last executing test programs: 18m55.824199429s ago: executing program 32 (id=40): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 18m36.627697309s ago: executing program 33 (id=138): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', r1, @fallback=0x2f}, 0x94) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "8167d4f8f4297df2923824fd53573b11f28faaf58802e732"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="750114346d4158"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x0) 17m40.114968323s ago: executing program 4 (id=463): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 17m39.880901684s ago: executing program 4 (id=466): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) 17m39.652281614s ago: executing program 4 (id=469): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r3}, 0x10) 17m39.447078463s ago: executing program 4 (id=471): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000640)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@utf8no}, {@numtail}, {@fat=@nfs_nostale_ro}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@numtail}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 17m39.172051877s ago: executing program 4 (id=473): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="47302b0a093ed7bb1057", 0xa}], 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) 17m38.80247649s ago: executing program 4 (id=475): creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="530000000700004600f531132067043b2d877e09"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 17m38.410264415s ago: executing program 34 (id=475): creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="530000000700004600f531132067043b2d877e09"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 14m23.263143919s ago: executing program 3 (id=1788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) 14m22.682705161s ago: executing program 3 (id=1792): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 14m22.113251702s ago: executing program 3 (id=1795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r0, 0x7ac87000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4054, 0xff79, 0x0, 0x0}, &(0x7f0000000400)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 14m21.928663058s ago: executing program 3 (id=1797): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) 14m21.705536438s ago: executing program 3 (id=1798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x2000) 14m19.758624821s ago: executing program 3 (id=1809): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m19.419837622s ago: executing program 35 (id=1809): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m17.30016704s ago: executing program 6 (id=1822): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 14m16.266320873s ago: executing program 6 (id=1828): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0x9, 0x4e, 0x0, 0x2, 0x6, 0x1}, {0x3000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x27, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0x8000000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0xfe, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x87, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x7, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x88, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x46, 0x8, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xff, 0xa, 0x2, 0x44, 0x3, 0xa, 0x5, 0xce}, {0xe000, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x5d002, 0x60, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) 14m15.782487146s ago: executing program 6 (id=1832): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x4}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m15.593159072s ago: executing program 6 (id=1835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 14m15.338484215s ago: executing program 6 (id=1836): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x10000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0xfd, 0x632a, &(0x7f0000013cc0)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 14m14.063162689s ago: executing program 6 (id=1839): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) 14m9.623953625s ago: executing program 7 (id=1863): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) fcntl$dupfd(r0, 0x0, r0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$alg(0x26, 0x5, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) close(0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) 10m13.502695589s ago: executing program 8 (id=3300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 10m11.034013469s ago: executing program 8 (id=3307): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x53}, 0x0) syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m8.040043327s ago: executing program 8 (id=3312): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x3, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x2, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 10m7.608748165s ago: executing program 8 (id=3315): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 10m6.926498376s ago: executing program 8 (id=3319): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10m2.689987493s ago: executing program 8 (id=3332): openat$kvm(0xffffffffffffff9c, 0x0, 0x88003, 0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000500)=""/45, 0x2d) getdents64(r3, 0x0, 0x18) 10m2.136826373s ago: executing program 38 (id=3332): openat$kvm(0xffffffffffffff9c, 0x0, 0x88003, 0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000500)=""/45, 0x2d) getdents64(r3, 0x0, 0x18) 9m59.316431154s ago: executing program 9 (id=3349): getpid() openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) setuid(0xee01) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000440)=0x80000001, 0x4) 9m59.118290162s ago: executing program 9 (id=3352): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 9m58.767120903s ago: executing program 9 (id=3354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1406, 0x420, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040851}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xbdb], 0xdddd0000, 0x1c4213}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x44}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000010c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m57.317864582s ago: executing program 9 (id=3357): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 9m56.77903504s ago: executing program 9 (id=3360): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00080001030000140014"], 0x42) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305}, 0x14}}, 0x0) 9m55.537227951s ago: executing program 9 (id=3362): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x30, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 9m55.311672881s ago: executing program 39 (id=3362): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x30, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 15.226550892s ago: executing program 1 (id=5039): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) 13.222319551s ago: executing program 1 (id=5044): getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x1003, r2}, 0x38) 11.522467633s ago: executing program 1 (id=5045): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0c00990041000000600000000800a0147c030000080026009a03000008009f"], 0x40}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c697479"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20044844}, 0x20000014) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 11.281080964s ago: executing program 0 (id=5048): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) lseek(r3, 0x8, 0x4) 11.280259484s ago: executing program 2 (id=5049): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9.227906277s ago: executing program 2 (id=5051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.325232136s ago: executing program 0 (id=5052): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = fsopen(&(0x7f00000002c0)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) truncate(0x0, 0x20fffffffc) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x6, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x0, 0x9, 0x1}]}]}]}, 0x38}}, 0x0) 6.622431739s ago: executing program 2 (id=5054): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 6.493216081s ago: executing program 5 (id=5055): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r1 = dup(r0) r2 = fanotify_init(0x40, 0x2) fanotify_mark(r2, 0x1, 0x10, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x381480, 0x0) fgetxattr(r6, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x7151, 0x0) 6.387603761s ago: executing program 0 (id=5056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xee4, 0x30, 0xb, 0x0, 0x0, {}, [{0xed0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe84, 0x2, 0x0, 0x0, {{0xa}, {0xe58, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x3, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92c4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, 0x0, 0x1, [{0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xee4}}, 0x0) 6.125430624s ago: executing program 5 (id=5057): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x164) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 5.869984416s ago: executing program 5 (id=5058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x8080) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) 5.096216795s ago: executing program 2 (id=5059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x4) 5.018662142s ago: executing program 1 (id=5060): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f0000001f80)=""/4095, 0xfff) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 4.974556516s ago: executing program 0 (id=5061): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 4.288877357s ago: executing program 5 (id=5062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) setresuid(0x0, 0xee01, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x19, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3.956284407s ago: executing program 2 (id=5063): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) 3.168259648s ago: executing program 5 (id=5064): memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.333031681s ago: executing program 2 (id=5065): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0x1}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @remote}) fstat(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x11f0, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x11dc, 0x1, [@m_police={0x11d8, 0x1, 0x0, 0x0, {{0xb}, {0x11ac, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xfd3c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x5, 0x4a8, 0x7ff, {0x52, 0x0, 0x8, 0x8, 0x2, 0x6}, {0x3, 0x1, 0x7, 0x4, 0x9, 0x10000}, 0x800, 0x7, 0xfffffffc}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0xc52, 0x7, 0x2, 0x0, 0x1, 0x7, 0xc127, 0xf, 0x580, 0x3, 0x4, 0x1, 0x3, 0x2, 0xd4b, 0x1, 0x7, 0x8, 0x3, 0x6, 0x5, 0x10000, 0x10, 0x2, 0x1c, 0x200, 0x489d9480, 0x3, 0x200, 0x7eb, 0xaf, 0x6000, 0xa9b1, 0x0, 0x7f, 0x4, 0x8, 0xb, 0x0, 0x8, 0x80000000, 0x2, 0xd, 0xfff, 0x9, 0x5, 0x9, 0x400, 0x2, 0x7ff, 0x4, 0x3, 0x0, 0x5, 0x1, 0x1, 0x8, 0x0, 0xcc, 0x0, 0x8, 0x357, 0x5, 0x9, 0x2, 0x9, 0x6ad, 0xfffffffd, 0x100, 0xd9, 0x40, 0x9, 0x0, 0x7f, 0x36b0, 0x6, 0xff, 0x2, 0x3ba, 0x9, 0x5, 0x5, 0x8, 0x78b, 0x4, 0x0, 0x1, 0x6, 0xffff8001, 0xfffffff7, 0x7fffffff, 0xfc, 0x1, 0x3, 0x7, 0xfffffffa, 0x0, 0xfffffe00, 0x7, 0x55, 0x2, 0x1, 0x87d, 0x7, 0x1, 0x6, 0x0, 0x5, 0x4, 0x1, 0x770, 0x80, 0x6, 0xd1, 0xb6d, 0x2, 0x40c064f7, 0x6, 0x800, 0x5, 0x0, 0x4, 0x8, 0x4, 0xc4, 0xe, 0x7f, 0x2, 0xfffffffa, 0x7, 0x10000, 0x5, 0x5, 0x48, 0x2, 0x9, 0x0, 0x4, 0x6, 0x758189da, 0x6, 0x4d4, 0x7, 0xcd9f, 0x8001, 0x800, 0x4, 0x9, 0x6, 0x8000, 0x1000, 0x80000000, 0xa, 0x0, 0x2, 0x3, 0x6, 0xec, 0x10001, 0x0, 0x9f34, 0x32000000, 0x10000, 0x0, 0x9, 0x6, 0x80000000, 0x0, 0x61, 0x9, 0x200, 0x3, 0x4, 0x9, 0x3, 0xf, 0xb, 0x0, 0x5, 0xd, 0x530, 0x358, 0xf, 0x6, 0xb, 0xb, 0x1, 0x3, 0x7, 0x8, 0x3, 0x3, 0xe14, 0xfff, 0x5, 0x3, 0x4, 0x2, 0x1, 0x21c3, 0x7, 0xbd21, 0x6, 0x1ff, 0x0, 0x52a, 0xffff, 0x0, 0x8, 0xfffffffa, 0x7, 0x5, 0x3, 0x400, 0xd1, 0xf90, 0xffffffff, 0xa, 0x5, 0x0, 0xfffffffd, 0xf9, 0x8, 0x80000000, 0x4, 0x4, 0xb66, 0xfff, 0x7f, 0x4, 0x289e39c1, 0x3, 0x3, 0xf7e, 0x9, 0x9, 0x9, 0x2, 0x7, 0x4, 0x42360, 0x2, 0xfffffffb, 0x9, 0x194, 0x8, 0x3, 0xa, 0x7, 0x81, 0x7, 0xfffffffc, 0x6, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x1, 0x4, 0x717, 0x1, {0x6, 0x2, 0xc, 0x5, 0x2, 0xffff}, {0xf, 0x1, 0x0, 0x4, 0x6, 0xfff}, 0xfffff678, 0x3, 0x9}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x2, {0x81, 0x0, 0x0, 0x800, 0x7, 0x1}, {0x6, 0x2, 0x4, 0x9c, 0xfff9, 0x5df6}, 0x0, 0x7, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0xd996, 0x5, 0x5, 0x4, 0x3, 0x80000000, 0x5, 0x6c, 0x1, 0x5, 0x830, 0x7fffffff, 0xa, 0x7, 0x3, 0x218d, 