last executing test programs: 2m25.495079016s ago: executing program 1 (id=651): socket(0x23, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r3, 0x40304580, 0x0) 2m24.465964092s ago: executing program 1 (id=656): socket$igmp6(0xa, 0x3, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) 2m23.151987055s ago: executing program 1 (id=661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2a, 0x2, 0x8) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}]}, 0x8c}}, 0x40801) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value=r9}}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x10, 0x80000005, 0x60, @dev={0xfe, 0x80, '\x00', 0x36}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x40, 0x6, 0xc}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) close(0x3) 2m22.57101316s ago: executing program 1 (id=665): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000cc0)="3774743f60686eee6855a797bd80c9a66f1cf9786b4e12e247111358b5c7aeb22a23885539467f9c", 0x28}], 0x1) 2m22.249904298s ago: executing program 1 (id=668): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xa1a0, 0x10000, 0x100000, 0x4000051}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, 0x0, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0x630e, 0x1, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 2m21.053254988s ago: executing program 1 (id=673): unshare(0x2020600) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2000000, 0x0, 0x0, 0xfd}}]}}]}, 0x154}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000580)=0x1, 0x4) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r10, 0x2, {0x2, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25df9bfc, {0x0, 0x0, 0x74, r10, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 2m5.898259529s ago: executing program 32 (id=673): unshare(0x2020600) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2000000, 0x0, 0x0, 0xfd}}]}}]}, 0x154}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000580)=0x1, 0x4) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r10, 0x2, {0x2, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25df9bfc, {0x0, 0x0, 0x74, r10, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 9.13029584s ago: executing program 4 (id=1360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.988907774s ago: executing program 4 (id=1362): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 7.95621216s ago: executing program 4 (id=1367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a) 5.252139438s ago: executing program 4 (id=1374): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r0], 0x30}}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) 5.15459749s ago: executing program 4 (id=1377): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = memfd_secret(0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x2, 0xd, 0x8}) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x271, &(0x7f0000000f00)="$eJzs3TtoJHUcB/Df7CNxk0WiNoL4ALHQQIidYBMbhYCEICKoEBGxkkSICXZZKxsLrVUCgk0QO6Ol2ASbOw6uyt2lyDUHd+GKC1fcFXvMPo7NZnOP3c0Ol/l8YLMz/J8T5vufITCTAHJrKiLmIqIYEdMRUY6IpLPCK83PVGt3s7KzFFGvf3AzadRr7je1201GRC0i3oootcvWtz/Zv7373tgPa+XXft/+uDKq4+t0sL/3/uGvC9//Nf/m+vmL1xeSmItqq6zzOLr1N9lC42fSo6SURDzbV59PhqSU9Qx4FIvf/nkpzf1zEfFqI//lKLQi++Pq2H/leOOXk9r+dOPCC6OcKzB89Xo5vQbW6kDupHep1UgKM6071moUCjMzzXv4y8WJwlcrq99Mf7mytvxF1isVMCzVSPbe/Wf878mu/F8rNvMPnF3ViL0PF7eupNuHxaxnA5yazj9gv9j8SvM//dnG6yH/kDvyD/kl/5Bf8g9nQJ/ZlX/Ir0Hy/9QpzQkYDdd/OMPK7Y1az2L5h/x6QP7Hs5oTMAS/9Xrq9CjXf8ivzvwDAPlSH8/6CWQgK1mvPwAAAAAAAAAAAAAAAAAAwHGblZ2l9mdUY/7/c8TBOxFR6jV+sfH/iNtvG5+4laTV7kuazQby6csDdjCgP4b29HWlr1ZPXx3W+P0599Lp9Pvd0d0TfzkbyxG1tPJsqXT8/Eta51//nnlIefnzAQd4TN1vBXz7o9GO3+3uVrbjz+9G/JuuP7O91p9CPN/47r3+VDtfsdynr+8M2AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjcy8AAP//PgRt2A==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d4e, 0x103) unlink(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x200000000000017f, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x11, '\x00', 0x0, @sk_msg}, 0x94) close(r4) syz_genetlink_get_family_id$fou(0x0, r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc4510010000001fff000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.751486815s ago: executing program 2 (id=1386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2886dd6075e70000303afffe80000000000000000000000000000eff0200000000000000000001030190780b1700006915556900910067134f7ba058d912e4076cfffc00000000000000000000fc000000000000000000"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.126963511s ago: executing program 2 (id=1391): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.875480867s ago: executing program 2 (id=1395): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r0], 0x30}}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) 2.668035753s ago: executing program 2 (id=1396): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c0604000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) r2 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x6f) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) r4 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r4, r2, 0xfffffffffffffffb, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080) 2.170874236s ago: executing program 3 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008400) 1.99648484s ago: executing program 3 (id=1402): mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x600000, 0xef4e82dc2f1371ae, &(0x7f0000a00000/0x600000)=nil) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x4d0d) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r2, 0x0, 0x0, 0x40000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xd, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) userfaultfd(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) unshare(0x2040400) 1.528504232s ago: executing program 0 (id=1406): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 1.255442858s ago: executing program 0 (id=1407): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.027701624s ago: executing program 0 (id=1408): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) close(r4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000180016801400018010000600080000000104000007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40400c1}, 0x810) socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'}) socket(0x18, 0x1, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='_', 0x1}], 0x1}}], 0x2, 0x20040140) 965.812846ms ago: executing program 3 (id=1409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 804.8972ms ago: executing program 2 (id=1410): sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0xffff, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x8, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0x4534, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x800002, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x4, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0xf1, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x7698}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0x6, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xdb4, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9dc}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0xfffffffe, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffff9f1, 0xfffffffb, 0xffffffff, 0x736, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0xc, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x5}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 736.169641ms ago: executing program 3 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008400) 638.255934ms ago: executing program 3 (id=1412): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000009000000000000004b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 621.651295ms ago: executing program 0 (id=1413): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r0], 0x30}}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) 364.701471ms ago: executing program 3 (id=1414): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a) 363.993661ms ago: executing program 0 (id=1415): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 214.022045ms ago: executing program 4 (id=1416): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0xffffffff, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000000) 54.931389ms ago: executing program 0 (id=1417): mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x600000, 0xef4e82dc2f1371ae, &(0x7f0000a00000/0x600000)=nil) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x4d0d) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r2, 0x0, 0x0, 0x40000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xd, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) userfaultfd(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) unshare(0x2040400) 0s ago: executing program 2 (id=1418): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c0604000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) r2 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x6f) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) r4 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r4, r2, 0xfffffffffffffffb, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080) kernel console output (not intermixed with test programs): tdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.638820][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.648609][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.660880][ T5775] veth1_macvtap: entered promiscuous mode [ 69.693093][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.708944][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.719575][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.753856][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.764311][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.775288][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.786591][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.800074][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.827881][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.841255][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.853349][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.882392][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.894628][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.905421][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.920981][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.946405][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.957268][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.971414][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.021779][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.031913][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.044190][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.053372][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.147173][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.172328][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.270695][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.285958][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.301429][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.311059][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.398250][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.408552][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.430808][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.440788][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.501405][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.533149][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.689568][ T5856] syz.0.1[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 70.952165][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.013044][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.160362][ T5770] Bluetooth: hci1: command tx timeout [ 71.166026][ T5773] Bluetooth: hci2: command tx timeout [ 71.175053][ T5779] Bluetooth: hci0: command tx timeout [ 71.180790][ T5782] Bluetooth: hci3: command tx timeout [ 71.222741][ T5863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.595208][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.601803][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.263590][ T5782] Bluetooth: hci3: command tx timeout [ 73.269130][ T5782] Bluetooth: hci1: command tx timeout [ 73.274787][ T5770] Bluetooth: hci2: command tx timeout [ 73.280194][ T5770] Bluetooth: hci0: command tx timeout [ 73.751554][ T5884] loop0: detected capacity change from 0 to 32768 [ 73.810099][ T5884] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.21 (5884) [ 73.875549][ T5884] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 73.909867][ T5884] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 73.947342][ T5884] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 73.981834][ T5884] BTRFS info (device loop0): use zstd compression, level 3 [ 74.028576][ T5884] BTRFS info (device loop0): using free space tree [ 74.315556][ T5884] BTRFS info (device loop0): enabling ssd optimizations [ 74.322554][ T5884] BTRFS info (device loop0): auto enabling async discard [ 74.506723][ T5907] loop3: detected capacity change from 0 to 32768 [ 74.545467][ T5907] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.30 (5907) [ 74.784324][ T5771] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 74.814821][ T5763] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5763) [ 76.035719][ T5983] ip6gretap1: entered allmulticast mode [ 77.260428][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 77.552732][ T6031] loop3: detected capacity change from 0 to 128 [ 77.560995][ T6031] ======================================================= [ 77.560995][ T6031] WARNING: The mand mount option has been deprecated and [ 77.560995][ T6031] and is ignored by this kernel. Remove the mand [ 77.560995][ T6031] option from the mount to silence this warning. [ 77.560995][ T6031] ======================================================= [ 77.862483][ T6031] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 77.878049][ T6031] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.904408][ C0] sched: RT throttling activated [ 78.958053][ T6045] ip6gretap1: entered allmulticast mode [ 79.415607][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 79.943982][ T6068] ip6gretap1: entered allmulticast mode [ 80.469876][ T6079] loop3: detected capacity change from 0 to 128 [ 80.713469][ T6079] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 80.727544][ T6079] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.906573][ T173] cfg80211: failed to load regulatory.db [ 82.176964][ T6066] loop0: detected