8666] veth1_to_team (unregistering): left allmulticast mode [ 664.310088][ T8666] team0 (unregistering): Port device team_slave_0 removed [ 664.366194][ T8666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.429091][ T8666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.875660][ T8666] bond0 (unregistering): Released all slaves [ 664.998368][ T9131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 665.013843][ T9248] bond0: entered promiscuous mode [ 665.019073][ T9248] bond_slave_0: entered promiscuous mode [ 665.025453][ T9248] bond_slave_1: entered promiscuous mode [ 665.034148][ T9248] bond0: left promiscuous mode [ 665.039394][ T9248] bond_slave_0: left promiscuous mode [ 665.045173][ T9248] bond_slave_1: left promiscuous mode [ 665.111836][ T9267] tipc: Started in network mode [ 665.117252][ T9267] tipc: Node identity 565097d07408, cluster identity 4711 [ 665.137649][ T9267] tipc: Enabled bearer , priority 0 [ 665.159820][ T9279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.911'. [ 665.178848][ T9271] tipc: Resetting bearer [ 665.234734][ T9281] syzkaller0: entered promiscuous mode [ 665.240495][ T9281] syzkaller0: entered allmulticast mode [ 665.251267][ T9131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 665.270845][ T9131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 667.678315][ T9271] tipc: Disabling bearer [ 667.687911][ T9131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 667.698566][ T27] tipc: Node number set to 576231376 [ 668.177078][ T9295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.452268][ T8666] IPVS: stop unused estimator thread 0... [ 668.475101][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.600540][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.690955][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.698739][ T8656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.743609][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.751514][ T8656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.577049][ T9320] bond0: entered promiscuous mode [ 669.614388][ T9320] bond_slave_0: entered promiscuous mode [ 669.629414][ T9320] bond_slave_1: entered promiscuous mode [ 669.712748][ T9320] batadv0: entered promiscuous mode [ 669.739512][ T9320] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 669.778069][ T9320] Cannot create hsr debugfs directory [ 669.801897][ T9320] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 670.027380][ T9322] syzkaller0: entered promiscuous mode [ 670.076645][ T9322] syzkaller0: entered allmulticast mode [ 670.193719][ T9344] syzkaller0: entered promiscuous mode [ 670.217428][ T9344] syzkaller0: entered allmulticast mode [ 675.375259][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.203011][ T9362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.774917][ T9131] veth0_vlan: entered promiscuous mode [ 676.819641][ T9131] veth1_vlan: entered promiscuous mode [ 676.892820][ T9131] veth0_macvtap: entered promiscuous mode [ 676.924165][ T9131] veth1_macvtap: entered promiscuous mode [ 676.966728][ T9131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.985902][ T9131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.998182][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.032742][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.072476][ T9131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.092134][ T9131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.100992][ T9131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.141431][ T9131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.297647][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.319224][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.369405][ T8668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.387656][ T8668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.482639][ T8817] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 679.787328][ T9462] netlink: 160 bytes leftover after parsing attributes in process `syz.4.946'. [ 679.972219][ T9467] syzkaller0: entered promiscuous mode [ 679.978045][ T9467] syzkaller0: entered allmulticast mode [ 681.411748][ T9428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.712885][ T9490] tipc: Failed to remove unknown binding: 66,0,0/0:3358626724/3358626725 [ 681.741657][ T9490] tipc: Failed to remove unknown binding: 66,0,0/0:3358626724/3358626725 [ 681.781834][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 681.861644][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 683.651233][ T9518] 9pnet_fd: Insufficient options for proto=fd [ 685.861532][ T9541] block nbd4: not configured, cannot reconfigure [ 686.275041][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.281873][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.536660][ T9562] 9pnet_fd: Insufficient options for proto=fd [ 688.661483][ T9569] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 692.222265][ T9602] 9pnet_fd: Insufficient options for proto=fd [ 698.094003][ T9661] 9pnet_fd: Insufficient options for proto=fd [ 699.370638][ T9671] loop1: detected capacity change from 0 to 512 [ 699.513874][ T9671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.530038][ T9671] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.947692][ T9680] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 699.963902][ T9680] Quota error (device loop1): write_blk: dquota write failed [ 699.972120][ T9680] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 699.983494][ T9680] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.993: Failed to acquire dquot type 0 [ 700.497274][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.342101][ T9687] loop1: detected capacity change from 0 to 256 [ 701.511303][ T9687] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 701.988607][ T9697] syz.1.996: attempt to access beyond end of device [ 701.988607][ T9697] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 702.010554][ T9697] syz.1.996: attempt to access beyond end of device [ 702.010554][ T9697] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 702.025995][ T9697] syz.1.996: attempt to access beyond end of device [ 702.025995][ T9697] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 702.040047][ T28] audit: type=1800 audit(1773761624.918:78): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.996" name="file1" dev="loop1" ino=1048611 res=0 errno=0 [ 704.834541][ T9719] 9pnet_fd: Insufficient options for proto=fd [ 707.469950][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 707.481471][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 707.503792][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 707.512933][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 707.522347][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 707.530442][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 709.291234][ T9773] 9pnet_fd: Insufficient options for proto=fd [ 710.213643][ T5778] Bluetooth: hci0: command tx timeout [ 711.024060][ T9782] 9pnet_fd: Insufficient options for proto=fd [ 711.967309][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 712.140094][ T9778] syzkaller0: entered promiscuous mode [ 712.187591][ T9778] syzkaller0: entered allmulticast mode [ 712.271406][ T5778] Bluetooth: hci0: command tx timeout [ 714.362947][ T5778] Bluetooth: hci0: command tx timeout [ 716.451944][ T5778] Bluetooth: hci0: command tx timeout [ 716.492065][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.499471][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.557039][ T9747] bridge_slave_0: entered allmulticast mode [ 716.589244][ T9747] bridge_slave_0: entered promiscuous mode [ 716.607732][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.619840][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.636385][ T9747] bridge_slave_1: entered allmulticast mode [ 716.649375][ T9747] bridge_slave_1: entered promiscuous mode [ 719.529760][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.644577][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.989512][ T9747] team0: Port device team_slave_0 added [ 720.513457][ T9837] 9pnet_fd: Insufficient options for proto=fd [ 721.472444][ T9747] team0: Port device team_slave_1 added [ 721.646147][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.671340][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.737696][ T9747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.772570][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.790184][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.841138][ T9747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.066917][ T9747] hsr_slave_0: entered promiscuous mode [ 722.091586][ T9747] hsr_slave_1: entered promiscuous mode [ 722.122527][ T9747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.134978][ T9747] Cannot create hsr debugfs directory [ 722.205530][ T9848] syzkaller0: entered promiscuous mode [ 722.211484][ T9848] syzkaller0: entered allmulticast mode [ 723.188760][ T9863] 9pnet_fd: Insufficient