0xd228, 0x9, 0x7fff, 0x1, 0x1000, 0x4, 0x6, 0xe55, 0x7, 0x800, 0x23, 0x50f3, 0x2, 0x9296, 0x5, 0x1, 0x7f, 0x4, 0x101, 0x7, 0x6, 0x6, 0xc09d, 0xffffffbf, 0xffff, 0x4, 0x1000, 0xfffffc00, 0x8000, 0xc7, 0x8, 0x1, 0x7, 0xf1d8, 0x8, 0x6, 0x8, 0xb70, 0x781, 0xaaf3, 0xb, 0xf9, 0x8, 0x7f, 0x3, 0xa, 0x492b, 0x0, 0x6, 0x4, 0x8, 0xff, 0x8000, 0x6856, 0x4ca4, 0x6, 0x101, 0x5, 0xffff, 0xb00, 0xe6d9, 0x8001, 0x5, 0xe628, 0x38f5, 0x80000001, 0xc1a, 0xffff, 0x0, 0x0, 0x9, 0x9, 0x6, 0x15e9ef2f, 0x38a0c000, 0x40, 0xa, 0x6, 0x7fffffff, 0x9, 0x7, 0x7fffffff, 0xffffffff, 0x10000, 0x9, 0x4, 0x80000001, 0xa, 0xc1b9, 0xa51, 0x7, 0x3, 0x7, 0x1, 0xaefe, 0x10, 0xd, 0x0, 0x91, 0x8, 0x8, 0x3, 0xfffffffb, 0x1, 0xc, 0x6, 0xffff, 0x200, 0x8, 0xfffffffd, 0x4, 0x7, 0x0, 0x4, 0x5, 0x7497, 0xfdae, 0xd6, 0xa00, 0x8001, 0x5, 0xfffffffe, 0x8, 0x6, 0x1, 0x1, 0x7, 0xa, 0x4, 0x1ff, 0x1, 0x80000000, 0x6, 0x40, 0x8f78, 0x6, 0x5, 0x200, 0xff, 0xa, 0x0, 0xfff, 0x81, 0x1, 0x7, 0x0, 0x8, 0x0, 0x48, 0x48e176f8, 0x0, 0x3, 0x0, 0x8, 0x4, 0xca90, 0x80000000, 0xffffffff, 0x8000, 0x5, 0x2, 0xe6, 0x5, 0x6, 0x1, 0x9, 0x9, 0x9, 0x3, 0x40, 0xd, 0xe, 0xf, 0x3, 0x7, 0x5, 0x7, 0x80, 0xe4aa, 0x8, 0x180000, 0x6, 0x5, 0xd, 0x7f, 0x8, 0x5ba0328f, 0x8, 0x48f, 0x8, 0x1, 0xe, 0x2000000, 0x9bc, 0x4d5, 0x8b, 0x7, 0x7, 0xfff, 0x4, 0x5, 0x8, 0x9, 0x8, 0x400, 0xff, 0x5, 0x9, 0x3, 0x2d8, 0x2, 0x1, 0x8, 0x4, 0x9, 0x7, 0xffff5da8, 0x4, 0x2, 0x9, 0x6, 0x2, 0xfffffff1, 0xa, 0x72c4969c, 0x0, 0xa4, 0x4, 0x2, 0xfffffe01, 0x5, 0x7fffffff, 0x100, 0x369f, 0x400, 0x6, 0x7fffffff, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4849ceae}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0xe, 0x7fff, 0x8, 0x2ab, 0x3, 0x8, 0x30e50265, 0x9, 0x2, 0x1ff, 0xf7, 0x5, 0xe, 0x1, 0x7, 0x4000000, 0x4ca0, 0x2, 0x7, 0x7, 0x2a70, 0x77, 0x1000, 0x3, 0x3, 0x12a8, 0x2, 0x1, 0xfffffff9, 0x4, 0x7fff, 0x10, 0x230, 0xd, 0x200, 0x7, 0x8, 0x4bb, 0x1ff, 0x5, 0x1, 0x6, 0x0, 0x399, 0x7fff, 0x3, 0x3, 0xffffffe4, 0x1c2, 0x0, 0x4, 0x3, 0x3, 0x12a2, 0x0, 0x7a6, 0x400, 0xff, 0x5, 0x9, 0x7, 0x2, 0x2, 0x32a, 0x400, 0x1, 0x4, 0x10, 0x8, 0x8001, 0x4, 0x5, 0x0, 0x1, 0x200, 0x8001, 0x6, 0x40, 0x4, 0x7, 0x8, 0xb, 0x9, 0x1, 0x10, 0x16, 0xf477, 0x655, 0x8, 0x10000, 0x35c, 0x2c2, 0x4, 0xfffffffe, 0x3, 0x4, 0x3, 0x5, 0xe, 0x0, 0x1, 0x6, 0x8, 0x4, 0x5, 0x3, 0x1ff, 0x4, 0x16, 0xd, 0x0, 0x2, 0x3, 0x80c, 0x5, 0x2, 0x0, 0x0, 0x4, 0x97c, 0x6, 0x8, 0x3ff, 0x7fffffff, 0xc5d, 0x1, 0x3, 0x200, 0x16d1, 0x9954, 0x9, 0x823d, 0x5, 0x0, 0x7, 0xd30, 0x6, 0x81, 0x1, 0x0, 0x8, 0x9, 0x10, 0xe0, 0x4, 0xd3, 0xf, 0x38e7, 0x5, 0x481a, 0x7e5, 0xfff, 0xfff, 0x80000000, 0x5, 0xf333, 0x4f53d65, 0x100, 0x6, 0x6, 0x3, 0x4, 0x800, 0xffff, 0x0, 0x8, 0x9a99, 0xe4, 0x81000, 0x40, 0x79, 0x0, 0x9, 0x3, 0x1ffe000, 0x8, 0x8f, 0xff, 0x10, 0x7228, 0x6, 0x1, 0x5, 0x4, 0x1, 0xad6, 0x8, 0xff, 0xc, 0x1, 0x4, 0x3, 0x5, 0x4, 0x4, 0x6, 0x7, 0x9, 0x82, 0x9, 0x0, 0x6, 0xd, 0x80000001, 0x75f5294b, 0x7e, 0x1, 0x7, 0x80, 0x1, 0x8, 0x2, 0x335, 0x0, 0x1, 0x101, 0x200, 0x3, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x401, 0xffff, 0x1509, 0x2f8b, 0x4, 0x100, 0x5, 0xfffffff7, 0x702b2081, 0x7, 0xa7, 0x8, 0x3, 0xfffffffc, 0xd04, 0x7, 0x0, 0x1, 0xf46e, 0x9, 0x5, 0xd521652, 0x0, 0x9, 0x5, 0x3, 0x5, 0x640, 0x244, 0x3, 0xfff, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff28}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe000000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x499c, 0x1, 0x4000000, 0xffffffff, 0xffffffff, 0x0, 0xff, 0x3, 0x1, 0xd424, 0xcd2c, 0x0, 0x289807d6, 0x6, 0xd0c, 0x10001, 0x9, 0xcfa, 0x200, 0x6662, 0x8, 0x6, 0x71, 0x5, 0xf2, 0x5, 0x80000001, 0x0, 0x400, 0x7, 0x2, 0x7, 0xac, 0xe0000000, 0x80000000, 0x3, 0x4, 0xd06, 0x7, 0xe506, 0x1, 0x2, 0x0, 0x0, 0x2, 0x4, 0x6, 0x7, 0x280, 0xffffff01, 0x9, 0x6, 0x0, 0x101, 0x2a1a, 0x10001, 0x800, 0x7, 0x8000, 0x2, 0x4, 0xef64, 0x3ff, 0x9, 0x9, 0x8, 0x2, 0x200, 0x7, 0x3, 0xa, 0xffff, 0x5, 0x4, 0x400, 0x3, 0x2, 0x3, 0x4, 0x3, 0x9, 0xe8, 0x0, 0x1, 0xd55, 0x3, 0x80, 0x3ff, 0x5e, 0xffffffff, 0x80000000, 0xffff015c, 0x2, 0x8, 0x9, 0x3, 0x7, 0x5, 0x7, 0x4ae8eff2, 0x0, 0x5, 0xb72, 0x63, 0x4, 0x3, 0xa5a4, 0x7, 0x800, 0xb3f, 0x2, 0x5, 0x7540080a, 0x184, 0x508, 0x53, 0x4, 0xfffffffd, 0x5fa, 0x63d, 0x8000, 0x8, 0x1, 0x7, 0x7, 0xff, 0x2, 0xfff000, 0x1, 0x3, 0x1ff, 0x0, 0x2, 0x6, 0x2, 0x2, 0x6, 0x4, 0x100, 0x62, 0x280000, 0x100, 0x8800, 0x9, 0x8, 0x8, 0x5, 0x7ff, 0x5, 0x5, 0x2, 0x8, 0x0, 0x7, 0x1, 0x8, 0x6, 0x1c, 0x2, 0x2, 0x80000000, 0x9, 0x40, 0x1, 0x0, 0x7, 0x1b94, 0x2, 0xffffff80, 0xffffffff, 0x1, 0x80000001, 0x10001, 0x6e7, 0x3, 0x1, 0x3, 0x5, 0x7a, 0x4, 0xfffffff8, 0x7fff, 0x0, 0x6, 0x74e, 0x3, 0x80000000, 0x4, 0xe, 0x51f, 0x0, 0x5, 0x1ff, 0x5, 0x1ff, 0x3, 0x7fffffff, 0x593, 0xfffffffa, 0x0, 0x81, 0xfffffe0b, 0x8, 0x6, 0x7, 0x8, 0x2, 0x1ff0000, 0x4, 0x7ff, 0x9, 0x80000001, 0x13, 0x9, 0x9, 0x2, 0x4, 0x9, 0x9, 0x2, 0x0, 0x26, 0xfff, 0xfffffffc, 0x101, 0x0, 0xffff, 0x76, 0x10, 0x40, 0x6, 0xf, 0x1afc, 0x1, 0x7, 0xfffffffb, 0x80000000, 0x1, 0xebe1, 0x2, 0xc, 0xf1a7, 0x401, 0x8, 0x3, 0x7fff, 0x4, 0x376, 0x230bb28f, 0x8, 0x5, 0xc76, 0x2, 0x800, 0x400, 0xe264]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x1, 0x6, 0x7, 0x5, {0xf7, 0x2, 0x3, 0xbd4, 0xd, 0x1}, {0x80, 0x1, 0xf, 0x68, 0x7ca6, 0x7}, 0x8022, 0x2, 0x20}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000a10"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888}, 0x20000880) close(r2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 1.319811172s ago: executing program 0 (id=5066): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) 274.695145ms ago: executing program 5 (id=5067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffffd}, 0x8) close(r3) 274.358925ms ago: executing program 0 (id=5068): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0c00990041000000600000000800a0147c030000080026009a03000008009f"], 0x40}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c697479"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20044844}, 0x20000014) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 241.003548ms ago: executing program 1 (id=5069): socket$kcm(0x10, 0x400000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000004c0), &(0x7f0000000700)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 0s ago: executing program 1 (id=5070): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x0, 0x1b0, 0x2a0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x168, 0x1b0, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@empty, [], @ipv6=@ipv4, [], @ipv6=@mcast1, [], @ipv4=@multicast2}}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x287, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) kernel console output (not intermixed with test programs): face with an up link [ 517.823694][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2701'. [ 518.487121][T14398] netlink: 'syz.9.2708': attribute type 4 has an invalid length. [ 518.545639][T14398] netlink: 'syz.9.2708': attribute type 4 has an invalid length. [ 518.926526][T14407] loop9: detected capacity change from 0 to 2048 [ 518.970591][T14407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.466176][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 520.065116][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.073013][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.545571][ T969] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 520.561116][T14418] vxcan1: left promiscuous mode [ 520.760750][ T969] usb 10-1: Using ep0 maxpacket: 32 [ 520.785688][ T969] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 520.794399][ T969] usb 10-1: config 0 has no interface number 0 [ 520.800958][ T969] usb 10-1: config 0 interface 12 has no altsetting 0 [ 520.811040][ T969] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 520.822305][ T969] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.830765][ T969] usb 10-1: Product: syz [ 520.837376][ T969] usb 10-1: Manufacturer: syz [ 520.855174][ T969] usb 10-1: SerialNumber: syz [ 520.868365][ T969] usb 10-1: config 0 descriptor?? [ 520.899546][ T969] f81534 10-1:0.12: required endpoints missing [ 521.171032][ T969] usb 10-1: USB disconnect, device number 7 [ 521.177430][T14418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.716344][T14418] veth0_virt_wifi: left promiscuous mode [ 522.002251][T14451] loop8: detected capacity change from 0 to 256 [ 522.016481][T14451] exfat: Deprecated parameter 'utf8' [ 522.024299][T14451] exfat: Deprecated parameter 'utf8' [ 522.029778][T14451] exfat: Deprecated parameter 'utf8' [ 522.067155][T14451] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 522.390928][T14418] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.400035][T14418] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.409642][T14418] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.420077][T14418] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.684187][T14418] bridge1: left allmulticast mode [ 522.714552][T14418] bond1: left promiscuous mode [ 522.719660][T14418] bridge3: left promiscuous mode [ 522.785302][T14418] bond0: left promiscuous mode [ 523.536460][ T12] gretap0: left promiscuous mode [ 523.838387][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2739'. [ 524.393365][T14463] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 524.583342][T14463] usb 10-1: Using ep0 maxpacket: 8 [ 524.614535][T14463] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 524.653506][T14463] usb 10-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 524.662827][T14463] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 524.681344][T14463] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.730139][T14527] overlayfs: failed to clone upperpath [ 524.931136][T14463] usb 10-1: string descriptor 0 read error: -71 [ 524.964517][T14463] usb 10-1: USB disconnect, device number 8 [ 525.393194][T14543] overlayfs: failed to clone upperpath [ 526.070237][T14554] loop9: detected capacity change from 0 to 512 [ 526.093671][T14554] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 526.149999][T14554] EXT4-fs (loop9): 1 truncate cleaned up [ 526.164464][T14554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.446190][T11926] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.529394][T14561] tipc: Enabling of bearer rejected, failed to enable media [ 526.796370][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 527.459143][T14574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.618859][T14580] bond5: entered allmulticast mode [ 527.644349][T14580] ip6gretap1: entered promiscuous mode [ 527.650137][T14580] bond5: (slave ip6gretap1): no link monitoring support [ 527.659184][T14580] bond5: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 527.682222][T14580] ip6gretap1: entered allmulticast mode [ 527.688730][T14580] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 528.065548][T14588] netlink: 'syz.9.2771': attribute type 1 has an invalid length. [ 528.149046][T14588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.289861][T14588] bond2: (slave veth3): Enslaving as an active interface with a down link [ 528.348295][T14593] bond2: (slave gretap0): making interface the new active one [ 528.452194][T14593] gretap0: entered promiscuous mode [ 528.459455][T14595] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2773'. [ 528.474316][T14593] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 528.502437][T14595] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2773'. [ 528.533432][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'. [ 529.334280][ T5807] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 529.485530][T14612] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.595182][ T5807] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.623413][ T5807] usb 10-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.663833][ T5807] usb 10-1: config 0 interface 0 has no altsetting 0 [ 529.670646][ T5807] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 529.689293][T14612] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.713243][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.738863][ T5807] usb 10-1: config 0 descriptor?? [ 529.888981][T14612] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.059746][T14624] tmpfs: Bad value for 'mpol' [ 530.063544][T14612] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.078875][T14624] mmap: syz.5.2786 (14624): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 530.187376][ T5807] pyra 0003:1E7D:2C24.0007: item fetching failed at offset 0/3 [ 530.235158][ T5807] pyra 0003:1E7D:2C24.0007: parse failed [ 530.240952][ T5807] pyra: probe of 0003:1E7D:2C24.0007 failed with error -22 [ 530.345678][T14612] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.374322][T14612] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.416010][T14604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 530.426617][T14612] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.437254][ T5807] usb 10-1: USB disconnect, device number 9 [ 530.496078][T14612] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.862871][T14642] overlayfs: failed to clone upperpath [ 531.217378][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 531.263666][T14652] bridge_slave_1: left allmulticast mode [ 531.275087][T14652] bridge_slave_1: left promiscuous mode [ 531.313679][T14652] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.205695][T14652] bridge_slave_0: left allmulticast mode [ 532.211522][T14652] bridge_slave_0: left promiscuous mode [ 532.242864][T14652] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.074648][T14681] loop8: detected capacity change from 0 to 128 [ 533.097678][T14681] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 533.171554][T14681] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 533.210482][T14681] FAT-fs (loop8): Filesystem has been set read-only [ 533.246024][T14681] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 534.083328][T14465] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 534.281812][T14705] netlink: 'syz.9.2811': attribute type 4 has an invalid length. [ 534.297050][T14465] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 534.318207][T14465] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.342335][T14465] usb 9-1: config 0 descriptor?? [ 534.369452][T14465] cp210x 9-1:0.0: cp210x converter detected [ 534.447284][T14706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.674506][T14709] netlink: 'syz.5.2812': attribute type 1 has an invalid length. [ 534.772432][T14465] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 534.830381][T14710] bond10: entered promiscuous mode [ 534.840848][T14710] bond10: entered allmulticast mode [ 534.852466][T14710] 8021q: adding VLAN 0 to HW filter on device bond10 [ 534.872834][T14465] usb 9-1: cp210x converter now attached to ttyUSB0 [ 534.924714][T14712] bridge11: entered promiscuous mode [ 534.930250][T14712] bridge11: entered allmulticast mode [ 534.940904][ T42] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 534.970966][T14712] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 535.038534][T14465] usb 9-1: USB disconnect, device number 6 [ 535.068089][T14465] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.084897][ T42] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 535.124702][T14465] cp210x 9-1:0.0: device disconnected [ 537.706015][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2837'. [ 537.848814][T14787] bond3: entered allmulticast mode [ 537.896065][T14787] bridge3: entered promiscuous mode [ 537.901513][T14787] bridge3: entered allmulticast mode [ 537.911803][T14787] bond3: (slave bridge3): making interface the new active one [ 537.920554][T14787] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 538.196479][T14792] (unnamed net_device) (uninitialized): up delay (129) is not a multiple of miimon (9), value rounded to 126 ms [ 538.727474][T14792] bond6: entered allmulticast mode [ 538.802037][T14795] bridge0: entered allmulticast mode [ 538.843809][T14795] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 538.923299][T14796] netlink: 798 bytes leftover after parsing attributes in process `syz.9.2840'. [ 540.007045][ T59] gretap0: left promiscuous mode [ 540.200902][T14817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2849'. [ 540.244548][T14817] lo: entered promiscuous mode [ 540.249495][T14817] lo: entered allmulticast mode [ 541.847240][T14866] tipc: Failed to remove unknown binding: 66,0,0/1971139775:567753036/567753037 [ 541.870126][T14866] tipc: Failed to remove unknown binding: 66,0,0/1971139775:567753036/567753037 [ 543.644345][T14893] tipc: Failed to remove unknown binding: 66,0,0/0:3928666115/3928666116 [ 543.668962][T14893] tipc: Failed to remove unknown binding: 66,0,0/0:3928666115/3928666116 [ 543.947327][T14902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.021383][T14902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.145236][T14902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.169343][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.177208][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.065688][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.125492][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.628673][T14889] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.643744][T14889] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.652671][T14889] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.662207][T14889] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.899106][T14889] bond3: left allmulticast mode [ 545.905409][T14889] bridge3: left promiscuous mode [ 545.911019][T14889] bridge3: left allmulticast mode [ 546.020083][T14914] tipc: Enabling of bearer rejected, failed to enable media [ 547.395216][T14951] UBIFS error (pid: 14951): cannot open "./file0", error -22 [ 548.024660][T14962] (null): rxe_set_mtu: Set mtu to 1024 [ 548.851970][T14962] infiniband syz1: set down [ 548.872764][T14962] infiniband syz1: added syz_tun [ 548.944069][T14962] syz1: rxe_create_cq: returned err = -12 [ 548.950857][T14962] infiniband syz1: Couldn't create ib_mad CQ [ 548.971009][T14973] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 548.974506][T14962] infiniband syz1: Couldn't open port 1 [ 549.216100][T14962] RDS/IB: syz1: added [ 549.236499][T14962] smc: adding ib device syz1 with port count 1 [ 549.257479][T14962] smc: ib device syz1 port 1 has pnetid [ 551.210667][T14997] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.319149][T15040] netlink: 'syz.1.2922': attribute type 4 has an invalid length. [ 554.328530][T15040] netlink: 'syz.1.2922': attribute type 4 has an invalid length. [ 555.199614][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2925'. [ 555.281300][T15053] syz_tun: entered allmulticast mode [ 556.070429][T15072] netlink: 'syz.8.2932': attribute type 4 has an invalid length. [ 556.293514][T15074] netlink: 'syz.8.2932': attribute type 4 has an invalid length. [ 557.882398][T15111] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2946'. [ 557.956624][T15113] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2946'. [ 561.878814][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2959'. [ 562.659966][T15162] netlink: 'syz.1.2963': attribute type 4 has an invalid length. [ 563.020839][ T23] libceph: connect (1)[c::]:6789 error -101 [ 563.035077][T15164] infiniband syz1: set active [ 563.043911][T15164] infiniband syz1: set active [ 563.051033][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 563.058870][T15164] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.095190][T15164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.348046][ T23] libceph: connect (1)[c::]:6789 error -101 [ 563.354426][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 563.471397][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.478256][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.545927][T15176] bond7: (slave gretap0): Releasing active interface [ 563.601451][T15176] bridge_slave_0: left allmulticast mode [ 563.616032][T15176] bridge_slave_0: left promiscuous mode [ 563.629575][T15176] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.648594][T15176] bond1: (slave veth0_to_bond): Releasing active interface [ 563.734489][T15166] ceph: No mds server is up or the cluster is laggy [ 563.844893][T15176] team0: Port device team_slave_0 removed [ 563.884662][ T23] libceph: connect (1)[c::]:6789 error -101 [ 563.890787][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 563.928616][T15176] team0: Port device team_slave_1 removed [ 563.959449][T15176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.981583][T15176] bond6: (slave macvlan0): Releasing active interface [ 564.169508][T15176] team0: Port device bridge7 removed [ 564.203863][T15176] bond7: (slave veth17): Releasing active interface [ 564.267987][T15176] bond8: (slave veth19): Releasing active interface [ 564.308301][T15176] bond9: (slave veth21): Releasing backup interface [ 564.323602][T15176] veth21: left promiscuous mode [ 564.355448][T15176] bond10: (slave bridge11): Removing an active aggregator [ 564.374912][T15176] bond10: (slave bridge11): Releasing backup interface [ 564.397405][T15176] bridge11: left promiscuous mode [ 564.406202][T15176] bridge11: left allmulticast mode [ 565.063022][T15197] loop9: detected capacity change from 0 to 128 [ 565.124999][T15197] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 565.213377][T15197] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.515145][T11926] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.319370][T15229] Set syz0 is full, maxelem 0 reached [ 566.717719][T15239] netem: change failed [ 566.972229][T15244] sctp: [Deprecated]: syz.9.2993 (pid 15244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.972229][T15244] Use struct sctp_sack_info instead [ 566.990702][T15245] tipc: Enabled bearer , priority 10 [ 567.419027][T15250] xt_hashlimit: max too large, truncated to 1048576 [ 567.807614][ T5781] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 570.426574][T15306] siw: device registration error -23 [ 571.720512][T15337] loop8: detected capacity change from 0 to 764 [ 571.863648][ T5781] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 571.874845][ T5781] Bluetooth: hci4: Injecting HCI hardware error event [ 571.885428][ T5086] Bluetooth: hci4: hardware error 0x00 [ 572.231506][T15341] loop9: detected capacity change from 0 to 256 [ 572.289924][T15341] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 572.419585][ T28] audit: type=1800 audit(1771537588.394:474): pid=15341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3026" name="file1" dev="loop9" ino=1048655 res=0 errno=0 [ 573.367017][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3031'. [ 573.532136][T15364] netlink: 'syz.5.3030': attribute type 4 has an invalid length. [ 573.818208][T15367] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.893308][T15367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.023365][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 574.359214][T15382] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 575.945122][T15404] hfsplus: unable to find HFS+ superblock [ 576.675626][T15421] batadv_slave_0: entered promiscuous mode [ 576.694733][T15419] batadv_slave_0: left promiscuous mode [ 577.052258][T15431] overlayfs: failed to clone upperpath [ 577.655199][T15443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3066'. [ 577.948331][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3066'. [ 579.515677][T15472] netlink: 'syz.5.3069': attribute type 1 has an invalid length. [ 579.827557][T15482] sctp: [Deprecated]: syz.1.3072 (pid 15482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.827557][T15482] Use struct sctp_sack_info instead [ 579.999805][T15476] 8021q: adding VLAN 0 to HW filter on device bond13 [ 580.045756][T15476] bond12: (slave bond13): making interface the new active one [ 580.074351][T15476] bond12: (slave bond13): Enslaving as an active interface with an up link [ 580.127814][T15472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3069'. [ 580.195421][T15472] bond12: entered promiscuous mode [ 580.270746][T15472] bond13: entered promiscuous mode [ 580.291758][T15472] bond12: entered allmulticast mode [ 580.335758][T15472] bond13: entered allmulticast mode [ 580.358241][T15472] 8021q: adding VLAN 0 to HW filter on device bond12 [ 581.998738][T15515] overlayfs: failed to resolve './file2': -2 [ 584.110692][T15537] overlayfs: upper fs does not support file handles, falling back to index=off. [ 584.752849][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3096'. [ 584.776037][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3096'. [ 584.787277][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3096'. [ 586.604581][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3096'. [ 586.635402][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3096'. [ 586.929690][T15559] loop8: detected capacity change from 0 to 128 [ 586.979648][T15559] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 587.048561][T15559] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 587.416132][T11808] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 588.652914][T15599] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 589.870301][T15622] 8021q: adding VLAN 0 to HW filter on device bond4 [ 590.019439][T15622] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 590.084334][ T1106] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 591.051605][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 591.182990][T15647] 8021q: adding VLAN 0 to HW filter on device bond7 [ 591.521988][T15654] gretap0: entered promiscuous mode [ 593.589167][T15691] overlayfs: failed to clone upperpath [ 594.333432][ T23] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 