capacity change from 0 to 32768 [ 82.248708][ T6066] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.87 (6066) [ 82.276170][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 82.355103][ T6066] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 82.374507][ T6066] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 82.412737][ T6066] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.474581][ T6066] BTRFS info (device loop0): use zstd compression, level 3 [ 82.492133][ T6066] BTRFS info (device loop0): using free space tree [ 82.809682][ T6066] BTRFS info (device loop0): enabling ssd optimizations [ 82.854595][ T6066] BTRFS info (device loop0): auto enabling async discard [ 83.021387][ T5771] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 84.093957][ T6150] ref_ctr increment failed for inode: 0x9d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888017c6d580 [ 84.516196][ T6147] loop3: detected capacity change from 0 to 32768 [ 84.775263][ T6147] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.113 (6147) [ 85.295179][ T6147] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.314597][ T6147] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 85.334330][ T6147] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 85.355085][ T6147] BTRFS info (device loop3): use zstd compression, level 3 [ 85.381213][ T6147] BTRFS info (device loop3): using free space tree [ 85.654531][ T6147] BTRFS info (device loop3): enabling ssd optimizations [ 85.672688][ T6147] BTRFS info (device loop3): auto enabling async discard [ 85.788178][ T27] audit: type=1800 audit(1784893679.921:2): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.113" name="file1" dev="loop3" ino=261 res=0 errno=0 [ 86.049467][ T5775] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.445925][ T5770] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 86.455934][ T5770] Bluetooth: hci3: Injecting HCI hardware error event [ 86.463983][ T5773] Bluetooth: hci3: hardware error 0x00 [ 86.928612][ T6211] loop1: detected capacity change from 0 to 136 [ 87.484598][ T5770] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 87.486020][ T6224] loop0: detected capacity change from 0 to 128 [ 87.493164][ T5770] Bluetooth: hci2: Injecting HCI hardware error event [ 87.508060][ T5782] Bluetooth: hci2: hardware error 0x00 [ 87.716227][ T6224] EXT4-fs: Ignoring removed orlov option [ 87.722515][ T6224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.851594][ T6224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 87.884618][ T6224] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.524820][ T5773] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 89.469339][ T6243] Zero length message leads to an empty skb [ 89.483611][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 89.650521][ T6245] gretap1: entered promiscuous mode [ 89.724653][ T5782] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 89.838493][ T6237] loop2: detected capacity change from 0 to 32768 [ 89.857907][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.988150][ T6237] JBD2: Ignoring recovery information on journal [ 90.148483][ T6237] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.452484][ T6265] loop0: detected capacity change from 0 to 128 [ 90.538438][ T6264] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 90.686207][ T6265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 90.703108][ T6265] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.255618][ T5782] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 91.264581][ T5782] Bluetooth: hci0: Injecting HCI hardware error event [ 91.273225][ T5782] Bluetooth: hci0: hardware error 0x00 [ 91.918774][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 92.230312][ T5773] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 92.461397][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 93.324842][ T5782] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 93.517496][ T6293] loop2: detected capacity change from 0 to 32768 [ 93.542364][ T6293] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.156 (6293) [ 93.597940][ T6293] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 93.609371][ T6293] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 93.631166][ T6293] BTRFS info (device loop2): using free space tree [ 93.727469][ T6293] BTRFS info (device loop2): enabling ssd optimizations [ 93.751227][ T6293] BTRFS info (device loop2): auto enabling async discard [ 93.982778][ T5776] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 94.130226][ T6322] loop3: detected capacity change from 0 to 4096 [ 94.263647][ T6324] loop1: detected capacity change from 0 to 128 [ 94.361869][ T6324] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 94.380459][ T6324] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.631321][ T6322] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 95.016042][ T6322] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 95.686170][ T6332] loop2: detected capacity change from 0 to 128 [ 95.754965][ T6332] FAT-fs (loop2): bogus number of reserved sectors [ 95.814813][ T6332] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 95.872727][ T6332] FAT-fs (loop2): Can't find a valid FAT filesystem [ 96.052133][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 97.044565][ T6345] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.882868][ T6332] loop2: detected capacity change from 0 to 32768 [ 97.972405][ T6332] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.119553][ T6332] XFS (loop2): Ending clean mount [ 98.237539][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.136662][ T6380] netlink: 52 bytes leftover after parsing attributes in process `syz.2.177'. [ 100.056507][ T6392] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.624546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.804272][ T6396] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.823434][ C1] Illegal XDP return value 16128 on prog (id 13) dev veth0_to_bridge, expect packet loss! [ 102.153581][ T6388] loop3: detected capacity change from 0 to 32768 [ 102.184725][ T6388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.180 (6388) [ 102.234250][ T6388] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.271110][ T6388] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 102.305049][ T6388] BTRFS info (device loop3): using free space tree [ 102.319925][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 102.321684][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 102.394522][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 102.404234][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 102.445200][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 102.455030][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 102.466847][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 102.478076][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 102.488541][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 102.499502][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 102.526881][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 102.552589][ T6388] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 102.617487][ T6388] BTRFS error (device loop3): open_ctree failed: -12 [ 102.768335][ T6431] loop0: detected capacity change from 0 to 256 [ 102.839861][ T6431] exfat: Deprecated parameter 'namecase' [ 102.895073][ T6431] exfat: Deprecated parameter 'utf8' [ 103.427112][ T6431] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 103.862807][ T5759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5759) [ 105.184216][ T6440] loop1: detected capacity change from 0 to 32768 [ 105.617962][ T6447] loop3: detected capacity change from 0 to 40427 [ 105.664110][ T6447] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 105.709773][ T6447] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.769733][ T6447] F2FS-fs (loop3): invalid crc value [ 105.791202][ T6447] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 105.831540][ T6447] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.944794][ T6447] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.948760][ T6467] loop0: detected capacity change from 0 to 512 [ 105.962988][ T6447] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.042282][ T6467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 106.079656][ T6447] syz.3.198: attempt to access beyond end of device [ 106.079656][ T6447] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 106.090604][ T6467] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.111975][ T6447] syz.3.198: attempt to access beyond end of device [ 106.111975][ T6447] loop3: rw=2049, sector=53288, nr_sectors = 16 limit=40427 [ 106.147987][ T6447] syz.3.198: attempt to access beyond end of device [ 106.147987][ T6447] loop3: rw=2049, sector=53312, nr_sectors = 16 limit=40427 [ 106.177897][ T6462] loop1: detected capacity change from 0 to 32768 [ 106.186208][ T6447] syz.3.198: attempt to access beyond end of device [ 106.186208][ T6447] loop3: rw=2049, sector=53344, nr_sectors = 16 limit=40427 [ 106.206728][ T6471] syz.3.198: attempt to access beyond end of device [ 106.206728][ T6471] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 106.230185][ T6447] syz.3.198: attempt to access beyond end of device [ 106.230185][ T6447] loop3: rw=2049, sector=53384, nr_sectors = 16 limit=40427 [ 106.245411][ T6471] syz.3.198: attempt to access beyond end of device [ 106.245411][ T6471] loop3: rw=2049, sector=53288, nr_sectors = 8 limit=40427 [ 106.265035][ T6447] syz.3.198: attempt to access beyond end of device [ 106.265035][ T6447] loop3: rw=2049, sector=53408, nr_sectors = 24 limit=40427 [ 106.281655][ T6447] syz.3.198: attempt to access beyond end of device [ 106.281655][ T6447] loop3: rw=2049, sector=53448, nr_sectors = 8 limit=40427 [ 106.297352][ T6462] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 106.348640][ T6447] syz.3.198: attempt to access beyond end of device [ 106.348640][ T6447] loop3: rw=2049, sector=53472, nr_sectors = 24 limit=40427 [ 106.553224][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 106.614518][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 106.623113][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 106.631444][ T5782] Bluetooth: hci1: hardware error 0x00 [ 106.650657][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.975302][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.844274][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 109.628904][ T6520] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.410232][ T6521] loop1: detected capacity change from 0 to 4096 [ 113.145493][ T6521] NILFS (loop1): error -4 creating segctord thread [ 113.312691][ T6526] loop0: detected capacity change from 0 to 512 [ 114.091625][ T6526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.214694][ T6526] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.361279][ T6537] loop3: detected capacity change from 0 to 4096 [ 114.572592][ T6539] team0: Device xfrm0 is of different type [ 116.230035][ T6548] loop2: detected capacity change from 0 to 32768 [ 116.238069][ T6547] loop3: detected capacity change from 0 to 32768 [ 116.281771][ T6547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.226 (6547) [ 116.374744][ T6548] JBD2: Ignoring recovery information on journal [ 116.450015][ T6547] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.470870][ T6547] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 116.500620][ T6547] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.524689][ T6547] BTRFS info (device loop3): trying to use backup root at mount time [ 116.548902][ T6548] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.558077][ T6547] BTRFS info (device loop3): enabling ssd optimizations [ 116.578052][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 116.587614][ T6547] BTRFS info (device loop3): using spread ssd allocation scheme [ 116.612913][ T6547] BTRFS info (device loop3): setting nodatasum [ 116.636184][ T6547] BTRFS info (device loop3): allowing degraded mounts [ 116.673276][ T6547] BTRFS info (device loop3): turning on flush-on-commit [ 116.704458][ T6547] BTRFS info (device loop3): setting nodatacow, compression disabled [ 116.762565][ T6547] BTRFS info (device loop3): using free space tree [ 116.844855][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 116.954590][ T6547] BTRFS info (device loop3): auto enabling async discard [ 117.109377][ T27] audit: type=1800 audit(1784893711.251:3): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.226" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 117.209030][ T6553] loop1: detected capacity change from 0 to 32768 [ 117.293887][ T6553] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.460169][ T6553] XFS (loop1): Ending clean mount [ 117.633181][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.263082][ T6555] loop0: detected capacity change from 0 to 32768 [ 118.441240][ T5768] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 118.473892][ T6555] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 118.733627][ T6599] syz.3.232 uses obsolete (PF_INET,SOCK_PACKET) [ 118.743103][ T6555] XFS (loop0): Starting recovery (logdev: internal) [ 118.820814][ T6600] loop2: detected capacity change from 0 to 128 [ 118.980401][ T6600] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.004019][ T6600] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.499408][ T6555] XFS (loop0): Ending recovery (logdev: internal) [ 119.861537][ T6555] syz.0.228 (6555) used greatest stack depth: 20944 bytes left [ 119.898643][ T5771] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 119.979912][ T6607] loop3: detected capacity change from 0 to 512 [ 120.015639][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 120.067891][ T6607] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.586981][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 121.495330][ T6613] loop2: detected capacity change from 0 to 32768 [ 121.568254][ T6613] JBD2: Ignoring recovery information on journal [ 121.843100][ T6613] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 122.293831][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 122.826123][ T5846] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.161363][ T5846] usb 2-1: not running at top speed; connect to a high speed hub [ 123.267119][ T5846] usb 2-1: config 1 has an invalid interface number: 84 but max is 0 [ 123.349067][ T5846] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 123.363831][ T5846] usb 2-1: config 1 has no interface number 0 [ 123.373319][ T5846] usb 