options for proto=fd [ 725.841796][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.874957][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.891510][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.918446][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.948635][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 725.958804][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 728.111283][ T5084] Bluetooth: hci2: command tx timeout [ 729.701724][ T9909] 9pnet_fd: Insufficient options for proto=fd [ 730.626255][ T5084] Bluetooth: hci2: command tx timeout [ 730.817988][ T9747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 730.868380][ T9747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 730.896538][ T9747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 731.005121][ T9747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 731.359300][ T9882] chnl_net:caif_netlink_parms(): no params data found [ 731.815483][ T49] hsr_slave_0: left promiscuous mode [ 731.851673][ T49] hsr_slave_1: left promiscuous mode [ 731.862132][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.885305][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.895443][ T49] bridge_slave_1: left allmulticast mode [ 731.905978][ T49] bridge_slave_1: left promiscuous mode [ 731.912659][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.923556][ T49] bridge_slave_0: left allmulticast mode [ 731.929410][ T49] bridge_slave_0: left promiscuous mode [ 731.935992][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.982296][ T49] team0 (unregistering): Port device macvlan2 removed [ 732.672607][ T5084] Bluetooth: hci2: command tx timeout [ 733.149768][ T49] team0 (unregistering): Port device team_slave_1 removed [ 733.184026][ T49] veth1_to_team (unregistering): left allmulticast mode [ 733.216207][ T49] team0 (unregistering): Port device team_slave_0 removed [ 733.277529][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.338735][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.776318][ T49] bond0 (unregistering): Released all slaves [ 733.981749][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.989043][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.033135][ T9882] bridge_slave_0: entered allmulticast mode [ 734.040893][ T9882] bridge_slave_0: entered promiscuous mode [ 734.058988][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.066944][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.077920][ T9882] bridge_slave_1: entered allmulticast mode [ 734.101637][ T9882] bridge_slave_1: entered promiscuous mode [ 734.663201][ T9952] 9pnet_fd: Insufficient options for proto=fd [ 735.581204][ T5084] Bluetooth: hci2: command tx timeout [ 735.695873][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.093829][ T9882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.137808][ T9747] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.170089][ T9882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.281606][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.288925][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.379569][ T9882] team0: Port device team_slave_0 added [ 736.399540][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.407175][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.441642][ T9882] team0: Port device team_slave_1 added [ 736.490025][ T49] IPVS: stop unused estimator thread 0... [ 736.580354][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.621535][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.701139][ T9882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.733599][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.740885][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.811512][ T9882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.008151][ T9882] hsr_slave_0: entered promiscuous mode [ 737.044463][ T9882] hsr_slave_1: entered promiscuous mode [ 737.052207][ T9882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.060209][ T9882] Cannot create hsr debugfs directory [ 737.866369][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.571878][ T9996] 9pnet_fd: Insufficient options for proto=fd [ 739.600752][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.689770][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.822505][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.939090][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.266481][ T9882] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 740.346563][ T9882] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 740.377018][ T9882] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 740.435493][ T49] tipc: Left network mode [ 740.450552][ T9882] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 741.386142][ T9882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.404598][ T9747] veth0_vlan: entered promiscuous mode [ 741.925961][ T9747] veth1_vlan: entered promiscuous mode [ 742.123271][ T9882] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.227720][ T9747] veth0_macvtap: entered promiscuous mode [ 742.330272][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.337691][ T8661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.556308][ T9747] veth1_macvtap: entered promiscuous mode [ 742.940407][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.947956][ T8661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.772806][T10038] 9pnet_fd: Insufficient options for proto=fd [ 744.726806][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.743798][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.771111][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.832724][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.863058][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.972108][ T49] bond0: left promiscuous mode [ 744.981467][ T49] batadv0: left promiscuous mode [ 744.998152][ T49] hsr_slave_0: left promiscuous mode [ 745.018451][ T49] hsr_slave_1: left promiscuous mode [ 745.039694][ T49] team0: left allmulticast mode [ 745.059486][ T49] team0: left promiscuous mode [ 745.077845][ T49] bridge0: port 1(team0) entered disabled state [ 745.114884][ T49] veth1_macvtap: left promiscuous mode [ 745.120768][ T49] veth0_macvtap: left promiscuous mode [ 745.128237][ T49] veth1_vlan: left promiscuous mode [ 745.134444][ T49] veth0_vlan: left promiscuous mode [ 746.663982][ T49] veth1_to_team (unregistering): left allmulticast mode [ 747.249013][ T49] bond0 (unregistering): Released all slaves [ 747.462267][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.501430][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.560869][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.595573][ T9747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.638813][ T9747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.662333][ T9747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.688954][ T9747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.716102][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.728444][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.552982][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.602556][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.674946][ T9882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.716719][ T49] IPVS: stop unused estimator thread 0... [ 748.783668][ T8668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.807927][ T8668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.416430][T10099] 9pnet_fd: Insufficient options for proto=fd [ 750.373055][T10098] tmpfs: Bad value for 'size' [ 750.728784][T10109] syzkaller0: entered promiscuous mode [ 750.738837][T10109] syzkaller0: entered allmulticast mode [ 751.149880][ T9882] veth0_vlan: entered promiscuous mode [ 751.198633][ T9882] veth1_vlan: entered promiscuous mode [ 751.671973][ T9882] veth0_macvtap: entered promiscuous mode [ 751.883146][ T9882] veth1_macvtap: entered promiscuous mode [ 751.939966][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.961605][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.995887][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.007104][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.035067][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.066176][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.079569][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.104834][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.131065][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.161599][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.680602][T10132] 9pnet_fd: Insufficient options for proto=fd [ 753.691120][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.734049][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.769381][ T9882] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.826425][ T9882] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.861316][ T9882] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.898725][ T9882] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.245038][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.282993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.368261][T10146] syzkaller0: entered promiscuous mode [ 754.380332][T10146] syzkaller0: entered allmulticast mode [ 754.425594][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.462426][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.857144][T10240] 9pnet_fd: Insufficient options for proto=fd [ 761.947487][T10243] tmpfs: Bad value for 'size' [ 769.239180][T10347] tmpfs: Bad value for 'size' [ 770.804732][T10362] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 776.146414][T10412] veth1: entered promiscuous mode [ 776.177908][T10412] veth1: left promiscuous mode [ 778.113435][T10468] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 781.809023][T10492] syzkaller0: entered promiscuous mode [ 781.869341][T10492] syzkaller0: entered allmulticast mode [ 792.398731][ T5869] IPVS: starting estimator thread 0... [ 792.523353][T10644] IPVS: using max 31 ests per chain, 74400 per kthread [ 795.559581][ T1622] IPVS: starting estimator thread 0... [ 795.761625][T10703] IPVS: using max 18 ests per chain, 43200 per kthread [ 797.497429][T10706] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1142'. [ 797.759554][T10712] nbd1: detected capacity change from 0 to 63 [ 797.759585][ T5084] block nbd1: Receive control failed (result -32) [ 797.790929][ T5837] block nbd1: Dead connection, failed to find a fallback [ 797.799209][ T5837] block nbd1: shutting down sockets [ 797.806805][ T5837] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 797.817610][ T5837] Buffer I/O error on dev nbd1, logical block 0, async page read [ 797.827930][ T5837] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 797.837519][ T5837] Buffer I/O error on dev nbd1, logical block 1, async page read [ 797.846798][ T5837] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 797.856446][ T5837] Buffer I/O error on dev nbd1, logical block 2, async page read [ 797.865178][ T5837] Buffer I/O error on dev nbd1, logical block 3, async page read [ 797.875686][ T1185] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 797.886484][ T1185] Buffer I/O error on dev nbd1, logical block 0, async page read [ 797.900171][ T1185] Buffer I/O error on dev nbd1, logical block 1, async page read [ 797.909092][ T1185] Buffer I/O error on dev nbd1, logical block 2, async page read [ 797.921229][ T1185] Buffer I/O error on dev nbd1, logical block 3, async page read [ 797.930328][ T1185] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 797.940739][ T1185] Buffer I/O error on dev nbd1, logical block 0, async page read [ 797.951500][ T1185] Buffer I/O error on dev nbd1, logical block 1, async page read [ 797.959779][ T1185] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 797.969496][ T1185] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 797.979079][ T1185] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 797.988808][ T1185] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.032233][ T5837] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 798.049655][T10231] ldm_validate_partition_table(): Disk read failed. [ 798.096392][T10231] Dev nbd1: unable to read RDB block 0 [ 798.176330][T10231] nbd1: unable to read partition table [ 798.293902][T10231] ldm_validate_partition_table(): Disk read failed. [ 798.325014][T10231] Dev nbd1: unable to read RDB block 0 [ 798.348036][T10231] nbd1: unable to read partition table [ 798.422776][T10231] ldm_validate_partition_table(): Disk read failed. [ 798.441584][T10231] Dev nbd1: unable to read RDB block 0 [ 798.469457][T10231] nbd1: unable to read partition table [ 798.496442][T10231] ldm_validate_partition_table(): Disk read failed. [ 798.513395][T10231] Dev nbd1: unable to read RDB block 0 [ 798.533197][T10231] nbd1: unable to read partition table [ 801.583013][T10765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.169392][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.176802][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.345819][T10883] ax25_connect(): syz.4.1181 uses autobind, please contact jreuter@yaina.de [ 812.322332][T10909] loop4: detected capacity change from 0 to 256 [ 812.471531][T10909] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 813.484707][T10926] syz.4.1187: attempt to access beyond end of device [ 813.484707][T10926] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 813.530110][T10926] syz.4.1187: attempt to access beyond end of device [ 813.530110][T10926] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 813.547139][T10926] syz.4.1187: attempt to access beyond end of device [ 813.547139][T10926] loop4: rw=0, sector=280, nr_sectors = 8 limit=256 [ 813.591365][ T28] audit: type=1800 audit(1773761736.448:79): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1187" name="file1" dev="loop4" ino=1048620 res=0 errno=0 [ 814.536673][T10955] syz.2.1196 uses obsolete (PF_INET,SOCK_PACKET) [ 817.238631][T11007] loop6: detected capacity change from 0 to 256 [ 817.327570][T11007] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 818.688556][T11024] syz.6.1209: attempt to access beyond end of device [ 818.688556][T11024] loop6: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 818.711552][T11024] syz.6.1209: attempt to access beyond end of device [ 818.711552][T11024] loop6: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 818.726308][T11024] syz.6.1209: attempt to access beyond end of device [ 818.726308][T11024] loop6: rw=0, sector=280, nr_sectors = 8 limit=256 [ 818.744262][ T28] audit: type=1800 audit(1773761741.618:80): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1209" name="file1" dev="loop6" ino=1048623 res=0 errno=0 [ 821.173443][T11055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.310941][T11108] loop6: detected capacity change from 0 to 256 [ 822.404096][T11108] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 823.326162][T11120] syz.6.1230: attempt to access beyond end of device [ 823.326162][T11120] loop6: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 823.375632][T11120] syz.6.1230: attempt to access beyond end of device [ 823.375632][T11120] loop6: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 823.391931][T11120] syz.6.1230: attempt to access beyond end of device [ 823.391931][T11120] loop6: rw=0, sector=280, nr_sectors = 8 limit=256 [ 823.424445][ T28] audit: type=1800 audit(1773761746.288:81): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1230" name="file1" dev="loop6" ino=1048626 res=0 errno=0 [ 825.442729][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1243'. [ 826.861404][ T8835] IPVS: starting estimator thread 0... [ 827.341139][T11188] IPVS: using max 18 ests per chain, 43200 per kthread [ 827.586454][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1254'. [ 828.115891][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1260'. [ 829.643394][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1266'. [ 830.338833][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 831.194309][T11312] vcan0: tx address claim with different name [ 831.716124][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 831.766189][T11328] loop6: detected capacity change from 0 to 256 [ 831.831933][T11328] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 832.462004][T11339] block nbd5: not configured, cannot reconfigure [ 832.683970][T11343] syz.6.1296: attempt to access beyond end of device [ 832.683970][T11343] loop6: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 832.743186][T11343] syz.6.1296: attempt to access beyond end of device [ 832.743186][T11343] loop6: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 832.758480][T11343] syz.6.1296: attempt to access beyond end of device [ 832.758480][T11343] loop6: rw=0, sector=280, nr_sectors = 8 limit=256 [ 832.793255][ T28] audit: type=1800 audit(1773761755.658:82): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1296" name="file1" dev="loop6" ino=1048629 res=0 errno=0 [ 833.966223][T11378] syzkaller0: entered promiscuous mode [ 833.975043][T11378] syzkaller0: entered allmulticast mode [ 834.675990][T11388] 9pnet_fd: Insufficient options for proto=fd [ 836.815518][T11414] loop2: detected capacity change from 0 to 256 [ 836.869944][T11414] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 837.738142][T11426] syz.2.1323: attempt to access beyond end of device [ 837.738142][T11426] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 837.775681][T11426] syz.2.1323: attempt to access beyond end of device [ 837.775681][T11426] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 837.792543][T11426] syz.2.1323: attempt to access beyond end of device [ 837.792543][T11426] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 837.851361][ T28] audit: type=1800 audit(1773761760.688:83): pid=11426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1323" name="file1" dev="loop2" ino=1048632 res=0 errno=0 [ 840.634211][T11433] 9pnet_fd: Insufficient options