594.533828][ T23] usb 9-1: Using ep0 maxpacket: 8 [ 594.541231][ T23] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 594.562862][ T23] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.603268][ T23] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.622394][ T28] audit: type=1326 audit(1771537610.594:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 594.633227][ T23] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.695384][ T23] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.696474][ T28] audit: type=1326 audit(1771537610.594:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 594.761990][ T23] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.797005][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.818187][ T28] audit: type=1326 audit(1771537610.634:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 594.892324][ T28] audit: type=1326 audit(1771537610.634:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 594.956629][ T28] audit: type=1326 audit(1771537610.634:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 595.060682][ T23] usb 9-1: GET_CAPABILITIES returned 0 [ 595.073752][ T28] audit: type=1326 audit(1771537610.634:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 595.085659][ T23] usbtmc 9-1:16.0: can't read capabilities [ 595.141171][ T28] audit: type=1326 audit(1771537610.634:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 595.198503][ T28] audit: type=1326 audit(1771537610.634:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 595.290287][ T28] audit: type=1326 audit(1771537610.634:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 595.381300][ T28] audit: type=1326 audit(1771537610.644:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 595.422649][ T23] usb 9-1: USB disconnect, device number 7 [ 595.423813][T15701] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 595.484390][T15722] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -19 [ 599.045653][T15795] netlink: 'syz.8.3177': attribute type 4 has an invalid length. [ 599.270330][T15797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.493580][T15803] 9pnet_fd: Insufficient options for proto=fd [ 599.501867][T15803] netlink: 'syz.1.3182': attribute type 4 has an invalid length. [ 599.747868][T15806] bond8: entered allmulticast mode [ 599.830528][T15806] bridge7: entered promiscuous mode [ 599.835889][T15806] bridge7: entered allmulticast mode [ 599.845240][T15806] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 600.283391][T15821] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 600.562413][T15830] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3194'. [ 601.817949][T15858] ref_ctr increment failed for inode: 0xb6b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807da38980 [ 602.368745][T15872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3208'. [ 603.687602][T15889] xt_socket: unknown flags 0x4c [ 607.289258][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 607.310250][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 607.350695][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 607.381146][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 607.404473][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 607.723419][T14462] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 608.110651][T14462] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.141103][T14462] usb 10-1: config 0 has no interface number 0 [ 608.161476][T14462] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 608.189955][T14462] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 608.201378][T14462] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 608.211505][T14462] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.235598][T14462] usb 10-1: config 0 descriptor?? [ 608.264122][T15938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 608.281347][T14462] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 609.128316][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 609.128331][ T28] audit: type=1326 audit(1771537625.104:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15955 comm="syz.5.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7fc00000 [ 609.275922][ C1] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 609.297120][T14462] usb 10-1: USB disconnect, device number 10 [ 610.012566][T15981] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3252'. [ 610.164346][T15983] bridge0: entered promiscuous mode [ 610.174048][T15985] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3254'. [ 610.203811][T15983] bridge0: port 1(macvlan2) entered blocking state [ 610.214066][T15983] bridge0: port 1(macvlan2) entered disabled state [ 610.243695][T15983] macvlan2: entered allmulticast mode [ 610.249264][T15983] bridge0: entered allmulticast mode [ 610.265317][T15983] macvlan2: left allmulticast mode [ 610.279765][T15983] bridge0: left allmulticast mode [ 610.294849][T15983] bridge0: left promiscuous mode [ 612.691780][T16033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.238073][T16039] bond5: entered allmulticast mode [ 613.262811][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3273'. [ 613.318644][T16039] bridge4: entered allmulticast mode [ 613.329795][T16039] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 619.324799][T16101] veth0_vlan: left promiscuous mode [ 619.331601][T16101] veth0_vlan: entered promiscuous mode [ 619.441774][T16103] bond4: entered allmulticast mode [ 619.466875][T16104] veth0_vlan: left promiscuous mode [ 619.905846][ T2952] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.197866][ T2952] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.485862][ T2952] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.731881][ T2952] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.613314][ T28] audit: type=1326 audit(1771537638.574:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 622.719549][ T28] audit: type=1326 audit(1771537638.574:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 622.843818][ T28] audit: type=1326 audit(1771537638.574:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 623.104828][ T28] audit: type=1326 audit(1771537638.574:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 623.183370][ T28] audit: type=1326 audit(1771537638.574:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 623.275431][ T28] audit: type=1326 audit(1771537638.584:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 623.415602][ T28] audit: type=1326 audit(1771537638.594:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 623.511385][ T28] audit: type=1326 audit(1771537638.594:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 623.603290][ T28] audit: type=1326 audit(1771537638.594:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 623.688885][ T28] audit: type=1326 audit(1771537638.594:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 624.931327][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.939968][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.193735][T16161] netlink: 'syz.5.3309': attribute type 1 has an invalid length. [ 625.201635][T16161] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3309'. [ 625.807141][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3311'. [ 626.271998][T16189] block device autoloading is deprecated and will be removed. [ 626.873502][ T2952] hsr_slave_0: left promiscuous mode [ 626.880800][ T2952] hsr_slave_1: left promiscuous mode [ 626.900293][ T2952] batman_adv: batadv0: Interface deactivated: dummy0 [ 626.910831][ T2952] batman_adv: batadv0: Removing interface: dummy0 [ 626.926876][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.941805][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.964305][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.979626][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.998822][ T2952] bridge_slave_1: left allmulticast mode [ 627.012326][ T2952] bridge_slave_1: left promiscuous mode [ 627.019205][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.040863][ T2952] bridge_slave_0: left allmulticast mode [ 627.051561][ T2952] bridge_slave_0: left promiscuous mode [ 627.061890][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.232063][ T2952] veth1_macvtap: left promiscuous mode [ 627.237992][ T2952] veth0_macvtap: left promiscuous mode [ 627.244934][ T2952] veth1_vlan: left promiscuous mode [ 627.250419][ T2952] veth0_vlan: left promiscuous mode [ 627.460581][ T2952] team0 (unregistering): Port device bridge4 removed [ 627.776341][ T2952] bond2 (unregistering): (slave batadv1): Releasing active interface [ 627.850283][ T2952] bond2 (unregistering): (slave veth3): Releasing active interface [ 627.981172][T16216] loop9: detected capacity change from 0 to 128 [ 628.026373][T16216] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 628.082600][T16216] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 628.226868][T16216] ext2 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.300935][ T2952] bond2 (unregistering): Released all slaves [ 628.565972][T11926] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 628.725905][ T2952] bond1 (unregistering): Released all slaves [ 629.599621][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 629.697007][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 629.767631][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.866917][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.478994][ T2952] bond0 (unregistering): Released all slaves [ 630.618332][T16156] bridge0: port 3(syz_tun) entered disabled state [ 630.641887][T16156] syz_tun (unregistering): left allmulticast mode [ 630.652102][T16156] syz_tun (unregistering): left promiscuous mode [ 630.658991][T16156] bridge0: port 3(syz_tun) entered disabled state [ 630.682934][T16230] netlink: 'syz.9.3327': attribute type 10 has an invalid length. [ 630.691656][T16230] netlink: 55 bytes leftover after parsing attributes in process `syz.9.3327'. [ 632.457184][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 632.457200][ T28] audit: type=1326 audit(1771537648.434:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16249 comm="syz.1.3334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e1039c629 code=0x0 [ 632.535943][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.558169][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.575939][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.589759][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.598808][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.606572][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.567978][T16266] chnl_net:caif_netlink_parms(): no params data found [ 633.726659][T14920] libceph: connect (1)[c::]:6789 error -101 [ 633.732771][T14920] libceph: mon0 (1)[c::]:6789 connect error [ 633.852193][T16266] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.871438][T16298] ceph: No mds server is up or the cluster is laggy [ 633.903625][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.910978][T16266] bridge_slave_0: entered allmulticast mode [ 634.022104][T16266] bridge_slave_0: entered promiscuous mode [ 634.060101][T16266] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.076472][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.108618][T16266] bridge_slave_1: entered allmulticast mode [ 634.124749][T16266] bridge_slave_1: entered promiscuous mode [ 634.278764][T16266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.315513][T16266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.466137][T16266] team0: Port device team_slave_0 added [ 634.517463][T16266] team0: Port device team_slave_1 added [ 634.647226][T16266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.672963][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.733582][T16266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.775788][T16266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.782811][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.823253][ T5086] Bluetooth: hci1: command tx timeout [ 634.849842][T16266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.132151][T16266] hsr_slave_0: entered promiscuous mode [ 635.161616][T16266] hsr_slave_1: entered promiscuous mode [ 636.913931][ T5086] Bluetooth: hci1: command tx timeout [ 637.259916][T16358] netlink: 'syz.5.3359': attribute type 10 has an invalid length. [ 637.283719][T16358] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3359'. [ 638.983259][ T5086] Bluetooth: hci1: command tx timeout [ 638.989316][T16266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 639.011209][T16266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 639.871757][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 639.886468][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 639.896044][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 