2-1: config 1 interface 84 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.391838][ T5846] usb 2-1: config 1 interface 84 has no altsetting 0 [ 123.410063][ T5846] usb 2-1: New USB device found, idVendor=0411, idProduct=017f, bcdDevice=2d.c6 [ 123.425346][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.448619][ T5846] usb 2-1: Product: syz [ 123.453305][ T5846] usb 2-1: Manufacturer: syz [ 123.459139][ T5846] usb 2-1: SerialNumber: syz [ 123.478086][ T6633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.546819][ T6640] loop2: detected capacity change from 0 to 512 [ 123.585644][ T6640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 123.598620][ T6640] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.821843][ T5846] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 123.849609][ T5846] usb 2-1: USB disconnect, device number 2 [ 125.722049][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 125.821502][ T6660] netlink: 'syz.1.253': attribute type 7 has an invalid length. [ 125.985346][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 127.515875][ T6687] loop3: detected capacity change from 0 to 512 [ 127.593455][ T6687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.619495][ T6674] loop0: detected capacity change from 0 to 32768 [ 127.665474][ T6687] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.720864][ T6674] JBD2: Ignoring recovery information on journal [ 127.829542][ T6689] loop2: detected capacity change from 0 to 32768 [ 127.897892][ T6689] (syz.2.263,6689,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.951935][ T6689] (syz.2.263,6689,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.969012][ T6689] (syz.2.263,6689,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 128.001512][ T6674] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.515880][ T6689] JBD2: Ignoring recovery information on journal [ 128.735646][ T6689] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.940946][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 128.960246][ T6689] (syz.2.263,6689,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 129.048746][ T6689] (syz.2.263,6689,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 129.142952][ T6689] (syz.2.263,6689,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 129.183789][ T6689] (syz.2.263,6689,1):ocfs2_quota_read:201 ERROR: status = -5 [ 129.223198][ T6689] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 129.247801][ T6689] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 16877 [ 129.289448][ T6689] (syz.2.263,6689,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 129.479993][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 130.174541][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 130.848144][ T6719] loop1: detected capacity change from 0 to 4096 [ 130.874501][ T6719] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 130.977726][ T6719] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 130.997132][ T6724] netlink: 'syz.0.273': attribute type 7 has an invalid length. [ 131.480142][ T6720] loop3: detected capacity change from 0 to 32768 [ 131.557760][ T6720] JBD2: Ignoring recovery information on journal [ 131.619540][ T6720] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 131.635792][ T6715] loop2: detected capacity change from 0 to 40427 [ 131.653608][ T6715] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 131.661001][ T6715] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 131.672072][ T6715] F2FS-fs (loop2): invalid crc value [ 131.678241][ T6715] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 131.720429][ T6715] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.812950][ T6715] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 131.841515][ T6715] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.940378][ T6715] bio_check_eod: 2 callbacks suppressed [ 131.940395][ T6715] syz.2.266: attempt to access beyond end of device [ 131.940395][ T6715] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 131.968281][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 131.995834][ T6715] syz.2.266: attempt to access beyond end of device [ 131.995834][ T6715] loop2: rw=2049, sector=53272, nr_sectors = 24 limit=40427 [ 132.025107][ T6715] syz.2.266: attempt to access beyond end of device [ 132.025107][ T6715] loop2: rw=2049, sector=53312, nr_sectors = 32 limit=40427 [ 132.063154][ T6715] syz.2.266: attempt to access beyond end of device [ 132.063154][ T6715] loop2: rw=2049, sector=53360, nr_sectors = 24 limit=40427 [ 132.095025][ T6715] syz.2.266: attempt to access beyond end of device [ 132.095025][ T6715] loop2: rw=2049, sector=53400, nr_sectors = 16 limit=40427 [ 132.126709][ T6715] syz.2.266: attempt to access beyond end of device [ 132.126709][ T6715] loop2: rw=2049, sector=53448, nr_sectors = 32 limit=40427 [ 132.185700][ T5776] syz-executor: attempt to access beyond end of device [ 132.185700][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.218797][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 133.044945][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.051313][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.531101][ T6785] netlink: 'syz.2.291': attribute type 7 has an invalid length. [ 135.538155][ T6769] loop0: detected capacity change from 0 to 32768 [ 135.613505][ T6769] JBD2: Ignoring recovery information on journal [ 135.742660][ T6769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 135.849044][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 136.518724][ T6798] loop0: detected capacity change from 0 to 128 [ 136.684221][ T6798] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 136.699229][ T6798] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.390307][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 138.845525][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 138.929969][ T6814] bond1: entered promiscuous mode [ 138.948701][ T6814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.013992][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.301'. [ 139.120558][ T6825] gretap1: entered promiscuous mode [ 139.380692][ T6838] netlink: 'syz.2.308': attribute type 7 has an invalid length. [ 139.580189][ T6840] loop0: detected capacity change from 0 to 128 [ 139.663045][ T6840] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.681946][ T6840] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.309396][ T6847] loop1: detected capacity change from 0 to 32768 [ 141.339602][ T6847] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.310 (6847) [ 141.374257][ T6847] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 141.381301][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 141.385809][ T6847] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 141.403236][ T6847] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.452152][ T6847] BTRFS info (device loop1): use zstd compression, level 3 [ 141.471558][ T6847] BTRFS info (device loop1): using free space tree [ 141.629114][ T6847] BTRFS info (device loop1): enabling ssd optimizations [ 141.653585][ T6847] BTRFS info (device loop1): auto enabling async discard [ 141.741287][ T27] audit: type=1800 audit(1784893735.881:4): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.310" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 141.973001][ T5768] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.370372][ T6905] netlink: 'syz.1.325': attribute type 7 has an invalid length. [ 145.826510][ T6918] loop3: detected capacity change from 0 to 32768 [ 145.845755][ T6918] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.329 (6918) [ 145.907850][ T6918] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 145.955349][ T6918] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 145.981326][ T6918] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 146.012220][ T6918] BTRFS info (device loop3): use zstd compression, level 3 [ 146.036094][ T6918] BTRFS info (device loop3): using free space tree [ 146.128502][ T6918] BTRFS info (device loop3): enabling ssd optimizations [ 146.144540][ T6918] BTRFS info (device loop3): auto enabling async discard [ 146.224137][ T27] audit: type=1800 audit(1784893740.361:5): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.329" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 146.380171][ T5775] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 146.413902][ T6932] loop2: detected capacity change from 0 to 32768 [ 146.518929][ T6930] loop0: detected capacity change from 0 to 32768 [ 146.540847][ T6932] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 146.595825][ T6930] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.754655][ T6930] XFS (loop0): Ending clean mount [ 146.818701][ T6964] netlink: 84 bytes leftover after parsing attributes in process `syz.1.338'. [ 146.893350][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 147.866108][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.982519][ T6974] netlink: 'syz.3.344': attribute type 7 has an invalid length. [ 148.936401][ T6986] gretap1: entered promiscuous mode [ 153.510525][ T7050] netlink: 'syz.0.370': attribute type 7 has an invalid length. [ 155.989753][ T7079] netlink: 'syz.2.382': attribute type 7 has an invalid length. [ 156.072774][ T7082] loop1: detected capacity change from 0 to 128 [ 156.270163][ T7082] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 156.288527][ T7082] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.803406][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 158.923135][ T7102] syzkaller0: entered promiscuous mode [ 158.929961][ T7102] syzkaller0: entered allmulticast mode [ 158.959606][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 160.306163][ T7119] loop2: detected capacity change from 0 to 128 [ 162.064563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.474520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 164.624569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 165.240235][ T7119] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 165.240598][ T7119] EXT4-fs: failed to create workqueue [ 165.255695][ T7119] EXT4-fs (loop2): mount failed [ 165.375433][ T7125] batadv0: entered promiscuous mode [ 165.393714][ T7125] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 165.439043][ T7129] netlink: 'syz.3.396': attribute type 7 has an invalid length. [ 166.112195][ T7126] loop0: detected capacity change from 0 to 40427 [ 166.128514][ T7126] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 166.139292][ T7126] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 166.173640][ T7126] F2FS-fs (loop0): invalid crc value [ 166.189010][ T7126] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 166.408517][ T7126] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.414662][ T7126] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.477703][ T7126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.555562][ T5771] syz-executor: attempt to access beyond end of device [ 168.555562][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.599055][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 168.788066][ T7161] Bluetooth: MGMT ver 1.22 [ 168.817682][ T7161] xt_hashlimit: size too large, truncated to 1048576 [ 168.960270][ T7164] loop2: detected capacity change from 0 to 128 [ 169.248961][ T7164] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 169.282204][ T7164] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.891658][ T7174] netlink: 'syz.1.409': attribute type 7 has an invalid length. [ 170.782139][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 173.195040][ T7200] block nbd0: server does not support multiple connections per device. [ 173.217055][ T7200] block nbd0: shutting down sockets [ 173.223268][ T7208] syzkaller0: entered promiscuous mode [ 173.238077][ T7208] syzkaller0: entered allmulticast mode [ 173.272201][ T7200] syzkaller0: entered promiscuous mode [ 173.283011][ T7200] syzkaller0: entered allmulticast mode [ 173.602392][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 173.622023][ T7214] bond0: entered promiscuous mode [ 173.627610][ T7214] bond_slave_0: entered promiscuous mode [ 173.633549][ T7214] bond_slave_1: entered promiscuous mode [ 173.654757][ T7214] gretap0: entered promiscuous mode [ 173.663171][ T7214] hsr1: entered promiscuous mode [ 173.674637][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 173.806787][ T7221] netlink: 'syz.2.422': attribute type 7 has an invalid length. [ 175.450504][ T7241] batadv_slave_1: entered promiscuous mode [ 175.474894][ T7240] batadv_slave_1: left promiscuous mode [ 177.916098][ T7270] netlink: 'syz.2.441': attribute type 7 has an invalid length. [ 180.340820][ T7303] syzkaller0: entered promiscuous mode [ 180.356687][ T7303] syzkaller0: entered allmulticast mode [ 181.620958][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 182.312601][ T7343] syzkaller0: entered promiscuous mode [ 182.351294][ T7343] syzkaller0: entered allmulticast mode [ 182.871520][ T7348] netlink: 'syz.1.468': attribute type 7 has an invalid length. [ 182.932592][ T7350] syzkaller0: entered promiscuous mode [ 182.938237][ T7350] syzkaller0: entered allmulticast mode [ 182.951400][ T7350] 0: reclassify loop, rule prio 0, protocol 800 [ 183.040832][ T7351] netlink: 756 bytes leftover after parsing attributes in process `syz.3.470'. [ 184.969172][ T7379] syzkaller0: entered promiscuous mode [ 184.979119][ T7379] syzkaller0: entered allmulticast mode [ 186.047197][ T7393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.487'. [ 187.208404][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 188.638217][ T7422] netlink: 'syz.2.496': attribute type 7 has an invalid length. [ 189.392375][ T7429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.498'. [ 192.051858][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 192.072999][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 192.124097][ T7450] netlink: 'syz.0.505': attribute type 18 has an invalid length. [ 192.172127][ T7450] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.181509][ T7450] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.190459][ T7450] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.199199][ T7450] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.240147][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 192.250511][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 192.259441][ T7453] netlink: 'syz.0.505': attribute type 18 has an invalid length. [ 193.478133][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026bd0000: rx timeout, send abort [ 193.670507][ T7459] ip6erspan0: entered allmulticast mode [ 193.988163][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026bd0000: abort rx timeout. Force session deactivation [ 194.455684][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.462115][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.764694][ T7513] loop1: detected capacity change from 0 to 32768 [ 201.804603][ T7513] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.524 (7513) [ 201.867541][ T7513] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 201.888070][ T7513] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 201.909236][ T7513] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 201.933277][ T7513] BTRFS info (device loop1): use zstd compression, level 3 [ 201.949112][ T7513] BTRFS info (device loop1): using free space tree [ 202.064511][ T7513] BTRFS info (device loop1): enabling ssd optimizations [ 202.071597][ T7513] BTRFS info (device loop1): auto enabling async discard [ 202.172000][ T27] audit: type=1800 audit(1784893796.311:6): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.524" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 202.207797][ T7550] netlink: 'syz.2.532': attribute type 7 has an invalid length. [ 202.270004][ T5768] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 203.842004][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e1d8000: rx timeout, send abort [ 204.350380][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e1d8000: abort rx timeout. Force session deactivation [ 205.400473][ T7577] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 205.526939][ T7577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.550057][ T7579] netlink: 'syz.2.543': attribute type 7 has an invalid length. [ 208.148797][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b706c00: rx timeout, send abort [ 208.219337][ T7619] syzkaller0: entered promiscuous mode [ 208.282617][ T7615] block nbd0: server does not support multiple connections per device. [ 208.428683][ T7619] syzkaller0: entered allmulticast mode [ 208.657209][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b706c00: abort rx timeout. Force session deactivation [ 208.658585][ T7615] block nbd0: shutting down sockets [ 208.831312][ T7623] loop0: detected capacity change from 0 to 128 [ 208.854194][ T7623] FAT-fs (loop0): bogus number of reserved sectors [ 208.865835][ T7625] netlink: 'syz.1.554': attribute type 7 has an invalid length. [ 208.869272][ T7623] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 208.890769][ T7623] FAT-fs (loop0): Can't find a valid FAT filesystem [ 212.446333][ T7646] loop3: detected capacity change from 0 to 32768 [ 212.466719][ T7646] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.561 (7646) [ 212.624111][ T7646] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 212.667290][ T7646] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 212.676653][ T7646] BTRFS info (device loop3): using free space tree [ 213.340349][ T7646] BTRFS info (device loop3): enabling ssd optimizations [ 213.374233][ T7646] BTRFS info (device loop3): auto enabling async discard [ 213.595182][ T7678] block nbd0: server does not support multiple connections per device. [ 213.617787][ T7681] syzkaller0: entered promiscuous mode [ 213.634941][ T5775] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 213.645409][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b0d9c00: rx timeout, send abort [ 213.656949][ T7678] block nbd0: shutting down sockets [ 213.665531][ T7681] syzkaller0: entered allmulticast mode [ 214.145513][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b0d9c00: abort rx timeout. Force session deactivation [ 215.521749][ T7702] netlink: 'syz.2.574': attribute type 7 has an invalid length. [ 216.436937][ T7712] syzkaller0: entered promiscuous mode [ 216.457487][ T7712] syzkaller0: entered allmulticast mode [ 217.631546][ T7723] syzkaller0: entered promiscuous mode [ 217.676083][ T7723] syzkaller0: entered allmulticast mode [ 217.953222][ T7717] block nbd0: server does not support multiple connections per device. [ 218.132987][ T7717] block nbd0: shutting down sockets [ 220.081978][ T7748] syzkaller0: entered promiscuous mode [ 220.088054][ T7748] syzkaller0: entered allmulticast mode [ 220.196740][ T7752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.589'. [ 220.240344][ T7755] bridge0: port 3(vlan2) entered blocking state [ 220.250162][ T7755] bridge0: port 3(vlan2) entered disabled state [ 220.270081][ T7755] vlan2: entered allmulticast mode [ 220.294620][ T7755] geneve0: entered allmulticast mode [ 220.318747][ T7755] vlan2: entered promiscuous mode [ 220.323913][ T7755] geneve0: entered promiscuous mode [ 220.358567][ T7752] netlink: 'syz.1.589': attribute type 5 has an invalid length. [ 220.391937][ T7752] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 220.420200][ T7752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.589'. [ 220.494482][ T7760] netlink: 'syz.2.592': attribute type 7 has an invalid length. [ 222.213579][ T7767] loop0: detected capacity change from 0 to 40427 [ 222.251893][ T7767] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 222.314240][ T7767] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 222.471297][ T7767] F2FS-fs (loop0): invalid crc value [ 222.543511][ T7767] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 222.570678][ T7779] syzkaller0: entered promiscuous mode [ 222.645810][ T7779] syzkaller0: entered allmulticast mode [ 222.830237][ T7767] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.072994][ T7767] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 223.120300][ T7767] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.242371][ T5771] syz-executor: attempt to access beyond end of device [ 223.242371][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.289361][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.673164][ T7796] syzkaller0: entered promiscuous mode [ 223.684673][ T7796] syzkaller0: entered allmulticast mode [ 226.042990][ T5846] IPVS: starting estimator thread 0... [ 226.048856][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c8f8400: rx timeout, send abort [ 226.100662][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 226.111481][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'. [ 226.121732][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 226.130633][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'. [ 226.184905][ T7822] IPVS: using max 19 ests per chain, 45600 per kthread [ 226.272413][ T7831] syzkaller0: entered promiscuous mode [ 226.284450][ T7831] syzkaller0: entered allmulticast mode [ 226.548912][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c8f8400: abort rx timeout. Force session deactivation [ 228.370752][ T7862] syzkaller0: entered promiscuous mode [ 228.386868][ T7862] syzkaller0: entered allmulticast mode [ 228.465440][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 228.475242][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'. [ 228.490763][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 228.574004][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'. [ 230.450828][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b57ac00: rx timeout, send abort [ 230.959357][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b57ac00: abort rx timeout. Force session deactivation [ 231.257967][ T7890] syzkaller0: entered promiscuous mode [ 231.265400][ T7890] syzkaller0: entered allmulticast mode [ 233.667507][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ac83400: rx timeout, send abort [ 234.175904][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ac83400: abort rx timeout. Force session deactivation [ 237.954084][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b769400: rx timeout, send abort [ 238.462584][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b769400: abort rx timeout. Force session deactivation [ 238.866515][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 239.435649][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 241.372698][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805b4bf400: rx timeout, send abort [ 241.881098][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805b4bf400: abort rx timeout. Force session deactivation [ 242.455765][ T8063] netlink: 'syz.2.691': attribute type 7 has an invalid length. [ 243.279690][ T8070] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 243.292927][ T8070] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 243.303030][ T8070] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 243.312240][ T8068] block nbd0: server does not support multiple connections per device. [ 243.326289][ T8068] block nbd0: shutting down sockets [ 243.431798][ T8072] syzkaller0: entered promiscuous mode [ 243.437590][ T8072] syzkaller0: entered allmulticast mode [ 244.669495][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b03d800: rx timeout, send abort [ 245.177864][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b03d800: abort rx timeout. Force session deactivation [ 246.936348][ T8099] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 246.944677][ T8099] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 246.954966][ T8099] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 246.973492][ T8101] netlink: 'syz.0.704': attribute type 7 has an invalid length. [ 247.315937][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 247.338097][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.708'. [ 248.584633][ T8124] block nbd0: server does not support multiple connections per device. [ 248.599664][ T8124] block nbd0: shutting down sockets [ 248.670212][ T8125] syzkaller0: entered promiscuous mode [ 248.680336][ T8125] syzkaller0: entered allmulticast mode [ 249.225957][ T8132] netlink: 'syz.3.714': attribute type 29 has an invalid length. [ 250.220214][ T8132] netlink: 'syz.3.714': attribute type 29 has an invalid length. [ 250.523119][ T8143] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 250.549484][ T8143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.556768][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 250.569777][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.718'. [ 250.764951][ T8152] netlink: 'syz.2.721': attribute type 7 has an invalid length. [ 251.514890][ T8161] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 251.523101][ T8161] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 251.537428][ T8161] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 251.695274][ T8164] block nbd0: server does not support multiple connections per device. [ 251.706299][ T8164] block nbd0: shutting down sockets [ 251.785127][ T8165] syzkaller0: entered promiscuous mode [ 251.790717][ T8165] syzkaller0: entered allmulticast mode [ 253.595204][ T8176] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 253.603182][ T8176] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 253.604689][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 253.622775][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'. [ 253.787791][ T8186] netlink: 'syz.3.732': attribute type 29 has an invalid length. [ 253.796356][ T8186] netlink: 'syz.3.732': attribute type 29 has an invalid length. [ 255.187038][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.206469][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.214295][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.225691][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.233343][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 255.242754][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.682591][ T8200] chnl_net:caif_netlink_parms(): no params data found [ 255.892599][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.899084][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.933575][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.946583][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.953914][ T8200] bridge_slave_0: entered allmulticast mode [ 255.971245][ T8200] bridge_slave_0: entered promiscuous mode [ 255.982419][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 255.992794][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 256.025443][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.051405][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.085643][ T8200] bridge_slave_1: entered allmulticast mode [ 256.092946][ T8200] bridge_slave_1: entered promiscuous mode [ 256.175334][ T8216] block nbd0: server does not support multiple connections per device. [ 256.190306][ T8223] validate_nla: 2 callbacks suppressed [ 256.190321][ T8223] netlink: 'syz.2.741': attribute type 29 has an invalid length. [ 256.222324][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.231613][ T8216] block nbd0: shutting down sockets [ 256.247388][ T8223] netlink: 'syz.2.741': attribute type 29 has an invalid length. [ 256.262920][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.334312][ T8216] syzkaller0: entered promiscuous mode [ 256.344167][ T8216] syzkaller0: entered allmulticast mode [ 256.354576][ T8223] netlink: 'syz.2.741': attribute type 29 has an invalid length. [ 257.325702][ T5773] Bluetooth: hci4: command tx timeout [ 258.995008][ T8256] netlink: 'syz.2.750': attribute type 29 has an invalid length. [ 259.404742][ T5773] Bluetooth: hci4: command tx timeout [ 259.422396][ T8256] netlink: 'syz.2.750': attribute type 29 has an invalid length. [ 259.437025][ T8200] team0: Port device team_slave_0 added [ 259.443118][ T8257] netlink: 'syz.2.750': attribute type 29 has an invalid length. [ 259.469720][ T8200] team0: Port device team_slave_1 added [ 259.562394][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.572465][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.617811][ T8200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.668303][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.710412][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.749956][ T8200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.941207][ T8269] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 259.967585][ T8269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.599392][ T8200] hsr_slave_0: entered promiscuous mode [ 260.644175][ T8200] hsr_slave_1: entered promiscuous mode [ 260.685071][ T8200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.714558][ T8200] Cannot create hsr debugfs directory [ 260.838341][ T8269] bond1: (slave geneve2): making interface the new active one [ 260.878160][ T8269] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 261.005403][ T8280] block nbd0: server does not support multiple