for proto=fd [ 843.722523][T11463] 9pnet_fd: Insufficient options for proto=fd [ 846.423525][T11507] 9pnet_fd: Insufficient options for proto=fd [ 847.645797][T11515] ip6gretap1: entered allmulticast mode [ 850.676885][T11564] 9pnet_fd: Insufficient options for proto=fd [ 852.132093][T11577] syzkaller0: entered promiscuous mode [ 852.139338][T11577] syzkaller0: entered allmulticast mode [ 852.204461][ T9133] Bluetooth: hci0: command 0x0406 tx timeout [ 852.500221][T11592] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1360'. [ 852.517773][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 852.995175][T11602] vcan0: tx address claim with dlc 0 [ 854.239611][T11613] 9pnet_fd: Insufficient options for proto=fd [ 855.173983][ T9133] Bluetooth: hci2: command tx timeout [ 860.244231][T11658] 9pnet_fd: Insufficient options for proto=fd [ 863.370085][T11717] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1390'. [ 863.562765][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 864.654463][T11673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 864.785605][T11764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1401'. [ 864.903424][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 868.205183][T11823] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1414'. [ 868.223076][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1414'. [ 868.413899][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1417'. [ 869.419861][T11847] tipc: Started in network mode [ 869.540285][T11847] tipc: Node identity 5ac4d7002382, cluster identity 4711 [ 869.632193][T11847] tipc: Enabled bearer , priority 0 [ 869.708796][T11851] syzkaller0: entered promiscuous mode [ 869.733081][T11851] syzkaller0: entered allmulticast mode [ 870.629338][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.642196][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.923476][T11860] tipc: Resetting bearer [ 871.074698][T11846] tipc: Resetting bearer [ 871.412325][T11846] tipc: Disabling bearer [ 871.493059][ T8817] tipc: Node number set to 2034685696 [ 871.703017][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1430'. [ 872.066583][T11899] syzkaller0: entered promiscuous mode [ 872.095662][T11899] syzkaller0: entered allmulticast mode [ 873.660330][T11930] syzkaller0: entered promiscuous mode [ 873.691342][T11930] syzkaller0: entered allmulticast mode [ 873.732957][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1443'. [ 877.025898][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1444'. [ 877.234045][T11962] syzkaller0: entered promiscuous mode [ 877.239787][T11962] syzkaller0: entered allmulticast mode [ 877.515007][T11972] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 879.649830][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1458'. [ 879.968765][T12022] syzkaller0: entered promiscuous mode [ 879.981428][T12022] syzkaller0: entered allmulticast mode [ 880.394003][T12030] syzkaller0: entered promiscuous mode [ 880.448836][T12030] syzkaller0: entered allmulticast mode [ 883.637189][T12057] syzkaller0: entered promiscuous mode [ 883.661136][T12057] syzkaller0: entered allmulticast mode [ 885.676613][T12095] loop6: detected capacity change from 0 to 256 [ 885.734308][T12095] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 886.309289][T12106] syz.6.1483: attempt to access beyond end of device [ 886.309289][T12106] loop6: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 886.333440][T12106] syz.6.1483: attempt to access beyond end of device [ 886.333440][T12106] loop6: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 886.349563][T12106] syz.6.1483: attempt to access beyond end of device [ 886.349563][T12106] loop6: rw=0, sector=280, nr_sectors = 8 limit=256 [ 886.702457][ T28] audit: type=1800 audit(1773761809.298:84): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1483" name="file1" dev="loop6" ino=1048635 res=0 errno=0 [ 886.959333][T12093] syzkaller0: entered promiscuous mode [ 887.001712][T12093] syzkaller0: entered allmulticast mode [ 892.206548][T12169] loop4: detected capacity change from 0 to 256 [ 892.239825][T12169] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 893.651889][T12189] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 894.077869][T12197] syz.4.1499: attempt to access beyond end of device [ 894.077869][T12197] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 894.134968][T12197] syz.4.1499: attempt to access beyond end of device [ 894.134968][T12197] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 894.161480][T12197] syz.4.1499: attempt to access beyond end of device [ 894.161480][T12197] loop4: rw=0, sector=280, nr_sectors = 8 limit=256 [ 894.176240][ T28] audit: type=1800 audit(1773761817.058:85): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1499" name="file1" dev="loop4" ino=1048637 res=0 errno=0 [ 894.845733][T12161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.511779][T12224] syzkaller0: entered promiscuous mode [ 895.601561][T12224] syzkaller0: entered allmulticast mode [ 896.567623][T12242] syzkaller1: entered promiscuous mode [ 896.602018][T12242] syzkaller1: entered allmulticast mode [ 897.617020][T12277] syzkaller0: entered promiscuous mode [ 897.636877][T12277] syzkaller0: entered allmulticast mode [ 898.171898][T12300] pim6reg: entered allmulticast mode [ 898.187181][T12300] pim6reg: left allmulticast mode [ 898.259302][T12300] gre0: entered promiscuous mode [ 898.264678][T12300] gre0: entered allmulticast mode [ 898.333218][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1528'. [ 899.876027][T12256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 903.491152][T12380] syzkaller0: entered promiscuous mode [ 903.497353][T12380] syzkaller0: entered allmulticast mode [ 903.952696][T12336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.128478][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.216797][T12386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 908.080796][T12422] bridge_slave_1 (unregistering): left allmulticast mode [ 908.089064][T12422] bridge_slave_1 (unregistering): left promiscuous mode [ 908.111272][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.510717][T12435] syzkaller0: entered promiscuous mode [ 908.527884][T12435] syzkaller0: entered allmulticast mode [ 911.498894][T12444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.434611][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1585'. [ 915.815704][T12477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.597570][T12498] tipc: New replicast peer: 0.0.0.0 [ 918.604545][T12498] tipc: Enabled bearer , priority 10 [ 918.935775][T12510] IPVS: Scheduler module ip_vs_ not found [ 918.954489][T12513] IPVS: length: 24 != 73752 [ 920.109433][T12525] syzkaller0: entered promiscuous mode [ 920.127875][T12525] syzkaller0: entered allmulticast mode [ 923.119454][T12529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 923.553360][T12558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 923.585410][T12558] xt_hashlimit: size too large, truncated to 1048576 [ 923.606448][T12558] xt_hashlimit: overflow, try lower: 0/0 [ 923.683813][T12558] syz_tun: entered allmulticast mode [ 924.641483][T12557] syz_tun: left allmulticast mode [ 925.018392][T12580] syzkaller0: entered promiscuous mode [ 925.026304][T12580] syzkaller0: entered allmulticast mode [ 927.411593][T12648] netlink: 'syz.2.1628': attribute type 4 has an invalid length. [ 928.424372][T12666] nbd: socks must be embedded in a SOCK_ITEM attr [ 928.649603][T12666] block nbd3: shutting down sockets [ 929.326076][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1636'. [ 929.491987][T12689] syzkaller0: entered promiscuous mode [ 929.498113][T12689] syzkaller0: entered allmulticast mode [ 930.778910][T12710] Bluetooth: MGMT ver 1.22 [ 932.054198][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.061370][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.886775][T12726] netlink: 1320 bytes leftover after parsing attributes in process `syz.5.1650'. [ 934.051431][T12728] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 934.421381][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1652'. [ 935.623969][T12755] tipc: Enabling of bearer rejected, already enabled [ 937.347302][T12798] tipc: Started in network mode [ 937.364985][T12798] tipc: Node identity ac14142f, cluster identity 4711 [ 937.414313][T12798] tipc: New replicast peer: 0.0.0.0 [ 937.423191][T12798] tipc: Enabled bearer , priority 10 [ 937.558495][T12796] syzkaller0: entered promiscuous mode [ 937.584900][T12796] syzkaller0: entered allmulticast mode [ 940.934321][T12813] team0: entered allmulticast mode [ 940.939884][T12813] team_slave_0: entered allmulticast mode [ 940.946177][T12813] team_slave_1: entered allmulticast mode [ 940.961212][ T967] tipc: Node number set to 2886997039 [ 941.164948][T12834] tipc: Enabling of bearer rejected, already enabled [ 941.194805][T12835] syzkaller0: entered promiscuous mode [ 941.213805][T12835] syzkaller0: entered