639.905424][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 639.913402][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 639.922815][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.630033][T16266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 640.706060][T16418] netlink: 'syz.1.3369': attribute type 10 has an invalid length. [ 640.723297][T16418] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3369'. [ 641.063287][ T5781] Bluetooth: hci1: command tx timeout [ 641.083765][T16266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 641.330126][T16266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.391879][T16266] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.425306][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.432507][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.459976][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.467244][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.933583][T16403] chnl_net:caif_netlink_parms(): no params data found [ 642.023650][ T5781] Bluetooth: hci3: command tx timeout [ 642.136603][T16403] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.163781][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.171404][T16403] bridge_slave_0: entered allmulticast mode [ 642.209795][T16403] bridge_slave_0: entered promiscuous mode [ 642.239574][T16266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.257305][T16403] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.266641][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.274812][T16403] bridge_slave_1: entered allmulticast mode [ 642.282801][T16403] bridge_slave_1: entered promiscuous mode [ 642.382502][T16403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.396498][T16403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.481673][T16403] team0: Port device team_slave_0 added [ 642.506444][T16403] team0: Port device team_slave_1 added [ 642.567499][T16266] veth0_vlan: entered promiscuous mode [ 642.581280][T16403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.598706][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.627856][T16403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.642211][T16403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.649646][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.676227][T16403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.738616][T16266] veth1_vlan: entered promiscuous mode [ 642.770254][T16403] hsr_slave_0: entered promiscuous mode [ 642.777798][T16403] hsr_slave_1: entered promiscuous mode [ 642.785580][T16403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.793775][T16403] Cannot create hsr debugfs directory [ 642.902001][T16266] veth0_macvtap: entered promiscuous mode [ 642.930570][T16266] veth1_macvtap: entered promiscuous mode [ 642.980686][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.992440][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.003371][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.014425][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.026545][T16266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.062525][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.088188][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.107976][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.122316][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.132571][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.144879][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.156945][T16266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.190095][T16266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.220785][T16266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.238723][T16266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.251414][T16266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.959672][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.991846][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.103837][ T5781] Bluetooth: hci3: command tx timeout [ 644.180529][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.220183][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.782112][ T28] audit: type=1326 audit(1771537660.734:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 645.455115][ T28] audit: type=1326 audit(1771537660.744:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 645.716621][ T28] audit: type=1326 audit(1771537660.824:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 645.723498][T16403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 645.793791][T16403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 645.821322][ T28] audit: type=1326 audit(1771537660.824:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 645.860174][T16403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 645.897718][ T28] audit: type=1326 audit(1771537660.894:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 645.947546][T16403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 645.991582][ T28] audit: type=1326 audit(1771537660.894:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 646.124415][ T28] audit: type=1326 audit(1771537660.924:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 646.183663][ T5781] Bluetooth: hci3: command tx timeout [ 646.260917][ T28] audit: type=1326 audit(1771537660.934:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 646.342591][ T28] audit: type=1326 audit(1771537660.964:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 646.430389][ T28] audit: type=1326 audit(1771537660.964:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 646.549494][T16403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.624422][T16403] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.671345][T16509] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3377'. [ 646.707981][T16509] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3377'. [ 646.739803][T16509] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3377'. [ 646.776654][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.784018][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.866228][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.873604][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.006411][T16403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.058114][T16403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.323496][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'. [ 647.846019][T16403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.094213][T16403] veth0_vlan: entered promiscuous mode [ 648.175172][T16403] veth1_vlan: entered promiscuous mode [ 648.266011][ T5781] Bluetooth: hci3: command tx timeout [ 648.478541][T16403] veth0_macvtap: entered promiscuous mode [ 648.521385][T16403] veth1_macvtap: entered promiscuous mode [ 648.605084][T16547] netlink: 61 bytes leftover after parsing attributes in process `syz.5.3389'. [ 648.633714][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.654700][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.669739][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.693113][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.713883][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.742261][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.779229][T16403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.838573][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.859966][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.871143][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.892776][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.902867][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.926341][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.937687][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.952608][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.967679][T16403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.001689][T16403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.040221][T16403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.073887][T16403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.082660][T16403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.138909][T16562] bridge0: port 1(syz_tun) entered blocking state [ 649.162020][T16562] bridge0: port 1(syz_tun) entered disabled state [ 649.195795][T16566] netlink: 'syz.1.3393': attribute type 10 has an invalid length. [ 649.696194][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.732668][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.867755][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.903682][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.524786][ T23] libceph: connect (1)[c::]:6789 error -22 [ 650.543424][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 650.648729][T16597] ceph: No mds server is up or the cluster is laggy [ 650.773565][ T969] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 650.983723][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 651.027130][ T969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.055261][ T969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.090104][ T969] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.114329][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.143100][ T969] usb 3-1: Product: syz [ 651.153732][ T969] usb 3-1: Manufacturer: syz [ 651.166205][ T969] usb 3-1: SerialNumber: syz [ 651.410157][ T969] usb 3-1: 0:2 : does not exist [ 651.483633][ T969] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 651.571213][ T969] usb 3-1: USB disconnect, device number 2 [ 651.679494][T11886] udevd[11886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.044738][T16679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3417'. [ 655.533466][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3422'. [ 656.389385][T16733] loop2: detected capacity change from 0 to 2048 [ 656.420222][T16733] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 656.457507][T16733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.174277][ T5781] Bluetooth: hci2: unexpected event for opcode 0x041c [ 658.078947][T16779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 658.098266][T16784] pimreg: entered allmulticast mode [ 658.105365][T16786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 658.139272][T16784] pimreg: left allmulticast mode [ 658.248188][T16786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 659.537194][T16809] vlan0: entered promiscuous mode [ 659.542387][T16809] bridge0: entered promiscuous mode [ 659.593916][T16809] vlan0: entered allmulticast mode [ 659.645022][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 659.920035][T16816] bridge0: port 1(syz_tun) entered disabled state [ 660.659043][T16816] infiniband syz1: set active [ 660.695756][T16816] team0: Port device team_slave_1 removed [ 660.748395][T16816] bond2: (slave veth0_virt_wifi): Releasing active interface [ 660.806432][T16816] team0: Port device bridge1 removed [ 660.824572][T16816] bond1: (slave bridge3): Releasing backup interface [ 660.908248][T16816] bond2: (slave veth9): Releasing active interface [ 660.951623][T16816] bond3: (slave bridge4): Releasing backup interface [ 660.969447][T16816] bond5: (slave ip6gretap1): Releasing backup interface [ 660.997889][T16816] ip6gretap1: left allmulticast mode [ 661.022716][T16816] bond6: (slave bridge0): Releasing backup interface [ 661.088180][T16816] bond8: (slave bridge7): Releasing backup interface [ 661.233273][ T5781] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 661.242557][ T5781] Bluetooth: hci2: Injecting HCI hardware error event [ 661.254469][ T5781] Bluetooth: hci2: hardware error 0x00 [ 662.305224][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.347042][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.357755][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 663.504333][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 663.558080][T16852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3460'. [ 663.737457][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.784574][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.988550][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.999973][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.120014][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.143392][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.614194][T16896] netlink: 'syz.5.3468': attribute type 1 has an invalid length. [ 666.144314][T16899] 8021q: adding VLAN 0 to HW filter on device bond15 [ 666.174244][T16899] bond14: (slave bond15): making interface the new active one [ 666.210075][T16899] bond14: (slave bond15): Enslaving as an active interface with an up link [ 666.596513][T16896] bond14: (slave gretap2): Enslaving as a backup interface with an up link [ 666.643149][T16912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3468'. [ 666.705998][T16912] 