connections per device. [ 261.024569][ T8280] block nbd0: shutting down sockets [ 261.059977][ T8269] syz.3.753 (8269) used greatest stack depth: 20024 bytes left [ 261.192630][ T8283] netlink: 'syz.3.759': attribute type 29 has an invalid length. [ 261.196345][ T8200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.242778][ T8283] netlink: 'syz.3.759': attribute type 29 has an invalid length. [ 261.265707][ T8200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.287556][ T8284] netlink: 'syz.3.759': attribute type 29 has an invalid length. [ 261.309361][ T8200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.338409][ T8200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.486581][ T5773] Bluetooth: hci4: command tx timeout [ 261.510334][ T8290] ip6erspan0: entered allmulticast mode [ 261.567183][ T8200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.647664][ T8200] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.682888][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.690036][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.722008][ T2110] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.729267][ T2110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.866219][ T8200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.719156][ T8307] netlink: 'syz.2.769': attribute type 29 has an invalid length. [ 262.745419][ T8307] netlink: 'syz.2.769': attribute type 29 has an invalid length. [ 262.755810][ T8307] netlink: 'syz.2.769': attribute type 29 has an invalid length. [ 262.766093][ T8304] block nbd0: server does not support multiple connections per device. [ 262.794740][ T8304] block nbd0: shutting down sockets [ 262.918098][ T8313] vlan0: entered allmulticast mode [ 262.929506][ T8313] veth0_vlan: entered allmulticast mode [ 263.066097][ T8200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.427540][ T8333] netlink: 'syz.0.777': attribute type 29 has an invalid length. [ 263.459402][ T8333] netlink: 'syz.0.777': attribute type 29 has an invalid length. [ 263.477521][ T8333] netlink: 'syz.0.777': attribute type 29 has an invalid length. [ 263.564690][ T5773] Bluetooth: hci4: command tx timeout [ 263.814896][ T8339] block nbd0: server does not support multiple connections per device. [ 263.823597][ T8339] block nbd0: shutting down sockets [ 263.923131][ T8200] veth0_vlan: entered promiscuous mode [ 263.966213][ T8200] veth1_vlan: entered promiscuous mode [ 264.020842][ T8200] veth0_macvtap: entered promiscuous mode [ 264.042723][ T8200] veth1_macvtap: entered promiscuous mode [ 264.074157][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.096984][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.107563][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.118151][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.128623][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.139476][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.149821][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.161141][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.174146][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.182848][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 264.192910][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 264.219532][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.243749][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.274569][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.301542][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.316511][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.330525][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.340723][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.352728][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.366908][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.387961][ T8200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.414803][ T8200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.442170][ T8200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.461192][ T8200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.586580][ T7171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.604854][ T7171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.673640][ T7171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.684283][ T7171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.756842][ T8356] netlink: 'syz.3.786': attribute type 29 has an invalid length. [ 264.769251][ T8356] netlink: 'syz.3.786': attribute type 29 has an invalid length. [ 265.308126][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802f590800: rx timeout, send abort [ 265.394944][ T8377] block nbd0: server does not support multiple connections per device. [ 265.403566][ T8377] block nbd0: shutting down sockets [ 265.523000][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 265.545236][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 265.816528][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802f590800: abort rx timeout. Force session deactivation [ 266.964937][ T8408] syzkaller0: entered promiscuous mode [ 266.994580][ T8408] syzkaller0: entered allmulticast mode [ 267.145432][ T8410] block nbd0: server does not support multiple connections per device. [ 267.180535][ T8410] block nbd0: shutting down sockets [ 268.925840][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 268.935011][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 269.038530][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ac2dc00: rx timeout, send abort [ 269.056607][ T8425] validate_nla: 4 callbacks suppressed [ 269.056623][ T8425] netlink: 'syz.0.805': attribute type 29 has an invalid length. [ 269.070390][ T8425] netlink: 'syz.0.805': attribute type 29 has an invalid length. [ 269.080765][ T8425] netlink: 'syz.0.805': attribute type 29 has an invalid length. [ 269.290491][ T8430] tc action pedit offset 132 out of bounds [ 269.296680][ T8430] tc action pedit offset 132 out of bounds [ 269.302492][ T8430] tc action pedit offset 132 out of bounds [ 269.308317][ T8430] tc action pedit offset 132 out of bounds [ 269.314106][ T8430] tc action pedit offset 132 out of bounds [ 269.319914][ T8430] tc action pedit offset 132 out of bounds [ 269.325722][ T8430] tc action pedit offset 132 out of bounds [ 269.331507][ T8430] tc action pedit offset 132 out of bounds [ 269.337427][ T8430] tc action pedit offset 132 out of bounds [ 269.343243][ T8430] tc action pedit offset 132 out of bounds [ 269.349073][ T8430] 0: reclassify loop, rule prio 0, protocol 800 [ 269.546930][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ac2dc00: abort rx timeout. Force session deactivation [ 269.715824][ T8435] loop2: detected capacity change from 0 to 512 [ 269.810966][ T8435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 269.813252][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 269.834159][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.812'. [ 269.837731][ T8435] ext4 filesystem being mounted at /229/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.583047][ T8454] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 270.624574][ T8454] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 270.674944][ T8454] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 271.211278][ T8464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.816'. [ 271.247019][ T8461] block nbd0: server does not support multiple connections per device. [ 271.286851][ T8461] block nbd0: shutting down sockets [ 271.869455][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 272.367671][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 272.397824][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'. [ 272.516125][ T8486] netlink: 'syz.4.823': attribute type 29 has an invalid length. [ 272.622422][ T8486] netlink: 'syz.4.823': attribute type 29 has an invalid length. [ 272.640547][ T8490] netlink: 'syz.4.823': attribute type 29 has an invalid length. [ 272.741086][ T8489] syzkaller0: entered promiscuous mode [ 272.764640][ T8489] syzkaller0: entered allmulticast mode [ 272.942997][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c823c00: rx timeout, send abort [ 273.454809][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c823c00: abort rx timeout. Force session deactivation [ 274.365155][ T8494] syzkaller0: entered promiscuous mode [ 274.370642][ T8494] syzkaller0: entered allmulticast mode [ 274.434667][ T8498] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 274.442961][ T8498] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 274.649249][ T8504] loop2: detected capacity change from 0 to 512 [ 274.729728][ T8509] syzkaller0: entered promiscuous mode [ 274.737736][ T8502] block nbd0: server does not support multiple connections per device. [ 274.756936][ T8509] syzkaller0: entered allmulticast mode [ 274.765374][ T8502] block nbd0: shutting down sockets [ 274.771196][ T8508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.830'. [ 274.795450][ T8504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 274.898132][ T8504] ext4 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.852476][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.832'. [ 275.877648][ T8524] netlink: 'syz.0.833': attribute type 29 has an invalid length. [ 275.902194][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 275.920252][ T8524] netlink: 'syz.0.833': attribute type 29 has an invalid length. [ 275.954984][ T8524] netlink: 'syz.0.833': attribute type 29 has an invalid length. [ 276.255679][ T8528] syzkaller0: entered promiscuous mode [ 276.261203][ T8528] syzkaller0: entered allmulticast mode [ 276.633918][ T8530] syzkaller0: entered promiscuous mode [ 276.653034][ T8530] syzkaller0: entered allmulticast mode [ 276.945356][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 277.452732][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888025b8c400: rx timeout, send abort [ 277.961141][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888025b8c400: abort rx timeout. Force session deactivation [ 278.725183][ T8537] netlink: 'syz.2.837': attribute type 1 has an invalid length. [ 278.734011][ T8537] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 278.741805][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.840'. [ 278.796509][ T8542] gretap1: entered promiscuous mode [ 278.827789][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 278.842304][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.842'. [ 278.865788][ T8549] netlink: 'syz.2.843': attribute type 29 has an invalid length. [ 278.890424][ T8549] netlink: 'syz.2.843': attribute type 29 has an invalid length. [ 278.927118][ T8553] netlink: 'syz.2.843': attribute type 29 has an invalid length. [ 279.069811][ T8558] loop3: detected capacity change from 0 to 512 [ 279.136792][ T8558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 279.149933][ T8558] ext4 filesystem being mounted at /199/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.275844][ T8568] syzkaller0: entered promiscuous mode [ 279.320366][ T8568] syzkaller0: entered allmulticast mode [ 279.405032][ T8567] block nbd0: server does not support multiple connections per device. [ 279.489021][ T8567] block nbd0: shutting down sockets [ 281.082860][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 281.350126][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 281.361340][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.853'. [ 281.440812][ T8583] syzkaller0: entered promiscuous mode [ 281.446959][ T8583] syzkaller0: entered allmulticast mode [ 281.480938][ T8588] netlink: 'syz.0.854': attribute type 29 has an invalid length. [ 282.577526][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c17bc00: rx timeout, send abort [ 283.087908][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c17bc00: abort rx timeout. Force session deactivation [ 283.162852][ T8588] netlink: 'syz.0.854': attribute type 29 has an invalid length. [ 283.343467][ T8602] loop0: detected capacity change from 0 to 512 [ 283.402448][ T8602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 283.416060][ T8602] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.791018][ T8615] block nbd0: server does not support multiple connections per device. [ 283.819642][ T8619] syzkaller0: entered promiscuous mode [ 284.074285][ T8615] block nbd0: shutting down sockets [ 284.244341][ T8619] syzkaller0: entered allmulticast mode [ 284.620015][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 284.679905][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 284.710376][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 284.759254][ T8627] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.768425][ T8627] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.777266][ T8627] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.786241][ T8627] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.031658][ T8631] netlink: 'syz.3.865': attribute type 29 has an invalid length. [ 285.044802][ T8631] netlink: 'syz.3.865': attribute type 29 has an invalid length. [ 285.073271][ T8631] netlink: 'syz.3.865': attribute type 29 has an invalid length. [ 285.505517][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 285.722626][ T8642] syzkaller0: entered promiscuous mode [ 285.734686][ T8642] syzkaller0: entered allmulticast mode [ 285.991712][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801fb8d000: rx timeout, send abort [ 286.500181][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801fb8d000: abort rx timeout. Force session deactivation [ 286.991790][ T8662] netlink: 'syz.4.874': attribute type 29 has an invalid length. [ 287.763816][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 287.786888][ T8662] netlink: 'syz.4.874': attribute type 29 has an invalid length. [ 287.800046][ T8663] netlink: 'syz.4.874': attribute type 29 has an invalid length. [ 287.942491][ T8667] loop4: detected capacity change from 0 to 512 [ 288.015257][ T8667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 288.095792][ T8667] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.701438][ T8699] syzkaller0: entered promiscuous mode [ 289.719791][ T8699] syzkaller0: entered allmulticast mode [ 290.247028][ T8200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 290.407099][ T8704] netlink: 'syz.4.884': attribute type 29 has an invalid length. [ 290.658908][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805b631800: rx timeout, send abort [ 291.167286][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805b631800: abort rx timeout. Force session deactivation [ 292.059546][ T8704] netlink: 'syz.4.884': attribute