allmulticast mode [ 941.367863][T12844] IPVS: length: 24 != 73752 [ 941.461875][T12847] syzkaller0: entered promiscuous mode [ 941.467888][T12847] syzkaller0: entered allmulticast mode [ 941.750845][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 941.892192][T12856] syzkaller0: entered promiscuous mode [ 941.898222][T12856] syzkaller0: entered allmulticast mode [ 942.055402][T12858] tipc: Enabling of bearer rejected, already enabled [ 942.503420][T12870] IPVS: Scheduler module ip_vs_ not found [ 945.662999][T12897] tipc: Enabling of bearer rejected, already enabled [ 945.917266][T12908] syzkaller0: entered promiscuous mode [ 945.937867][T12908] syzkaller0: entered allmulticast mode [ 946.679405][T12923] tipc: Started in network mode [ 946.686723][T12923] tipc: Node identity ac14142f, cluster identity 4711 [ 946.699241][T12923] tipc: New replicast peer: 0.0.0.0 [ 946.718963][T12923] tipc: Enabled bearer , priority 10 [ 947.138055][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 947.155568][T12940] syzkaller0: entered promiscuous mode [ 947.171067][T12940] syzkaller0: entered allmulticast mode [ 947.308693][T12948] tipc: Enabling of bearer rejected, already enabled [ 948.191755][ T8701] tipc: Node number set to 2886997039 [ 948.712300][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 953.040069][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 953.288454][T13010] IPVS: Scheduler module ip_vs_ not found [ 957.217340][T13019] Set syz1 is full, maxelem 65536 reached [ 958.553704][T13062] IPVS: Scheduler module ip_vs_ not found [ 958.759363][T13077] syzkaller0: entered promiscuous mode [ 958.768207][T13077] syzkaller0: entered allmulticast mode [ 962.966072][T13120] IPVS: Scheduler module ip_vs_ not found [ 963.332533][T13138] syzkaller0: entered promiscuous mode [ 963.338154][T13138] syzkaller0: entered allmulticast mode [ 963.606233][T13148] syzkaller0: entered promiscuous mode [ 963.615927][T13148] syzkaller0: entered allmulticast mode [ 964.427680][T13169] syzkaller0: entered promiscuous mode [ 964.443585][T13169] syzkaller0: entered allmulticast mode [ 964.577700][T13173] syzkaller0: entered promiscuous mode [ 964.600833][T13173] syzkaller0: entered allmulticast mode [ 964.788565][T13181] syzkaller0: entered promiscuous mode [ 964.794218][T13181] syzkaller0: entered allmulticast mode [ 968.705925][T13252] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1801'. [ 969.001902][T13257] syzkaller0: entered promiscuous mode [ 969.007790][T13257] syzkaller0: entered allmulticast mode [ 970.388237][T13308] IPVS: Scheduler module ip_vs_ not found [ 970.410658][T13306] syzkaller0: entered promiscuous mode [ 970.426868][T13306] syzkaller0: entered allmulticast mode [ 974.212351][T13360] IPVS: Scheduler module ip_vs_ not found [ 975.224087][T13376] syzkaller0: entered promiscuous mode [ 975.231272][T13376] syzkaller0: entered allmulticast mode [ 978.658950][T13398] IPVS: length: 24 != 73752 [ 978.827715][T13405] syzkaller0: entered promiscuous mode [ 978.839580][T13405] syzkaller0: entered allmulticast mode [ 979.518125][T13416] syzkaller0: entered promiscuous mode [ 979.533338][T13416] syzkaller0: entered allmulticast mode [ 980.014859][T13427] IPVS: length: 24 != 73752 [ 980.601140][T13420] netlink: 'syz.6.1845': attribute type 3 has an invalid length. [ 983.412069][T13437] netlink: 'syz.6.1845': attribute type 5 has an invalid length. [ 985.314120][ T9133] Bluetooth: hci2: command 0x0406 tx timeout [ 985.804028][T13522] IPVS: length: 24 != 73752 [ 986.458960][T13546] IPVS: length: 24 != 73752 [ 987.162299][T13573] IPVS: length: 24 != 73752 [ 988.280285][T13603] IPVS: length: 24 != 73752 [ 988.470770][T13609] syzkaller0: entered promiscuous mode [ 988.477054][T13609] syzkaller0: entered allmulticast mode [ 989.249777][T13636] IPVS: length: 24 != 73752 [ 990.427955][T13653] syzkaller0: entered promiscuous mode [ 990.438840][T13653] syzkaller0: entered allmulticast mode [ 990.738569][T13665] IPVS: length: 24 != 73752 [ 992.120543][T13688] syzkaller0: entered promiscuous mode [ 992.155719][T13688] syzkaller0: entered allmulticast mode [ 992.655659][T13704] IPVS: length: 24 != 73752 [ 992.843932][T13706] syzkaller0: entered promiscuous mode [ 992.850419][T13706] syzkaller0: entered allmulticast mode [ 993.480048][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.489812][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.613163][T13761] syzkaller0: entered promiscuous mode [ 997.619742][T13761] syzkaller0: entered allmulticast mode [ 1004.841968][ T9133] Bluetooth: hci2: command 0x0406 tx timeout [ 1006.880652][T13898] syzkaller0: entered promiscuous mode [ 1006.919756][T13898] syzkaller0: entered allmulticast mode [ 1007.397177][T13921] syzkaller0: entered promiscuous mode [ 1007.403724][T13921] syzkaller0: entered allmulticast mode [ 1008.292588][T13947] syzkaller0: entered promiscuous mode [ 1008.313546][T13947] syzkaller0: entered allmulticast mode [ 1009.513546][T13987] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2023'. [ 1009.759774][T13991] syzkaller0: entered promiscuous mode [ 1009.766613][T13991] syzkaller0: entered allmulticast mode [ 1010.741201][T14017] netlink: 'syz.5.2026': attribute type 3 has an invalid length. [ 1013.315912][T14016] netlink: 'syz.5.2026': attribute type 5 has an invalid length. [ 1014.239701][T14041] syzkaller0: entered promiscuous mode [ 1014.247544][T14041] syzkaller0: entered allmulticast mode [ 1014.777571][T14053] syzkaller0: entered promiscuous mode [ 1014.784642][T14053] syzkaller0: entered allmulticast mode [ 1015.046542][T14058] netlink: 'syz.2.2041': attribute type 5 has an invalid length. [ 1015.113907][T14067] netlink: 'syz.2.2041': attribute type 3 has an invalid length. [ 1015.565539][T14074] syzkaller0: entered promiscuous mode [ 1015.583261][T14074] syzkaller0: entered allmulticast mode [ 1015.745973][T14081] syzkaller0: entered promiscuous mode [ 1015.752997][T14081] syzkaller0: entered allmulticast mode [ 1016.522372][T14104] syzkaller0: entered promiscuous mode [ 1016.528299][T14104] syzkaller0: entered allmulticast mode [ 1016.622842][T14107] syzkaller0: entered promiscuous mode [ 1016.629093][T14107] syzkaller0: entered allmulticast mode [ 1016.933229][T14121] syzkaller0: entered promiscuous mode [ 1016.939817][T14121] syzkaller0: entered allmulticast mode [ 1017.383874][T14131] syzkaller0: entered promiscuous mode [ 1017.397928][T14131] syzkaller0: entered allmulticast mode [ 1017.468431][T14135] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1018.133813][T14157] syzkaller0: entered promiscuous mode [ 1018.140628][T14157] syzkaller0: entered allmulticast mode [ 1018.231859][T14162] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1019.308210][T14196] syzkaller0: entered promiscuous mode [ 1019.329688][T14196] syzkaller0: entered allmulticast mode [ 1019.451024][T14201] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1020.800866][T14257] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1020.814265][T14247] syzkaller0: entered promiscuous mode [ 1020.825148][T14247] syzkaller0: entered allmulticast mode [ 1024.101528][T14256] netlink: 'syz.4.2108': attribute type 5 has an invalid length. [ 1024.917057][T14298] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1026.305523][T14345] netlink: 'syz.6.2122': attribute type 5 has an invalid length. [ 1026.551166][T14355] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1027.742875][T14402] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1028.613734][T14432] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1029.137490][T14447] syzkaller0: entered promiscuous mode [ 1029.144342][T14447] syzkaller0: entered allmulticast mode [ 1030.429581][T14433] Set syz1 is full, maxelem 65536 reached [ 1032.794448][T14471] syzkaller0: entered promiscuous mode [ 1032.800094][T14471] syzkaller0: entered allmulticast mode [ 1032.876075][T14478] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1033.245024][T14490] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2171'. [ 1033.442750][T14496] syzkaller0: entered promiscuous mode [ 1033.465525][T14496] syzkaller0: entered allmulticast mode [ 1033.816947][T14510] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1033.969846][T14513] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2181'. [ 1034.637006][T14524] syzkaller0: entered promiscuous mode [ 1034.664959][T14524] syzkaller0: entered allmulticast mode [ 1034.796106][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1034.809031][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1034.818504][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1034.830569][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1034.853750][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1034.864413][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1034.985746][T14535] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1035.093555][T14538] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2191'. [ 1035.351556][ T8661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.475740][ T8661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.572804][T14527] chnl_net:caif_netlink_parms(): no params data found [ 1035.725335][ T8661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.959397][ T8661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.197166][T14557] syzkaller0: entered promiscuous mode [ 1036.205437][T14557] syzkaller0: entered allmulticast mode [ 1036.922583][ T9133] Bluetooth: hci3: command tx timeout [ 1039.001149][ T9133] Bluetooth: hci3: command tx timeout [ 1040.191140][T14527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.203017][T14527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.231204][T14527] bridge_slave_0: entered allmulticast mode [ 1040.239039][T14527] bridge_slave_0: entered promiscuous mode [ 1040.251273][T14527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.258708][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.268573][T14527] bridge_slave_1: entered allmulticast mode [ 1040.277307][T14527] bridge_slave_1: entered promiscuous mode [ 1040.383382][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2199'. [ 1040.448891][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2201'. [ 1040.463280][T14527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.515478][T14527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.749080][T14527] team0: Port device team_slave_0 added [ 1040.802333][T14527] team0: Port device team_slave_1 added [ 1040.903955][T14527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.918412][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.006958][T14527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.058218][T14527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.071423][ T9133] Bluetooth: hci3: command tx timeout [ 1041.113067][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.231112][T14527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.161407][ T9133] Bluetooth: hci3: command tx timeout [ 1045.892285][T14527] hsr_slave_0: entered promiscuous mode [ 1045.940161][T14527] hsr_slave_1: entered promiscuous mode [ 1045.961125][T14527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1045.969119][T14527] Cannot create hsr debugfs directory [ 1046.175426][T14666] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2209'. [ 1047.239943][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1048.283450][ T8661] bond0: left promiscuous mode [ 1048.288496][ T8661] bond_slave_0: left promiscuous mode [ 1048.300642][ T8661] bond_slave_1: left promiscuous mode [ 1048.319797][ T8661] batadv0: left promiscuous mode [ 1048.369856][ T8661] hsr_slave_0: left promiscuous mode [ 1048.384157][ T8661] hsr_slave_1: left promiscuous mode [ 1048.393282][ T8661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.411346][ T8661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.430512][ T8661] bridge_slave_1: left allmulticast mode [ 1048.439743][ T8661] bridge_slave_1: left promiscuous mode [ 1048.450391][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.469836][ T8661] bridge_slave_0: left allmulticast mode [ 1048.475857][ T8661] bridge_slave_0: left promiscuous mode [ 1048.478034][T14722] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2219'. [ 1048.484062][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.498160][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2219'. [ 1048.540009][ T8661] veth1_macvtap: left promiscuous mode [ 1048.547169][ T8661] veth0_macvtap: left promiscuous mode [ 1048.554303][ T8661] veth1_vlan: left promiscuous mode [ 1048.560139][ T8661] veth0_vlan: left promiscuous mode [ 1049.407247][ T8661] team0 (unregistering): Port device team_slave_1 removed [ 1049.447686][ T8661] veth1_to_team (unregistering): left allmulticast mode [ 1049.496760][ T8661] team0 (unregistering): Port device team_slave_0 removed [ 1049.562153][ T8661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.629750][ T8661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.110519][ T8661] bond0 (unregistering): Released all slaves [ 1053.077220][T14725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2220'. [ 1053.398728][T14735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2222'. [ 1053.412675][T14527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1053.455307][T14731] syzkaller0: entered promiscuous mode [ 1053.468569][T14731] syzkaller0: entered allmulticast mode [ 1053.582118][T14527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1053.635496][T14527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1053.718063][T14527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1053.763126][T14744] syzkaller0: entered promiscuous mode [ 1053.765785][ T8661] IPVS: stop unused estimator thread 0... [ 1053.768919][T14744] syzkaller0: entered allmulticast mode [ 1054.422525][T14775] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2227'. [ 1054.449475][T14527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.471521][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 1054.541871][T14527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.623725][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.631754][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.662034][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.669460][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.915883][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.923497][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.065228][T14786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2230'. [ 1058.583886][T14823] syzkaller0: entered promiscuous mode [ 1058.589456][T14823] syzkaller0: entered allmulticast mode [ 1058.612814][T14527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.667748][T14827] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2235'. [ 1058.806632][T14527] veth0_vlan: entered promiscuous mode [ 1058.865655][T14527] veth1_vlan: entered promiscuous mode [ 1058.969232][T14527] veth0_macvtap: entered promiscuous mode [ 1058.992106][T14527] veth1_macvtap: entered promiscuous mode [ 1059.015072][T14527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.026183][T14527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.038049][T14527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.049226][T14527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.060550][T14527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.078050][T14527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.094258][T14527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.134719][T14527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.170233][T14527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.210995][T14527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.234266][T14527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.261526][T14527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.291843][T14527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.327283][T14527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.356466][T14527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.395256][T14527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.408948][T14527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.418832][T14527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.487288][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1059.842564][ T8666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.891029][ T8666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.126094][ T8668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.144165][ T8668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.254625][T14862] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2244'. [ 1063.725620][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2251'. [ 1064.115200][T14918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1064.254563][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 1068.455232][T14964] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2269'. [ 1068.896303][T14986] bridge0: port 3(bond0) entered blocking state [ 1068.903689][T14986] bridge0: port 3(bond0) entered disabled state [ 1068.910557][T14986] bond0: entered allmulticast mode [ 1068.917300][T14986] bond_slave_0: entered allmulticast mode [ 1068.924037][T14986] bond_slave_1: entered allmulticast mode [ 1068.934190][T14986] bond0: entered promiscuous mode [ 1068.939533][T14986] bond_slave_0: entered promiscuous mode [ 1068.947995][T14986] bond_slave_1: entered promiscuous mode [ 1068.958160][T14986] bridge0: port 3(bond0) entered blocking state [ 1068.964661][T14986] bridge0: port 3(bond0) entered forwarding state [ 1069.333394][T14996] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2281'. [ 1069.678952][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2284'. [ 1070.198249][T15032] netlink: 'syz.4.2291': attribute type 10 has an invalid length. [ 1070.207260][T15032] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.2291'. [ 