8021q: adding VLAN 0 to HW filter on device bond14 [ 666.992519][T16919] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3472'. [ 667.379164][T16928] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 667.440930][T16928] bond16: (slave lo): Enslaving as an active interface with an up link [ 667.497775][T16928] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 667.560000][T16937] Invalid ELF header magic: != ELF [ 667.869638][T16941] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 668.249666][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3479'. [ 668.384178][T16947] IPVS: Scheduler module ip_vs_ not found [ 668.556601][T16956] syz1: rxe_set_mtu: Set mtu to 256 [ 670.583270][ T42] hsr_slave_0: left promiscuous mode [ 670.651920][ T42] hsr_slave_1: left promiscuous mode [ 670.689050][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.728874][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.766914][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.049427][ T42] veth1_macvtap: left promiscuous mode [ 671.071835][ T42] veth0_macvtap: left promiscuous mode [ 671.088323][ T42] veth1_vlan: left promiscuous mode [ 671.103915][ T42] veth0_vlan: left promiscuous mode [ 672.324533][ T42] team0 (unregistering): Port device bridge0 removed [ 672.526782][ T42] bond1 (unregistering): (slave veth9): Releasing active interface [ 672.919363][T17012] loop2: detected capacity change from 0 to 2048 [ 672.989519][T17012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 673.329116][ T42] bond1 (unregistering): Released all slaves [ 674.746504][T17054] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 677.269514][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 677.269531][ T28] audit: type=1326 audit(1771537949.247:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17067 comm="syz.2.3517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76dc19c629 code=0x0 [ 677.817605][ T42] team0 (unregistering): Port device team_slave_1 removed [ 677.972992][ T42] team0 (unregistering): Port device team_slave_0 removed [ 678.154317][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.317296][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.550396][ T42] bond0 (unregistering): Released all slaves [ 679.661378][T17041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3510'. [ 679.706271][T17090] syz_tun: entered allmulticast mode [ 679.717633][T17090] syz_tun: left allmulticast mode [ 680.221161][T17108] vlan2: entered promiscuous mode [ 680.226956][T17108] bridge0: entered promiscuous mode [ 680.232468][T17108] vlan2: entered allmulticast mode [ 680.402990][T17108] bridge0: entered allmulticast mode [ 680.603895][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3529'. [ 680.992276][T17108] bridge_slave_0: left allmulticast mode [ 681.023564][T17108] bridge_slave_0: left promiscuous mode [ 681.029435][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.082064][T17108] bridge_slave_1: left allmulticast mode [ 681.088357][T17108] bridge_slave_1: left promiscuous mode [ 681.132568][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.175481][T17108] bond0: (slave bond_slave_0): Releasing backup interface [ 681.230309][T17108] bond0: (slave bond_slave_1): Releasing backup interface [ 681.400602][T17108] team0: Port device team_slave_0 removed [ 681.557680][T17108] team0: Port device team_slave_1 removed [ 681.579537][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.589529][T17108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.604853][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.616725][T17108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.861779][ T28] audit: type=1326 audit(1771537953.837:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.3527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b59d9c629 code=0x0 [ 682.029012][ T42] IPVS: stop unused estimator thread 0... [ 683.219700][T17164] fuse: Bad value for 'fd' [ 684.430956][T17204] tipc: Enabling of bearer rejected, failed to enable media [ 686.347206][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.361396][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.332991][T17272] syz_tun: entered allmulticast mode [ 692.368535][T17294] dummy0: Caught tx_queue_len zero misconfig [ 699.164669][T17392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3596'. [ 701.085312][T17444] tipc: Started in network mode [ 701.119395][T17444] tipc: Node identity ac14140f, cluster identity 4711 [ 701.144508][T17444] tipc: New replicast peer: 255.255.255.255 [ 701.171419][T17444] tipc: Enabled bearer , priority 10 [ 701.177904][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3608'. [ 701.189893][T17449] tipc: Disabling bearer [ 702.953412][T17493] vlan2: entered promiscuous mode [ 702.958535][T17493] bridge0: entered promiscuous mode [ 702.964209][T17493] vlan2: entered allmulticast mode [ 702.969392][T17493] bridge0: entered allmulticast mode [ 703.261245][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'. [ 703.668144][T17493] bridge_slave_0: left allmulticast mode [ 703.743337][T17493] bridge_slave_0: left promiscuous mode [ 703.784363][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.838794][T17493] bridge_slave_1: left allmulticast mode [ 703.884867][T17493] bridge_slave_1: left promiscuous mode [ 703.919540][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.014769][T17493] bond0: (slave bond_slave_0): Releasing backup interface [ 704.318179][T17493] bond0: (slave bond_slave_1): Releasing backup interface [ 704.859259][T17493] team0: Port device team_slave_0 removed [ 704.933762][T17493] team0: Port device team_slave_1 removed [ 704.944469][T17493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.954052][T17493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.966401][T17493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.004342][T17493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.675945][T17526] lo speed is unknown, defaulting to 1000 [ 705.682919][T17526] lo speed is unknown, defaulting to 1000 [ 705.690819][T17526] lo speed is unknown, defaulting to 1000 [ 705.702413][T17526] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 705.815750][T17526] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 705.987290][T17526] lo speed is unknown, defaulting to 1000 [ 706.015811][T17526] lo speed is unknown, defaulting to 1000 [ 706.059443][T17526] lo speed is unknown, defaulting to 1000 [ 706.085415][T17526] lo speed is unknown, defaulting to 1000 [ 706.103749][T17526] lo speed is unknown, defaulting to 1000 [ 706.122822][T17526] lo speed is unknown, defaulting to 1000 [ 706.143563][T17526] lo speed is unknown, defaulting to 1000 [ 710.314331][T17616] tipc: Enabling of bearer rejected, already enabled [ 710.352397][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 711.097008][T17616] tipc: Disabling bearer [ 711.900847][T17642] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3657'. [ 713.665614][T17665] tipc: Started in network mode [ 713.670539][T17665] tipc: Node identity ac14140f, cluster identity 4711 [ 713.706758][T17665] tipc: New replicast peer: 255.255.255.255 [ 713.767025][T17669] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 713.793647][T17669] CIFS mount error: No usable UNC path provided in device string! [ 713.793647][T17669] [ 713.804187][T17669] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 714.455167][T17665] tipc: Enabled bearer , priority 10 [ 714.499078][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3662'. [ 714.510445][T17671] tipc: Disabling bearer [ 714.970112][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3665'. [ 718.844112][T17752] siw: device registration error -23 [ 724.100367][T17828] lo speed is unknown, defaulting to 1000 [ 724.686058][T17857] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.3702'. [ 724.901206][T17860] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 725.067466][T17843] lo speed is unknown, defaulting to 1000 [ 726.333382][T17895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3712'. [ 728.176008][T17905] lo speed is unknown, defaulting to 1000 [ 728.923610][T17937] CIFS mount error: No usable UNC path provided in device string! [ 728.923610][T17937] [ 728.933764][T17937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 729.104805][ T5781] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 729.420012][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3723'. [ 729.451545][T17945] bond0: option arp_all_targets: invalid value (172) [ 729.682770][T17951] xt_TCPMSS: Only works on TCP SYN packets [ 733.231440][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 733.412176][T18014] overlayfs: failed to clone upperpath [ 733.685515][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3741'. [ 734.612964][T18022] team1: entered promiscuous mode [ 734.618475][T18022] team1: entered allmulticast mode [ 734.645534][T18001] lo speed is unknown, defaulting to 1000 [ 735.054374][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3746'. [ 735.153692][T18045] team2: entered promiscuous mode [ 735.170529][T18045] team2: entered allmulticast mode [ 735.180924][T18045] 8021q: adding VLAN 0 to HW filter on device team2 [ 735.220059][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3746'. [ 735.276696][T18046] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 735.383891][T18046] team3: entered promiscuous mode [ 735.396051][T18046] team3: entered allmulticast mode [ 735.407662][T18046] 8021q: adding VLAN 0 to HW filter on device team3 [ 739.681230][T18116] lo speed is unknown, defaulting to 1000 [ 740.642156][T18142] lo speed is unknown, defaulting to 1000 [ 741.321936][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cec6800: rx timeout, send abort [ 741.822086][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cec6c00: rx timeout, send abort [ 741.831487][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cec6800: abort rx timeout. Force session deactivation [ 742.330486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cec6c00: abort rx timeout. Force session deactivation [ 744.656866][T18215] lo speed is unknown, defaulting to 1000 [ 744.846557][T18240] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 744.989841][T18243] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 745.082813][T18243] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 745.114676][T18243] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 745.177398][T18243] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 745.250012][T18243] bond1: (slave geneve2): making interface the new active one [ 745.388843][T18243] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 746.661273][T18275] bridge1: entered promiscuous mode [ 746.666837][T18275] bridge1: entered allmulticast mode [ 746.684689][T18275] team0: Port device bridge1 added [ 746.926371][T18273] bridge0: port 1(team0) entered blocking state [ 746.961674][T18273] bridge0: port 1(team0) entered disabled state [ 747.042213][T18273] team0: entered allmulticast mode [ 747.435865][T18273] team0: entered promiscuous mode [ 747.510185][T18275] geneve2: entered promiscuous mode [ 747.518905][T18275] geneve2: entered allmulticast mode [ 747.788789][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.795331][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.208362][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 754.318277][T18346] team1: entered promiscuous mode [ 754.336050][T18346] team1: entered allmulticast mode [ 754.342185][T18346] 8021q: adding VLAN 0 to HW filter on device team1 [ 754.361763][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 754.382548][T18355] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 754.582027][T18355] team2: entered promiscuous mode [ 754.615384][T18355] team2: entered allmulticast mode [ 754.630463][T18355] 8021q: adding VLAN 0 to HW filter on device team2 [ 755.049818][T18378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3822'. [ 755.361158][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3824'. [ 755.448910][T18387] syz_tun (unregistering): left allmulticast mode [ 755.867047][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 756.699267][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045477c00: rx timeout, send abort [ 757.199387][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045477800: rx timeout, send abort [ 757.213067][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045477c00: abort rx timeout. Force session deactivation [ 757.707729][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045477800: abort rx timeout. Force session deactivation [ 759.800198][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3849'. [ 759.894667][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3849'. [ 765.234554][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 767.231138][ T28] audit: type=1326 audit(2000000026.990:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.5.