type 29 has an invalid length. [ 292.068588][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 292.116994][ T8719] gretap1: entered promiscuous mode [ 292.247134][ T8718] syz.2.889 (8718) used greatest stack depth: 17656 bytes left [ 292.303239][ T8729] syzkaller0: entered promiscuous mode [ 292.314470][ T8729] syzkaller0: entered allmulticast mode [ 292.349043][ T8729] tipc: Started in network mode [ 292.354112][ T8729] tipc: Node identity faf21f45b3ee, cluster identity 4711 [ 292.371379][ T8729] tipc: Enabled bearer , priority 0 [ 292.408136][ T8729] tipc: Resetting bearer [ 292.436211][ T8728] tipc: Resetting bearer [ 292.473497][ T8728] tipc: Disabling bearer [ 292.597637][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.896'. [ 292.617375][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.786452][ T8746] netlink: 'syz.0.898': attribute type 29 has an invalid length. [ 292.807421][ T8746] netlink: 'syz.0.898': attribute type 29 has an invalid length. [ 292.821660][ T8748] syzkaller0: entered promiscuous mode [ 292.830569][ T8748] syzkaller0: entered allmulticast mode [ 292.837935][ T8746] netlink: 'syz.0.898': attribute type 29 has an invalid length. [ 293.173983][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 293.188814][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 293.198226][ T8760] netlink: 'syz.3.903': attribute type 18 has an invalid length. [ 293.212011][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 293.746340][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b741800: rx timeout, send abort [ 293.951474][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 293.999874][ T8771] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 294.014812][ T8771] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 294.023671][ T8771] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 294.254837][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b741800: abort rx timeout. Force session deactivation [ 294.375934][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 294.385306][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 294.405430][ T8782] netlink: 'syz.4.912': attribute type 18 has an invalid length. [ 294.445521][ T8782] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.454310][ T8782] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.463139][ T8782] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.472273][ T8782] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.575440][ T8784] syzkaller0: entered promiscuous mode [ 294.595856][ T8784] syzkaller0: entered allmulticast mode [ 294.868220][ T8805] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 294.912039][ T8805] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 295.037382][ T8812] netlink: 'syz.2.918': attribute type 16 has an invalid length. [ 295.364863][ T8823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.924'. [ 296.305770][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026838c00: rx timeout, send abort [ 296.814151][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026838c00: abort rx timeout. Force session deactivation [ 296.834963][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 296.896921][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.938'. [ 298.459054][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.952'. [ 299.387198][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ac63c00: rx timeout, send abort [ 299.895701][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ac63c00: abort rx timeout. Force session deactivation [ 301.857409][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026bc1000: rx timeout, send abort [ 302.365842][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026bc1000: abort rx timeout. Force session deactivation [ 302.733659][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 302.759719][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 302.786613][ T9033] validate_nla: 1 callbacks suppressed [ 302.786627][ T9033] netlink: 'syz.0.996': attribute type 18 has an invalid length. [ 302.817615][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 302.828077][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 302.837232][ T9036] netlink: 'syz.0.996': attribute type 18 has an invalid length. [ 303.040752][ T9038] syzkaller1: entered promiscuous mode [ 303.064490][ T9038] syzkaller1: entered allmulticast mode [ 303.363520][ T5773] Bluetooth: hci4: link tx timeout [ 303.370424][ T5773] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.560464][ T5773] Bluetooth: hci4: link tx timeout [ 304.565867][ T5773] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.784806][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805bf14c00: rx timeout, send abort [ 305.047804][ T9092] sctp: [Deprecated]: syz.3.1018 (pid 9092) Use of int in maxseg socket option. [ 305.047804][ T9092] Use struct sctp_assoc_value instead [ 305.065766][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 305.080052][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 305.298760][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805bf14c00: abort rx timeout. Force session deactivation [ 305.404575][ T5773] Bluetooth: hci4: command 0x0406 tx timeout [ 306.371156][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 306.400409][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 306.706567][ T9132] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 306.738023][ T9132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.767343][ T9137] syzkaller0: entered promiscuous mode [ 306.772862][ T9137] syzkaller0: entered allmulticast mode [ 306.793485][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.806575][ T9132] bond1: (slave bond0): making interface the new active one [ 306.817203][ T9132] bond1: (slave bond0): Enslaving as an active interface with an up link [ 306.867960][ T9132] bond1: entered promiscuous mode [ 306.873014][ T9132] bond0: entered promiscuous mode [ 306.878167][ T9132] bond_slave_0: entered promiscuous mode [ 306.884014][ T9132] bond_slave_1: entered promiscuous mode [ 306.890118][ T9132] bond1: entered allmulticast mode [ 306.904452][ T9132] bond0: entered allmulticast mode [ 306.909632][ T9132] bond_slave_0: entered allmulticast mode [ 306.917343][ T9132] bond_slave_1: entered allmulticast mode [ 307.081213][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 307.493685][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 307.544515][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 307.898091][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880217f7000: rx timeout, send abort [ 308.406473][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880217f7000: abort rx timeout. Force session deactivation [ 308.850635][ T9178] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 309.242942][ T9182] syzkaller0: entered promiscuous mode [ 309.259161][ T9182] syzkaller0: entered allmulticast mode [ 309.600248][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 309.618522][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1048'. [ 310.181377][ T9213] netlink: 'syz.4.1053': attribute type 12 has an invalid length. [ 310.204641][ T9213] netlink: 'syz.4.1053': attribute type 29 has an invalid length. [ 310.212496][ T9213] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1053'. [ 310.243002][ T9213] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 310.262167][ T9213] netlink: 'syz.4.1053': attribute type 2 has an invalid length. [ 310.270373][ T9213] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1053'. [ 310.555671][ T9224] syzkaller0: entered promiscuous mode [ 310.566184][ T9224] syzkaller0: entered allmulticast mode [ 310.842357][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 310.866124][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1060'. [ 310.926579][ T9234] sctp: [Deprecated]: syz.4.1062 (pid 9234) Use of int in maxseg socket option. [ 310.926579][ T9234] Use struct sctp_assoc_value instead [ 311.296721][ T9246] ipt_REJECT: ECHOREPLY no longer supported. [ 311.323256][ T969] IPVS: starting estimator thread 0... [ 311.336070][ T9246] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 311.425741][ T9251] IPVS: using max 19 ests per chain, 45600 per kthread [ 311.488315][ T9254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1066'. [ 311.822400][ T9259] syzkaller0: entered promiscuous mode [ 311.832231][ T9259] syzkaller0: entered allmulticast mode [ 312.091504][ T9267] tipc: Enabled bearer , priority 0 [ 312.276706][ T9263] tipc: Disabling bearer [ 312.626528][ T9283] syzkaller0: entered promiscuous mode [ 312.634556][ T9283] syzkaller0: entered allmulticast mode [ 312.777770][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1081'. [ 312.879661][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 312.902377][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 312.921912][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 312.946972][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 313.163180][ T9301] syzkaller1: entered promiscuous mode [ 313.177405][ T9301] syzkaller1: entered allmulticast mode [ 314.798735][ T9354] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 314.840880][ T9354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.875329][ T9354] bond2: entered promiscuous mode [ 314.880627][ T9354] bond2: entered allmulticast mode [ 314.927447][ T9354] bond2: (slave dummy0): making interface the new active one [ 314.990400][ T9354] dummy0: entered promiscuous mode [ 315.018892][ T9354] dummy0: entered allmulticast mode [ 315.077370][ T9354] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 315.151801][ T9363] syzkaller0: entered promiscuous mode [ 315.184606][ T9363] syzkaller0: entered allmulticast mode [ 315.379087][ T9366] __nla_validate_parse: 10 callbacks suppressed [ 315.379102][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 315.405683][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 315.432937][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 315.459235][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 315.784263][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1117'. [ 315.875995][ T9386] syzkaller0: entered promiscuous mode [ 315.892612][ T9386] syzkaller0: entered allmulticast mode [ 316.405696][ T9395] syzkaller0: entered promiscuous mode [ 316.444730][ T9395] syzkaller0: entered allmulticast mode [ 316.561276][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 316.572382][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'. [ 316.600602][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 316.644564][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'. [ 316.810320][ T9411] syzkaller0: entered promiscuous mode [ 316.816008][ T9411] syzkaller0: entered allmulticast mode [ 317.327056][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.344503][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.781966][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1132'. [ 317.962233][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f5b5800: rx timeout, send abort [ 318.470587][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f5b5800: abort rx timeout. Force session deactivation [ 318.676535][ T9440] syzkaller0: entered promiscuous mode [ 318.682242][ T9440] syzkaller0: entered allmulticast mode [ 319.013047][ T9446] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 319.057265][ T9446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.091190][ T9446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.112233][ T9446] bond1: (slave bond0): making interface the new active one [ 319.122004][ T9446] bond1: (slave bond0): Enslaving as an active interface with an up link [ 319.150978][ T9446] bond1: entered promiscuous mode [ 319.166518][ T9446] bond0: entered promiscuous mode [ 319.171592][ T9446] bond_slave_0: entered promiscuous mode [ 319.178061][ T9446] bond_slave_1: entered promiscuous mode [ 319.184060][ T9446] bond1: entered allmulticast mode [ 319.189923][ T9446] bond0: entered allmulticast mode [ 319.195488][ T9446] bond_slave_0: entered allmulticast mode [ 319.201317][ T9446] bond_slave_1: entered allmulticast mode [ 319.757303][ T9407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.921612][ T9471] __nla_validate_parse: 5 callbacks suppressed [ 320.921627][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 320.964929][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 320.977008][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 320.995622][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 321.026052][ T9474] sctp: [Deprecated]: syz.2.1147 (pid 9474) Use of int in maxseg socket option. [ 321.026052][ T9474] Use struct sctp_assoc_value instead [ 321.176811][ T9478] syzkaller0: entered promiscuous mode [ 321.182373][ T9478] syzkaller0: entered allmulticast mode [ 321.309984][ T9480] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 321.360917][ T9480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.421594][ T9480] bond2: (slave dummy0): making interface the new active one [ 321.433609][ T9480] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 321.447826][ T969] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 321.634611][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 321.646923][ T969] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 321.652750][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026bd8400: rx timeout, send abort [ 321.713796][ T969] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 321.722726][ T969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.735538][ T969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 321.744703][ T969] usb 4-1: config 1 has no interface number 0 [ 321.750875][ T969] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 321.760145][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.784253][ T969] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 321.995880][ T9477] can0: slcan on ttyS3. [ 322.075541][ T9475] can0 (unregistered): slcan off ttyS3. [ 322.083612][ T969] snd_usb_pod 4-1:1.1: set_interface failed [ 322.091788][ T969] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 322.099415][ T969] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 322.109142][ T969] usb 4-1: USB disconnect, device number 2 [ 322.163747][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026bd8400: abort rx timeout. Force session deactivation [ 322.656140][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1153'. [ 323.406057][ T9503] sctp: [Deprecated]: syz.3.1156 (pid 9503) Use of int in maxseg socket option. [ 323.406057][ T9503] Use struct sctp_assoc_value