1070.417964][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2295'. [ 1071.612770][ T8835] IPVS: starting estimator thread 0... [ 1071.619659][T15072] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1071.701131][T15073] IPVS: using max 19 ests per chain, 45600 per kthread [ 1071.958700][T15081] netlink: 'syz.5.2303': attribute type 5 has an invalid length. [ 1072.308121][T15098] syzkaller0: entered promiscuous mode [ 1072.318541][T15098] syzkaller0: entered allmulticast mode [ 1072.458039][T15104] syzkaller0: entered promiscuous mode [ 1072.475811][T15104] syzkaller0: entered allmulticast mode [ 1072.811432][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2319'. [ 1072.827740][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 1073.252294][T15137] block nbd5: not configured, cannot reconfigure [ 1073.493748][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2331'. [ 1073.751446][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2333'. [ 1073.910671][T15165] syzkaller0: entered promiscuous mode [ 1073.916872][T15165] syzkaller0: entered allmulticast mode [ 1074.548148][T15184] syzkaller0: entered promiscuous mode [ 1074.557585][T15184] syzkaller0: entered allmulticast mode [ 1074.711361][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2343'. [ 1074.827347][T15195] syzkaller0: entered promiscuous mode [ 1074.834256][T15195] syzkaller0: entered allmulticast mode [ 1076.363719][T15231] syzkaller0: entered promiscuous mode [ 1076.373801][T15231] syzkaller0: entered allmulticast mode [ 1076.388126][T15231] tc action pedit offset must be on 32 bit boundaries [ 1076.608219][T15155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1076.849894][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2359'. [ 1077.897360][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 1078.288407][T15268] bridge1: entered promiscuous mode [ 1078.297871][T15268] bridge1: entered allmulticast mode [ 1078.394171][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2371'. [ 1080.056485][T15342] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2382'. [ 1081.760099][T15374] syzkaller0: entered promiscuous mode [ 1081.776291][T15374] syzkaller0: entered allmulticast mode [ 1085.155219][T15404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2395'. [ 1085.400502][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2397'. [ 1089.589241][T15456] syzkaller0: entered promiscuous mode [ 1089.610410][T15456] syzkaller0: entered allmulticast mode [ 1089.738401][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'. [ 1089.757423][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'. [ 1089.778320][T15464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2406'. [ 1090.289934][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2415'. [ 1090.470099][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2417'. [ 1090.519666][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2417'. [ 1093.783708][T15515] syzkaller0: entered promiscuous mode [ 1093.790283][T15515] syzkaller0: entered allmulticast mode [ 1093.954371][T15517] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2420'. [ 1094.308455][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2426'. [ 1094.349164][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2426'. [ 1094.512960][T15537] syzkaller0: entered promiscuous mode [ 1094.518684][T15537] syzkaller0: entered allmulticast mode [ 1097.742139][T15544] syzkaller0: entered promiscuous mode [ 1097.748048][T15544] syzkaller0: entered allmulticast mode [ 1097.908053][T15548] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2432'. [ 1098.188043][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2437'. [ 1098.546355][T15566] syzkaller0: entered promiscuous mode [ 1098.621113][T15566] syzkaller0: entered allmulticast mode [ 1099.580260][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'. [ 1099.662671][T15585] syzkaller0: entered promiscuous mode [ 1099.685722][T15585] syzkaller0: entered allmulticast mode [ 1099.702684][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'. [ 1099.951097][T15590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2446'. [ 1100.021343][T15592] syzkaller0: entered promiscuous mode [ 1100.030596][T15592] syzkaller0: entered allmulticast mode [ 1100.457165][T15602] syzkaller0: entered promiscuous mode [ 1100.481777][T15602] syzkaller0: entered allmulticast mode [ 1100.971507][T15615] syzkaller0: entered promiscuous mode [ 1100.992441][T15615] syzkaller0: entered allmulticast mode [ 1101.440114][T15623] syzkaller0: entered promiscuous mode [ 1101.451181][T15623] syzkaller0: entered allmulticast mode [ 1101.767731][T15627] syzkaller0: entered promiscuous mode [ 1101.798589][T15627] syzkaller0: entered allmulticast mode [ 1101.837401][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2461'. [ 1102.253602][T15639] syzkaller0: entered promiscuous mode [ 1102.273660][T15639] syzkaller0: entered allmulticast mode [ 1102.471413][T15643] syzkaller0: entered promiscuous mode [ 1102.477969][T15643] syzkaller0: entered allmulticast mode [ 1102.701149][T15645] syzkaller0: entered promiscuous mode [ 1102.707254][T15645] syzkaller0: entered allmulticast mode [ 1102.897642][T15653] syzkaller0: entered promiscuous mode [ 1102.921099][T15653] syzkaller0: entered allmulticast mode [ 1103.057036][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2471'. [ 1103.223549][T15661] syzkaller0: entered promiscuous mode [ 1103.229793][T15661] syzkaller0: entered allmulticast mode [ 1103.602573][T15670] syzkaller0: entered promiscuous mode [ 1103.608949][T15670] syzkaller0: entered allmulticast mode [ 1103.711227][T15673] netlink: 'syz.5.2478': attribute type 10 has an invalid length. [ 1103.720721][T15673] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.2478'. [ 1103.770459][T15674] syzkaller0: entered promiscuous mode [ 1103.787555][T15674] syzkaller0: entered allmulticast mode [ 1104.321796][T15692] syzkaller0: entered promiscuous mode [ 1104.346320][T15692] syzkaller0: entered allmulticast mode [ 1104.849477][T15701] syzkaller0: entered promiscuous mode [ 1104.855740][T15701] syzkaller0: entered allmulticast mode [ 1104.963464][T15705] syzkaller0: entered promiscuous mode [ 1104.969511][T15705] syzkaller0: entered allmulticast mode [ 1105.177374][T15707] syzkaller0: entered promiscuous mode [ 1105.186027][T15707] syzkaller0: entered allmulticast mode [ 1105.212335][T15709] netlink: 'syz.2.2490': attribute type 10 has an invalid length. [ 1105.220770][T15709] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.2490'. [ 1105.552076][T15715] syzkaller0: entered promiscuous mode [ 1105.558660][T15715] syzkaller0: entered allmulticast mode [ 1105.713093][T15719] syzkaller0: entered promiscuous mode [ 1105.718904][T15719] syzkaller0: entered allmulticast mode [ 1106.057358][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 1106.111834][ C1] ------------[ cut here ]------------ [ 1106.119278][ C1] ODEBUG: free active (active state 0) object: ffff888030eb7490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1106.135349][ C1] WARNING: CPU: 1 PID: 1110 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1106.148160][ C1] Modules linked in: [ 1106.152372][ C1] CPU: 1 PID: 1110 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1106.160996][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.171975][ C1] Workqueue: bat_events batadv_nc_worker [ 1106.178533][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1106.186557][ C1] Code: 4c 8b 4d 00 48 c7 c7 60 8f 1c 8b 48 c7 c6 c0 8b 1c 8b 48 c7 c2 e0 90 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 5e fe 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 4b 5a [ 1106.209074][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1106.216522][ C1] RAX: 263d3d899187d000 RBX: ffffffff97495d68 RCX: ffff888023e28000 [ 1106.225659][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1106.234531][ C1] RBP: ffffffff8accab80 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1106.243534][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff888030eb7600 [ 1106.251672][ C1] R13: ffffffff8979eb80 R14: ffff888030eb7000 R15: ffff888030eb7490 [ 1106.259930][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1106.269044][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1106.275773][ C1] CR2: 0000200000c60030 CR3: 000000005f87e000 CR4: 00000000003506e0 [ 1106.284368][ C1] Call Trace: [ 1106.287869][ C1] [ 1106.291437][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1106.297476][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1106.302996][ C1] __kmem_cache_free+0xba/0x1e0 [ 1106.309140][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1106.314561][ C1] call_timer_fn+0x189/0x540 [ 1106.319606][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1106.325367][ C1] ? call_timer_fn+0xd2/0x540 [ 1106.331001][ C1] ? __run_timers+0x800/0x800 [ 1106.336010][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1106.341953][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1106.348885][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1106.356050][ C1] __run_timers+0x542/0x800 [ 1106.361847][ C1] ? detach_timer+0x2b0/0x2b0 [ 1106.367029][ C1] ? lock_chain_count+0x20/0x20 [ 1106.372943][ C1] run_timer_softirq+0x67/0xf0 [ 1106.379257][ C1] handle_softirqs+0x280/0x820 [ 1106.384322][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1106.389420][ C1] ? do_softirq+0x1a0/0x1a0 [ 1106.394446][ C1] __irq_exit_rcu+0xd3/0x190 [ 1106.399841][ C1] ? irq_exit_rcu+0x20/0x20 [ 1106.404731][ C1] irq_exit_rcu+0x9/0x20 [ 1106.409821][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1106.415933][ C1] [ 1106.418903][ C1] [ 1106.422672][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1106.429964][ C1] RIP: 0010:rcu_preempt_deferred_qs_irqrestore+0x8bb/0xce0 [ 1106.439177][ C1] Code: 2c 44 08 e0 a8 01 49 bc 00 00 00 00 00 fc ff df 75 18 4c 89 ef e8 f5 fc 1c 09 4c 89 ef be 01 00 00 00 48 89 c2 e8 15 09 01 00 <48> c7 84 24 a0 00 00 00 0e 36 e0 45 48 8b 44 24 40 4a c7 04 20 00 [ 1106.461938][ C1] RSP: 0018:ffffc900045ef8e0 EFLAGS: 00000206 [ 1106.469808][ C1] RAX: 1ffff920008bdf30 RBX: ffff8880b8f3cf20 RCX: 263d3d899187d000 [ 1106.479088][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 1106.487789][ C1] RBP: ffffc900045efa30 R08: ffffffff911c15df R09: 1ffffffff22382bb [ 1106.497047][ C1] R10: dffffc0000000000 R11: fffffbfff22382bc R12: dffffc0000000000 [ 1106.505571][ C1] R13: 0000000000000000 R14: ffffffff8d1372c0 R15: 1ffff110171e79e2 [ 1106.513711][ C1] ? lock_chain_count+0x20/0x20 [ 1106.518805][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1106.526262][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1106.531676][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 1106.537769][ C1] ? rcu_is_watching+0x15/0xb0 [ 1106.543042][ C1] rcu_read_unlock_special+0x3d4/0x4d0 [ 1106.548858][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1106.554134][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1106.559306][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1106.565524][ C1] ? check_preemption_disabled+0x42/0x110 [ 1106.571976][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1106.577167][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1106.582388][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1106.587834][ C1] batadv_nc_worker+0x282/0x610 [ 1106.593506][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1106.600016][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1106.605908][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1106.612893][ C1] ? assign_work+0x3d2/0x5d0 [ 1106.617835][ C1] worker_thread+0xa55/0xfc0 [ 1106.622996][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1106.629233][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1106.634476][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1106.640946][ C1] kthread+0x2fa/0x390 [ 1106.645138][ C1] ? pr_cont_work+0x560/0x560 [ 1106.650500][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1106.655806][ C1] ret_from_fork+0x48/0x80 [ 1106.660493][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1106.665657][ C1] ret_from_fork_asm+0x11/0x20 [ 1106.671130][ C1] [ 1106.675004][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1106.683102][ C1] CPU: 1 PID: 1110 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1106.691113][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.703222][ C1] Workqueue: bat_events batadv_nc_worker [ 1106.709354][ C1] Call Trace: [ 1106.712923][ C1] [ 1106.716231][ C1] dump_stack_lvl+0x18c/0x250 [ 1106.721172][ C1] ? show_regs_print_info+0x20/0x20 [ 1106.726940][ C1] ? load_image+0x400/0x400 [ 1106.731799][ C1] panic+0x2dc/0x730 [ 1106.735843][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1106.740494][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1106.745655][ C1] __warn+0x2e0/0x470 [ 1106.749896][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1106.756141][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1106.762431][ C1] report_bug+0x2be/0x4f0 [ 1106.766899][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1106.773481][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1106.779593][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 1106.785641][ C1] handle_bug+0xcf/0x120 [ 1106.790294][ C1] exc_invalid_op+0x1a/0x50 [ 1106.795398][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1106.800472][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1106.806847][ C1] Code: 4c 8b 4d 00 48 c7 c7 60 8f 1c 8b 48 c7 c6 c0 8b 1c 8b 48 c7 c2 e0 90 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 5e fe 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 4b 5a [ 1106.828713][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1106.835195][ C1] RAX: 263d3d899187d000 RBX: ffffffff97495d68 RCX: ffff888023e28000 [ 1106.844791][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1106.855081][ C1] RBP: ffffffff8accab80 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1106.866436][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff888030eb7600 [ 1106.877307][ C1] R13: ffffffff8979eb80 R14: ffff888030eb7000 R15: ffff888030eb7490 [ 1106.887654][ C1] ? rose_transmit_link+0x740/0x740 [ 1106.894469][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1106.901634][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1106.910476][ C1] __kmem_cache_free+0xba/0x1e0 [ 1106.916871][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1106.922756][ C1] call_timer_fn+0x189/0x540 [ 1106.928037][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1106.933479][ C1] ? call_timer_fn+0xd2/0x540 [ 1106.938715][ C1] ? __run_timers+0x800/0x800 [ 1106.943808][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1106.950745][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1106.957018][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1106.962359][ C1] __run_timers+0x542/0x800 [ 1106.967217][ C1] ? detach_timer+0x2b0/0x2b0 [ 1106.972226][ C1] ? lock_chain_count+0x20/0x20 [ 1106.978750][ C1] run_timer_softirq+0x67/0xf0 [ 1106.983758][ C1] handle_softirqs+0x280/0x820 [ 1106.988809][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1106.994199][ C1] ? do_softirq+0x1a0/0x1a0 [ 1106.999493][ C1] __irq_exit_rcu+0xd3/0x190 [ 1107.005807][ C1] ? irq_exit_rcu+0x20/0x20 [ 1107.011368][ C1] irq_exit_rcu+0x9/0x20 [ 1107.016360][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1107.022763][ C1] [ 1107.026113][ C1] [ 1107.029337][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1107.035988][ C1] RIP: 0010:rcu_preempt_deferred_qs_irqrestore+0x8bb/0xce0 [ 1107.044594][ C1] Code: 2c 44 08 e0 a8 01 49 bc 00 00 00 00 00 fc ff df 75 18 4c 89 ef e8 f5 fc 1c 09 4c 89 ef be 01 00 00 00 48 89 c2 e8 15 09 01 00 <48> c7 84 24 a0 00 00 00 0e 36 e0 45 48 8b 44 24 40 4a c7 04 20 00 [ 1107.066168][ C1] RSP: 0018:ffffc900045ef8e0 EFLAGS: 00000206 [ 1107.072570][ C1] RAX: 1ffff920008bdf30 RBX: ffff8880b8f3cf20 RCX: 263d3d899187d000 [ 1107.081117][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 1107.089691][ C1] RBP: ffffc900045efa30 R08: ffffffff911c15df R09: 1ffffffff22382bb [ 1107.099470][ C1] R10: dffffc0000000000 R11: fffffbfff22382bc R12: dffffc0000000000 [ 1107.112283][ C1] R13: 0000000000000000 R14: ffffffff8d1372c0 R15: 1ffff110171e79e2 [ 1107.122102][ C1] ? lock_chain_count+0x20/0x20 [ 1107.127421][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1107.135460][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1107.142205][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 1107.148816][ C1] ? rcu_is_watching+0x15/0xb0 [ 1107.154543][ C1] rcu_read_unlock_special+0x3d4/0x4d0 [ 1107.160665][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1107.166012][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1107.171258][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1107.176802][ C1] ? check_preemption_disabled+0x42/0x110 [ 1107.182924][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1107.188558][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1107.194103][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1107.199385][ C1] batadv_nc_worker+0x282/0x610 [ 1107.204409][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1107.210820][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1107.216671][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1107.222609][ C1] ? assign_work+0x3d2/0x5d0 [ 1107.227529][ C1] worker_thread+0xa55/0xfc0 [ 1107.232529][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1107.238651][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1107.243883][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1107.249976][ C1] kthread+0x2fa/0x390 [ 1107.254550][ C1] ? pr_cont_work+0x560/0x560 [ 1107.259631][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1107.264520][ C1] ret_from_fork+0x48/0x80 [ 1107.269495][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1107.274290][ C1] ret_from_fork_asm+0x11/0x20 [ 1107.279268][ C1] [ 1107.283116][ C1] Kernel Offset: disabled [ 1107.287777][ C1] Rebooting in 86400 seconds..