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7fc00000 [ 767.813109][ T28] audit: type=1326 audit(2000000027.570:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.5.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b59d9c629 code=0x7fc00000 [ 768.007967][T18602] overlayfs: failed to clone upperpath [ 771.501556][T18697] bridge1: entered promiscuous mode [ 771.513119][T18697] bridge1: entered allmulticast mode [ 771.532010][T18697] team0: Port device bridge1 added [ 771.606681][T18697] bridge0: port 1(team0) entered blocking state [ 771.623353][T18697] bridge0: port 1(team0) entered disabled state [ 771.637732][T18697] team0: entered allmulticast mode [ 771.668772][T18697] team0: entered promiscuous mode [ 771.726885][T18702] geneve3: entered promiscuous mode [ 771.745784][T18702] geneve3: entered allmulticast mode [ 774.319060][T18718] lo speed is unknown, defaulting to 1000 [ 774.675993][T18723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3907'. [ 775.840197][T18733] infiniband syz0: set down [ 776.258852][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 776.291558][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3911'. [ 776.644798][T18760] o2cb: This node has not been configured. [ 776.669484][T18760] o2cb: Cluster check failed. Fix errors before retrying. [ 776.880058][T18760] (syz.1.3913,18760,1):user_dlm_register:674 ERROR: status = -22 [ 776.890410][T18760] (syz.1.3913,18760,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 777.841137][ T28] audit: type=1804 audit(2000000037.600:537): pid=18772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3916" name="file0" dev="ramfs" ino=54723 res=1 errno=0 [ 780.321620][T18806] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 784.450275][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'. [ 784.483846][T18880] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.492692][T18880] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.501560][T18880] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.510543][T18880] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.568463][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'. [ 786.609473][T18911] netlink: 'syz.2.3946': attribute type 13 has an invalid length. [ 787.700377][ T28] audit: type=1326 audit(2000000047.460:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc19c629 code=0x7ffc0000 [ 787.791628][ T28] audit: type=1326 audit(2000000047.460:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc19c629 code=0x7ffc0000 [ 787.870321][ T28] audit: type=1326 audit(2000000047.460:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f76dc19c629 code=0x7ffc0000 [ 787.950035][ T28] audit: type=1326 audit(2000000047.460:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc19c629 code=0x7ffc0000 [ 788.029250][ T28] audit: type=1326 audit(2000000047.460:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f76dc19c629 code=0x7ffc0000 [ 788.119428][ T28] audit: type=1326 audit(2000000047.460:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc19c629 code=0x7ffc0000 [ 788.185246][ T28] audit: type=1326 audit(2000000047.470:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f76dc19c629 code=0x7ffc0000 [ 788.271805][ T28] audit: type=1326 audit(2000000047.470:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76dc19c392 code=0x7ffc0000 [ 788.326504][ T28] audit: type=1326 audit(2000000047.500:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f76dc15cece code=0x7ffc0000 [ 788.413389][ T28] audit: type=1326 audit(2000000047.560:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f76dc19c457 code=0x7ffc0000 [ 789.842590][T18958] lo speed is unknown, defaulting to 1000 [ 791.316009][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3965'. [ 791.395462][T19011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3966'. [ 791.420676][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3965'. [ 793.443673][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3973'. [ 793.701745][T19042] netlink: 'syz.5.3973': attribute type 5 has an invalid length. [ 793.737853][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3973'. [ 796.420347][T19088] VFS: Mount too revealing [ 797.306814][T19119] xt_nat: multiple ranges no longer supported [ 799.212451][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 799.212467][ T28] audit: type=1326 audit(2000000058.960:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 799.287817][ T28] audit: type=1326 audit(2000000058.960:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 799.320161][ T28] audit: type=1326 audit(2000000058.970:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 799.433758][ T28] audit: type=1326 audit(2000000059.020:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 800.322734][ T28] audit: type=1326 audit(2000000059.050:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 800.412531][ T28] audit: type=1326 audit(2000000059.050:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 800.444704][T19145] overlayfs: failed to clone upperpath [ 800.502908][ T28] audit: type=1326 audit(2000000059.050:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 800.576792][ T28] audit: type=1326 audit(2000000059.050:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 800.630482][ T28] audit: type=1326 audit(2000000059.050:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 800.763908][ T28] audit: type=1326 audit(2000000059.050:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19134 comm="syz.5.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 802.705039][T19178] team0: Mode changed to "loadbalance" [ 802.774599][T19178] tipc: Enabled bearer , priority 0 [ 804.181665][T19195] overlayfs: failed to clone upperpath [ 804.262546][T19197] overlayfs: failed to resolve './file1': -2 [ 804.604243][T19198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.974636][T19217] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 804.983661][T19217] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 806.618205][T19235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 807.722924][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4021'. [ 808.413514][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 809.342431][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.358717][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.649821][T19324] xt_TCPMSS: Only works on TCP SYN packets [ 812.986254][T19325] netlink: 'syz.0.4036': attribute type 1 has an invalid length. [ 813.476976][T19325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 813.535133][T19329] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 814.729604][T19325] bond2: (slave gretap1): making interface the new active one [ 814.799614][T19325] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 815.713524][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'. [ 818.447440][T19417] netlink: 'syz.0.4056': attribute type 13 has an invalid length. [ 825.213427][T14463] kernel write not supported for file bpf-prog (pid: 14463 comm: kworker/0:9) [ 826.480779][T19520] xt_TCPMSS: Only works on TCP SYN packets [ 829.850100][ T1106] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.969709][T19547] tipc: Enabled bearer , priority 14 [ 829.986893][T19549] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4082'. [ 830.043386][T19549] 0ªX¹¦À: renamed from caif0 [ 830.078743][T19549] tipc: Disabling bearer [ 830.111665][T19551] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4084'. [ 830.144226][T19549] 0ªX¹¦À: entered allmulticast mode [ 830.156233][T19549] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 830.231604][ T1106] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.272536][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'. [ 830.283164][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4084'. [ 830.371134][ T1106] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.802337][ T1106] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.562035][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 837.013565][T19641] openvswitch: netlink: Message has 4 unknown bytes. [ 839.263159][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 839.263177][ T28] audit: type=1804 audit(2000000099.010:621): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4104" name="bus" dev="ramfs" ino=56755 res=1 errno=0 [ 839.363235][ T28] audit: type=1804 audit(2000000099.020:622): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4104" name="bus" dev="ramfs" ino=56755 res=1 errno=0 [ 839.403393][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4105'. [ 842.598556][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4114'. [ 843.001348][ T1106] hsr_slave_0: left promiscuous mode [ 843.020531][ T1106] hsr_slave_1: left promiscuous mode [ 843.049712][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.072132][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.114131][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.144294][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.171376][ T1106] bridge_slave_1: left allmulticast mode [ 843.184607][ T1106] bridge_slave_1: left promiscuous mode [ 843.197256][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.219124][ T1106] bridge_slave_0: left allmulticast mode [ 843.225455][ T1106] bridge_slave_0: left promiscuous mode [ 843.243925][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.360855][ T1106] veth1_macvtap: left promiscuous mode [ 843.381105][ T1106] veth1_vlan: left promiscuous mode [ 843.395486][ T1106] veth0_vlan: left promiscuous mode [ 846.944346][T19772] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 846.944729][ T1106] bond2 (unregistering): Released all slaves [ 846.982398][T19772] ref_ctr increment failed for inode: 0x3da offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030d99300 [ 847.050776][T19773] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 847.068520][T19773] ref_ctr decrement failed for inode: 0x3da offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030d99300 [ 847.184463][ T1106] bond1 (unregistering): (slave veth3): Releasing active interface [ 849.055737][ T1106] bond1 (unregistering): Released all slaves [ 849.870755][T19807] xt_socket: unknown flags 0x50 [ 850.943764][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 851.024409][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 851.878384][T19735] vxcan0: entered allmulticast mode [ 851.901047][T19780] tipc: Enabled bearer , priority 10 [ 851.986351][T19809] team0: left allmulticast mode [ 851.991307][T19809] team0: left promiscuous mode [ 852.011025][T19809] bridge0: port 1(team0) entered disabled state [ 852.098151][T19809] team0: Port device bridge1 removed [ 852.129291][T19796] tipc: Enabled bearer , priority 0 [ 853.269569][ T1106] IPVS: stop unused estimator thread 0... [ 853.334336][T14459] tipc: Node number set to 2886997007 [ 853.470076][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 853.549278][T19833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4146'. [ 853.776092][T19833] bridge9: port 1(veth17) entered blocking state [ 853.785198][T19833] bridge9: port 1(veth17) entered disabled state [ 853.791841][T19833] veth17: entered allmulticast mode [ 853.825197][T19833] veth17: entered promiscuous mode [ 854.072791][T19839] bridge9: port 2(veth19) entered blocking state [ 854.133357][T19839] bridge9: port 2(veth19) entered disabled state [ 854.140561][T19839] veth19: entered allmulticast mode [ 854.157970][T19839] veth19: entered promiscuous mode [ 854.177895][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'. [ 855.843362][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4149'. [ 857.049050][T19858] bond1: (slave vcan1): refused to change device type [ 858.788914][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4162'. [ 858.923957][T19922] netlink: get zone limit has 4 unknown bytes [ 859.992439][T19913] kernel write not supported for file bpf-prog (pid: 19913 comm: kworker/1:4) [ 862.368969][T19896] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.390819][T19896] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.399895][T19896] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.408896][T19896] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.621102][T19896] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.630143][T19896] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.639144][T19896] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.648400][T19896] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.707016][T19917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4164'. [ 862.818185][T19949] netlink: 'syz.1.4170': attribute type 3 has an invalid length. [ 862.835594][T19949] netlink: 'syz.1.4170': attribute type 3 has an invalid length. [ 