instead [ 324.031187][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 324.040353][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1157'. [ 324.055522][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 324.067828][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1157'. [ 324.119318][ T9510] syzkaller0: entered promiscuous mode [ 324.127451][ T9510] syzkaller0: entered allmulticast mode [ 324.547448][ T9484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.744053][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 325.374116][ T1197] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 325.568911][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054ca6400: rx timeout, send abort [ 325.582839][ T1197] usb 5-1: Using ep0 maxpacket: 32 [ 325.590511][ T1197] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 325.601167][ T1197] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 325.610960][ T1197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.621345][ T1197] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 325.630714][ T1197] usb 5-1: config 1 has no interface number 0 [ 325.637265][ T1197] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 325.647845][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.682673][ T1197] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 325.943854][ T9518] can0: slcan on ttyS3. [ 326.075313][ T9517] can0 (unregistered): slcan off ttyS3. [ 326.080944][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054ca6400: abort rx timeout. Force session deactivation [ 326.099150][ T1197] snd_usb_pod 5-1:1.1: set_interface failed [ 326.143574][ T1197] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 326.161300][ T1197] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 326.222637][ T1197] usb 5-1: USB disconnect, device number 2 [ 326.294887][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 326.332028][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 326.372378][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 326.402537][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 326.442631][ T9551] syzkaller0: entered promiscuous mode [ 326.454783][ T9551] syzkaller0: entered allmulticast mode [ 326.797314][ T9570] sctp: [Deprecated]: syz.4.1171 (pid 9570) Use of int in maxseg socket option. [ 326.797314][ T9570] Use struct sctp_assoc_value instead [ 326.940480][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1172'. [ 327.906982][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 327.922294][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1176'. [ 327.950408][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 327.963772][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1176'. [ 328.439945][ T9604] syzkaller0: entered promiscuous mode [ 328.449015][ T9604] syzkaller0: entered allmulticast mode [ 329.004776][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 329.204636][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 329.212982][ T28] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 329.221582][ T28] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 329.230337][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.240588][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 329.249592][ T28] usb 4-1: config 1 has no interface number 0 [ 329.255756][ T28] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 329.264878][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.278869][ T28] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 329.494552][ T9606] can0: slcan on ttyS3. [ 329.546558][ T9605] can0 (unregistered): slcan off ttyS3. [ 329.555620][ T28] snd_usb_pod 4-1:1.1: set_interface failed [ 329.561733][ T28] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 329.569355][ T28] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 329.583164][ T28] usb 4-1: USB disconnect, device number 3 [ 329.768532][ T9569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.900383][ T9609] syzkaller0: entered promiscuous mode [ 329.906307][ T9609] syzkaller0: entered allmulticast mode [ 330.518775][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 330.857352][ T9647] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 330.936778][ T9647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.978703][ T9649] bond3: entered promiscuous mode [ 330.983823][ T9649] bond3: entered allmulticast mode [ 331.258340][ T9657] sctp: [Deprecated]: syz.0.1188 (pid 9657) Use of int in maxseg socket option. [ 331.258340][ T9657] Use struct sctp_assoc_value instead [ 331.274307][ T9658] syzkaller0: entered promiscuous mode [ 331.283124][ T9658] syzkaller0: entered allmulticast mode [ 331.895220][ T5811] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 332.000920][ T9686] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 332.094805][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 332.107948][ T5811] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 332.124708][ T5811] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 332.143608][ T5811] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.145522][ T9686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.164764][ T5811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 332.173743][ T5811] usb 5-1: config 1 has no interface number 0 [ 332.183132][ T9693] __nla_validate_parse: 4 callbacks suppressed [ 332.183146][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 332.197380][ T5811] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 332.209997][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.219108][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 332.238304][ T5811] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 332.245642][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1194'. [ 332.256246][ T9688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'. [ 332.284111][ T9688] bond3: entered promiscuous mode [ 332.301370][ T9688] bond3: entered allmulticast mode [ 332.320731][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 332.341966][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1194'. [ 332.451934][ T9669] can0: slcan on ttyS3. [ 332.705360][ T9667] can0 (unregistered): slcan off ttyS3. [ 332.725611][ T5811] snd_usb_pod 5-1:1.1: set_interface failed [ 332.734317][ T5811] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 332.754679][ T5811] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 332.785589][ T5811] usb 5-1: USB disconnect, device number 3 [ 332.909876][ T9701] syzkaller0: entered promiscuous mode [ 333.022133][ T9701] syzkaller0: entered allmulticast mode [ 333.046647][ T9714] syzkaller0: entered promiscuous mode [ 333.062622][ T9714] syzkaller0: entered allmulticast mode [ 333.421425][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'. [ 333.539193][ T9725] sctp: [Deprecated]: syz.3.1200 (pid 9725) Use of int in maxseg socket option. [ 333.539193][ T9725] Use struct sctp_assoc_value instead [ 336.031979][ T9767] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 336.141083][ T9767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.167651][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 336.182824][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 336.193577][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 336.209828][ T9767] bond4: entered promiscuous mode [ 336.225184][ T9767] bond4: entered allmulticast mode [ 336.434516][ T6853] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 336.619897][ T6853] usb 4-1: Using ep0 maxpacket: 32 [ 336.621804][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.633372][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.641324][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.642970][ T6853] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 336.649218][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.665441][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.673348][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.681050][ T6853] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 336.681076][ T6853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.681094][ T6853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 336.681115][ T6853] usb 4-1: config 1 has no interface number 0 [ 336.689857][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.723073][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.730995][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.738916][ T9782] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.739375][ T6853] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 336.817942][ T6853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.888302][ T6853] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 337.037295][ T9796] sctp: [Deprecated]: syz.4.1213 (pid 9796) Use of int in maxseg socket option. [ 337.037295][ T9796] Use struct sctp_assoc_value instead [ 337.086361][ T9771] can0: slcan on ttyS3. [ 337.206401][ T9770] can0 (unregistered): slcan off ttyS3. [ 337.212994][ T6853] snd_usb_pod 4-1:1.1: set_interface failed [ 337.239979][ T6853] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 337.249404][ T9799] syzkaller0: entered promiscuous mode [ 337.262027][ T9799] syzkaller0: entered allmulticast mode [ 337.274769][ T6853] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 337.308444][ T6853] usb 4-1: USB disconnect, device number 4 [ 337.576914][ T9809] __nla_validate_parse: 4 callbacks suppressed [ 337.576930][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 337.626026][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'. [ 337.652487][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 337.675612][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'. [ 337.699899][ T9812] netlink: 'syz.0.1217': attribute type 1 has an invalid length. [ 337.758564][ T9812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.840615][ T9822] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1220'. [ 337.860315][ T9820] bond1: (slave bond0): Releasing active interface [ 337.874491][ T9820] bond0: left promiscuous mode [ 337.879293][ T9820] bond_slave_0: left promiscuous mode [ 337.893869][ T9820] bond_slave_1: left promiscuous mode [ 337.899921][ T9820] bond0: left allmulticast mode [ 337.904835][ T9820] bond_slave_0: left allmulticast mode [ 337.914439][ T9820] bond_slave_1: left allmulticast mode [ 337.961694][ T9819] bond4: (slave dummy0): making interface the new active one [ 337.980389][ T9819] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 338.262517][ T9839] sctp: [Deprecated]: syz.0.1223 (pid 9839) Use of int in maxseg socket option. [ 338.262517][ T9839] Use struct sctp_assoc_value instead [ 338.422529][ T9844] syzkaller0: entered promiscuous mode [ 338.438364][ T9844] syzkaller0: entered allmulticast mode [ 338.787884][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 338.801991][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 338.830216][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 338.856876][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 339.264618][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 339.464585][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 339.504581][ T28] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 339.512976][ T28] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 339.544460][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.586358][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 339.614529][ T28] usb 1-1: config 1 has no interface number 0 [ 339.620686][ T28] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 339.664470][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.684053][ T9878] bond1: (slave bond0): Releasing active interface [ 339.691247][ T9878] bond0: left promiscuous mode [ 339.704503][ T9878] bond_slave_0: left promiscuous mode [ 339.710499][ T28] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 339.731093][ T9878] bond_slave_1: left promiscuous mode [ 339.755576][ T9878] bond0: left allmulticast mode [ 339.771017][ T9878] bond_slave_0: left allmulticast mode [ 339.789167][ T9878] bond_slave_1: left allmulticast mode [ 339.924180][ T9864] can0: slcan on ttyS3. [ 340.036512][ T9863] can0 (unregistered): slcan off ttyS3. [ 340.044248][ T9882] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 340.055480][ T28] snd_usb_pod 1-1:1.1: set_interface failed [ 340.061586][ T28] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 340.094577][ T28] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 340.156217][ T28] usb 1-1: USB disconnect, device number 2 [ 340.189874][ T9882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.258160][ T9884] bond2: (slave dummy0): Releasing active interface [ 340.285111][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 340.325367][ T9884] bond3: (slave dummy0): making interface the new active one [ 340.363124][ T9884] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 340.582754][ T9899] sctp: [Deprecated]: syz.2.1234 (pid 9899) Use of int in maxseg socket option. [ 340.582754][ T9899] Use struct sctp_assoc_value instead [ 340.806379][ T9904] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 44574 - 0 [ 340.844489][ T9904] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 44574 - 0 [ 340.866680][ T9904] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 44574 - 0 [ 340.914179][ T9904] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 44574 - 0 [ 340.933179][ T9904] geneve2: entered promiscuous mode [ 341.034946][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 342.408324][ T9946] sctp: [Deprecated]: syz.2.1245 (pid 9946) Use of int in maxseg socket option. [ 342.408324][ T9946] Use struct sctp_assoc_value instead [ 342.607638][ T6853] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 342.804624][ T6853] usb 4-1: Using ep0 maxpacket: 32 [ 342.840404][ T9954] __nla_validate_parse: 3 callbacks suppressed [ 342.840422][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 342.854867][ T6853] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 342.866695][ T6853] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 342.876602][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1247'. [ 342.903765][ T6853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.904988][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 342.946977][ T6853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 342.950392][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1247'. [ 342.975221][ T6853] usb 4-1: config 1 has no interface number 0 [ 342.981712][ T6853] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 343.001742][ T6853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.030458][ T6853] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 343.257097][ T9943] can0: slcan on ttyS3. [ 343.360709][ T9942] can0 (unregistered): slcan off ttyS3. [ 343.382349][ T6853] snd_usb_pod 4-1:1.1: set_interface failed [ 343.402550][ T6853] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 343.425090][ T6853] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 343.452982][ T6853] usb 4-1: USB disconnect, device number 5 [ 344.370910][ T9982] syzkaller0: entered promiscuous mode [ 344.379854][ T9982] syzkaller0: entered allmulticast mode [ 344.529796][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 344.544504][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 344.556993][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 344.584488][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 344.955193][T10009] syzkaller0: entered promiscuous mode [ 344.984580][T10009] syzkaller0: entered allmulticast mode [ 345.234949][ T6853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 345.475077][ T6853] usb 3-1: Using ep0 maxpacket: 32 [ 345.482006][ T6853] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 345.503890][ T6853] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 345.602784][ T6853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.639848][ T6853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 345.668644][ T6853] usb 3-1: config 1 has no interface number 0 [ 345.696079][ T6853] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 345.719893][ T6853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.773509][ T6853] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 346.019563][T10011] can0: slcan on ttyS3. [ 346.185747][T10007] can0 (unregistered): slcan off ttyS3. [ 346.211736][ T6853] snd_usb_pod 3-1:1.1: set_interface failed [ 346.242839][ T6853] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 346.268614][ T6853] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 346.307832][ T6853] usb 3-1: USB disconnect, device number 2 [ 346.901741][T10043] sctp: [Deprecated]: syz.2.1266 (pid 10043) Use of int in maxseg socket option. [ 346.901741][T10043] Use struct sctp_assoc_value instead [ 346.909375][T10042] syzkaller0: entered promiscuous mode [ 346.926680][T10042] syzkaller0: entered allmulticast mode [ 346.934182][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 346.947558][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1268'. [ 347.229707][T10051] syzkaller0: entered promiscuous mode [ 347.235522][T10051] syzkaller0: entered allmulticast mode [ 348.067426][ T969] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 348.264575][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 348.285096][ T969] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 348.293490][ T969] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 348.316972][ T969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.328009][ T969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 348.346992][ T969] usb 5-1: config 1 has no interface number 0 [ 348.364537][ T969] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 348.407225][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.438481][ T969] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 348.650836][T10061] can0: slcan on ttyS3. [ 348.762978][T10078] syzkaller0: entered promiscuous mode [ 348.769345][T10078] syzkaller0: entered allmulticast mode [ 348.795246][T10060] can0 (unregistered): slcan off ttyS3. [ 348.812906][ T969] snd_usb_pod 5-1:1.1: set_interface failed [ 348.825952][ T969] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 348.841612][ T969] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 348.859331][ T969] usb 5-1: USB disconnect, device number 4 [ 350.823144][T10120] syzkaller0: entered promiscuous mode [ 350.844647][T10120] syzkaller0: entered allmulticast mode [ 351.494515][ T6853] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 352.034867][ T6853] usb 5-1: Using ep0 maxpacket: 32 [ 352.053699][ T6853] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 352.062162][ T6853] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 352.071265][ T6853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.094672][ T6853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 352.103788][ T6853] usb 5-1: config 1 has no interface number 0 [ 352.115876][ T6853] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 352.126813][ T6853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.173178][ T6853] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 354.104348][T10126] slcan: can't register candev [ 354.147910][ T6853] snd_usb_pod 5-1:1.1: set_interface failed [ 354.164892][ T6853] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 354.174092][ T6853] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 354.209031][ T6853] usb 5-1: USB disconnect, device number 5 [ 356.191061][T10193] ipt_ECN: cannot use operation on non-tcp rule [ 356.332853][T10196] syzkaller0: entered promiscuous mode [ 356.338501][T10196] syzkaller0: entered allmulticast mode [ 356.394817][ T28] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 356.597552][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 356.621951][ T28] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 356.630857][ T28] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 356.647881][ T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.665378][ T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 356.675072][ T28] usb 5-1: config 1 has no interface number 0 [ 356.695004][ T28] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 356.704070][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.741178][ T28] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 358.224756][T10191] can0: slcan on ttyS3. [ 358.317816][T10190] can0 (unregistered): slcan off ttyS3. [ 358.339577][ T28] snd_usb_pod 5-1:1.1: set_interface failed [ 358.354864][ T28] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 358.376623][ T28] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 358.397868][ T28] usb 5-1: USB disconnect, device number 6 [ 358.546134][T10203] syzkaller0: entered promiscuous mode [ 358.551747][T10203] syzkaller0: entered allmulticast mode [ 359.482680][T10218] syzkaller0: entered promiscuous mode [ 359.511610][T10218] syzkaller0: entered allmulticast mode [ 362.361579][T10237] syzkaller0: entered promiscuous mode [ 362.370358][T10237] syzkaller0: entered allmulticast mode [ 362.695892][T10258] syzkaller0: entered promiscuous mode [ 362.704790][T10258] syzkaller0: entered allmulticast mode [ 362.927454][ T969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 363.154519][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 363.166264][ T969] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 363.180394][ T969] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 363.200802][ T969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.211346][ T969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 363.221657][ T969] usb 3-1: config 1 has no interface number 0 [ 363.228156][ T969] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 363.237597][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.254168][ T969] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 363.530462][T10273] syzkaller0: entered promiscuous mode [ 363.538100][T10273] syzkaller0: entered allmulticast mode [ 363.563384][T10254] can0: slcan on ttyS3. [ 363.655519][T10253] can0 (unregistered): slcan off ttyS3. [ 363.672072][ T969] snd_usb_pod 3-1:1.1: set_interface failed [ 363.685633][ T969] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 363.695684][ T969] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 363.707679][ T969] usb 3-1: USB disconnect, device number 3 [ 364.573084][T10286] loop3: detected capacity change from 0 to 128 [ 364.650634][T10286] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 364.802383][T10286] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.237918][T10305] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 367.335629][T10305] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.486490][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 367.841354][ T6853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 368.026329][T10322] syzkaller0: entered promiscuous mode [ 368.033134][T10322] syzkaller0: entered allmulticast mode [ 368.055342][ T6853] usb 3-1: Using ep0 maxpacket: 32 [ 368.076661][ T6853] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 368.086815][ T6853] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 368.100479][ T6853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.111196][ T6853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 368.121280][ T6853] usb 3-1: config 1 has no interface number 0 [ 368.142344][ T6853] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 368.157723][ T6853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.205987][ T6853] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 368.212744][T10324] syzkaller0: entered promiscuous mode [ 368.218716][T10324] syzkaller0: entered allmulticast mode [ 370.303620][T10313] can0: slcan on ttyS3. [ 370.427025][T10311] can0 (unregistered): slcan off ttyS3. [ 370.436338][ T6853] snd_usb_pod 3-1:1.1: set_interface failed [ 370.442468][ T6853] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 370.472676][ T6853] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 370.489223][ T6853] usb 3-1: USB disconnect, device number 4 [ 370.503116][T10347] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 370.562117][T10347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.110887][T10363] loop3: detected capacity change from 0 to 128 [ 371.158840][T10363] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 371.233294][T10363] ext4 filesystem being mounted at /349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.521594][T10369] syzkaller0: entered promiscuous mode [ 371.527433][T10369] syzkaller0: entered allmulticast mode [ 373.424889][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 374.232078][T10379] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 374.256148][T10379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.660389][T10397] syzkaller0: entered promiscuous mode [ 374.667575][T10397] syzkaller0: entered allmulticast mode [ 374.834492][ T28] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 375.000103][T10407] loop4: detected capacity change from 0 to 128 [ 375.044565][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 375.045869][T10409] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 375.051745][ T28] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 375.067321][ T28] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 375.076738][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.082848][T10407] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 375.087996][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 375.109629][ T28] usb 4-1: config 1 has no interface number 0 [ 375.116237][ T28] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 375.126024][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.163676][T10407] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 375.164811][ T28] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 375.202539][T10409] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.242210][T10414] bond4: entered promiscuous mode [ 375.252025][T10414] bond4: entered allmulticast mode [ 375.399943][T10393] can0: slcan on ttyS3. [ 375.514429][T10392] can0 (unregistered): slcan off ttyS3. [ 375.523606][ T28] snd_usb_pod 4-1:1.1: set_interface failed [ 375.544670][ T28] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 375.552065][ T28] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 375.587959][ T28] usb 4-1: USB disconnect, device number 6 [ 376.125181][T10437] syzkaller0: entered promiscuous mode [ 376.226752][T10437] syzkaller0: entered allmulticast mode [ 376.534004][T10446] __nla_validate_parse: 2 callbacks suppressed [ 376.534022][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1388'. [ 376.566770][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1388'. [ 377.660723][ T969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 377.884897][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 377.895330][ T969] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 377.913935][ T969] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 377.930760][ T969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.941579][ T969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 377.951772][ T969] usb 3-1: config 1 has no interface number 0 [ 377.960569][ T969] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 377.989691][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.013939][ T969] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 378.261365][T10476] can0: slcan on ttyS3. [ 378.356863][T10474] can0 (unregistered): slcan off ttyS3. [ 378.377017][ T969] snd_usb_pod 3-1:1.1: set_interface failed [ 378.388829][ T969] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 378.413391][ T969] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 378.422072][ T969] usb 3-1: USB disconnect, device number 5 [ 378.771839][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.778633][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.861824][T10525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 379.584186][ T8200] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 379.774534][ T8001] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 380.134490][ T969] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 380.314469][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 380.321011][ T969] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 380.333200][ T969] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 380.341916][ T969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.352271][ T969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 380.361406][ T969] usb 3-1: config 1 has no interface number 0 [ 380.367572][ T969] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 380.377300][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.396486][ T969] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 380.604108][T10567] can0: slcan on ttyS3. [ 380.688723][T10564] can0 (unregistered): slcan off ttyS3. [ 380.705242][ T969] snd_usb_pod 3-1:1.1: set_interface failed [ 380.724073][ T969] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 380.732070][ T969] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 380.751567][ T969] usb 3-1: USB disconnect, device number 6