863.064559][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4174'. [ 863.139282][ T1106] tipc: Left network mode [ 863.218752][T19966] bridge17: port 1(veth23) entered blocking state [ 863.258214][T19966] bridge17: port 1(veth23) entered disabled state [ 863.273297][T19966] veth23: entered allmulticast mode [ 863.285017][T19966] veth23: entered promiscuous mode [ 864.465970][ T1106] bond4: (slave ip6gretap1): Removing an active aggregator [ 864.503679][ T1106] bond4: (slave ip6gretap1): Releasing backup interface [ 864.576212][T19962] bridge17: port 2(veth25) entered blocking state [ 864.582815][T19962] bridge17: port 2(veth25) entered disabled state [ 864.595668][T19962] veth25: entered allmulticast mode [ 864.616022][T19962] veth25: entered promiscuous mode [ 865.566976][T19990] tipc: Enabling of bearer rejected, failed to enable media [ 866.436440][ T1106] bond2: (slave gretap0): Releasing active interface [ 870.669426][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.676152][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.472854][T20064] netlink: 'syz.0.4196': attribute type 11 has an invalid length. [ 872.137884][ T1106] hsr_slave_0: left promiscuous mode [ 872.157235][ T1106] hsr_slave_1: left promiscuous mode [ 872.210973][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.237527][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.272628][ T1106] bridge_slave_1: left allmulticast mode [ 872.294875][ T1106] bridge_slave_1: left promiscuous mode [ 872.315091][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.369055][ T1106] bridge_slave_0: left allmulticast mode [ 872.395188][ T1106] bridge_slave_0: left promiscuous mode [ 872.415423][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.614609][ T1106] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 872.710157][ T1106] bridge4 (unregistering): left allmulticast mode [ 872.788465][ T1106] bond5 (unregistering): Released all slaves [ 873.591666][T20100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4203'. [ 874.897213][T20106] netlink: get zone limit has 4 unknown bytes [ 876.049466][ T1106] bond4 (unregistering): Released all slaves [ 876.414628][ T1106] bond3 (unregistering): (slave bridge3): Releasing active interface [ 876.575350][ T1106] bond3 (unregistering): Released all slaves [ 876.880721][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4208'. [ 876.974183][ T1106] bond2 (unregistering): (slave veth3): Releasing active interface [ 879.074734][ T1106] bond2 (unregistering): Released all slaves [ 879.393357][ T1106] bond1 (unregistering): Released all slaves [ 880.829197][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 880.944906][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 881.078845][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.232110][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.104427][ T1106] bond0 (unregistering): Released all slaves [ 882.465747][T20126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4209'. [ 882.582451][ T28] audit: type=1326 audit(2000000142.340:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ffb9c629 code=0x7ffc0000 [ 882.611248][ T28] audit: type=1326 audit(2000000142.340:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ffb9c629 code=0x7ffc0000 [ 882.636418][T19913] lo speed is unknown, defaulting to 1000 [ 882.673991][T14460] lo speed is unknown, defaulting to 1000 [ 882.679939][ T28] audit: type=1326 audit(2000000142.340:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f90ffb9c629 code=0x7ffc0000 [ 882.783064][ T28] audit: type=1326 audit(2000000142.350:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ffb9c629 code=0x7ffc0000 [ 883.595946][ T28] audit: type=1326 audit(2000000142.380:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f90ffb9c629 code=0x7ffc0000 [ 883.857652][ T28] audit: type=1326 audit(2000000142.380:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90ffb9c392 code=0x7ffc0000 [ 883.951198][ T28] audit: type=1326 audit(2000000142.410:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f90ffb5cece code=0x7ffc0000 [ 884.022461][ T28] audit: type=1326 audit(2000000142.410:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f90ffb9c457 code=0x7ffc0000 [ 884.251333][ T28] audit: type=1326 audit(2000000142.410:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90ffb5cece code=0x7ffc0000 [ 884.310714][ T28] audit: type=1326 audit(2000000142.410:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.0.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f90ffb5cece code=0x7ffc0000 [ 889.304663][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 889.304679][ T28] audit: type=1804 audit(2000000149.070:684): pid=20232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4232" name="bus" dev="ramfs" ino=57633 res=1 errno=0 [ 889.392706][T19913] IPVS: starting estimator thread 0... [ 889.398390][ T28] audit: type=1804 audit(2000000149.100:685): pid=20232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4232" name="bus" dev="ramfs" ino=57633 res=1 errno=0 [ 889.456379][T20239] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 889.474299][T20239] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 889.481659][T20239] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 889.533129][T20236] IPVS: using max 18 ests per chain, 43200 per kthread [ 889.874580][T20253] veth17: left allmulticast mode [ 889.889872][T20253] veth17: left promiscuous mode [ 889.904604][T20253] bridge9: port 1(veth17) entered disabled state [ 889.927613][T20253] veth19: left allmulticast mode [ 889.939252][T20253] veth19: left promiscuous mode [ 889.954426][T20253] bridge9: port 2(veth19) entered disabled state [ 890.530135][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'. [ 890.541461][T20263] team0: left allmulticast mode [ 890.546997][T20263] team0: left promiscuous mode [ 890.553193][T20263] bridge0: port 1(team0) entered disabled state [ 892.996478][T20260] lo speed is unknown, defaulting to 1000 [ 896.089478][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4252'. [ 902.314784][ T5774] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 903.783893][T20443] netlink: 'syz.0.4273': attribute type 1 has an invalid length. [ 903.966411][T20443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 904.047631][T20449] bond3: (slave gretap2): making interface the new active one [ 904.105401][T20449] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 904.546017][T20468] netlink: 'syz.5.4278': attribute type 1 has an invalid length. [ 905.915730][T20468] 8021q: adding VLAN 0 to HW filter on device bond17 [ 906.060392][T20476] 8021q: adding VLAN 0 to HW filter on device bond17 [ 906.103786][T20476] bond17: (slave vti0): The slave device specified does not support setting the MAC address [ 906.164733][T20476] bond17: (slave vti0): Error -95 calling set_mac_address [ 906.343314][ T5774] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 906.354747][ T5774] Bluetooth: hci0: Injecting HCI hardware error event [ 906.364355][ T5781] Bluetooth: hci0: hardware error 0x00 [ 908.423130][ T5781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 909.325176][T20520] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 909.545818][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4292'. [ 909.647930][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4292'. [ 910.727791][T20507] lo speed is unknown, defaulting to 1000 [ 912.273562][T20558] netlink: 'syz.1.4299': attribute type 10 has an invalid length. [ 914.669796][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'. [ 916.175082][T20603] netlink: 'syz.0.4308': attribute type 1 has an invalid length. [ 916.440009][T20603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 916.634651][T20605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 916.641954][T20605] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 916.798215][T20605] bond4: (slave vti0): Error -95 calling set_mac_address [ 917.514417][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'. [ 918.455974][T20617] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.464834][T20617] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.473586][T20617] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.482269][T20617] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.524950][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'. [ 920.862519][T20652] netlink: 'syz.1.4318': attribute type 1 has an invalid length. [ 920.882161][T20652] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4318'. [ 921.121857][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4319'. [ 921.404553][T20668] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 925.041979][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4325'. [ 925.586399][T20699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4331'. [ 925.794506][T20699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4331'. [ 925.884249][T20709] xt_cgroup: invalid path, errno=-2 [ 926.563616][T20703] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 926.592011][T20703] team0: Port device batadv1 added [ 926.738723][T20716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4335'. [ 926.889012][T20721] netlink: 'syz.2.4338': attribute type 1 has an invalid length. [ 926.924519][T20721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 926.968642][T20721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4338'. [ 926.986021][T20721] bond2: entered promiscuous mode [ 927.023411][T20721] bond2: entered allmulticast mode [ 927.079360][T20721] bond2: (slave dummy0): making interface the new active one [ 927.141452][T20721] dummy0: entered promiscuous mode [ 927.691181][T20724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.863978][T20721] dummy0: entered allmulticast mode [ 927.891518][T20721] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 928.079366][T20741] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 928.112497][T20741] bond3: entered promiscuous mode [ 928.118047][T20741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 928.180531][T20741] bond3: (slave bridge4): making interface the new active one [ 928.188492][T20741] bridge4: entered promiscuous mode [ 928.197702][T20741] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 928.239166][T20741] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 928.252040][T20741] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 928.848826][T20768] xt_socket: unknown flags 0x4c [ 931.224198][ T969] IPVS: starting estimator thread 0... [ 931.231135][T20793] IPVS: rr: FWM 3 0x00000003 - no destination available [ 931.333063][T20794] IPVS: using max 19 ests per chain, 45600 per kthread [ 931.924383][T20815] lo: Caught tx_queue_len zero misconfig [ 931.934014][T20817] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4358'. [ 932.008114][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'. [ 932.111050][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.117832][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.465559][T20890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4377'. [ 934.658480][T20892] gretap0: left promiscuous mode [ 934.666556][T20892] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 934.773578][T20890] bond9 (unregistering): (slave gretap0): Releasing backup interface [ 934.798555][T20900] netlink: zone id is out of range [ 934.809529][T20890] bond9 (unregistering): Released all slaves [ 934.823342][T20900] netlink: zone id is out of range [ 934.843203][T20900] netlink: zone id is out of range [ 934.848392][T20900] netlink: zone id is out of range [ 934.886734][T20900] netlink: zone id is out of range [ 934.892066][T20900] netlink: zone id is out of range [ 934.907653][T20900] netlink: zone id is out of range [ 934.943076][T20900] netlink: zone id is out of range [ 934.948391][T20900] netlink: zone id is out of range [ 938.345536][T20948] debugfs: Directory 'netdev:nicvf0' with parent 'phy13' already present! [ 938.367001][T20951] netlink: 'syz.0.4391': attribute type 9 has an invalid length. [ 938.398490][T20948] debugfs: Directory 'netdev:nicvf0' with parent 'phy13' already present! [ 941.557474][T20985] netlink: 'syz.5.4398': attribute type 1 has an invalid length. [ 941.616679][T20985] bond18: entered promiscuous mode [ 941.626389][T20985] 8021q: adding VLAN 0 to HW filter on device bond18 [ 941.669187][T20987] bond18: (slave bridge18): making interface the new active one [ 941.686831][T20987] bridge18: entered promiscuous mode [ 941.705231][T20987] bond18: (slave bridge18): Enslaving as an active interface with an up link [ 941.903405][T20985] bond18: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 941.948477][T20985] bond18: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 943.337044][T21014] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 944.223385][T21014] bond9: entered promiscuous mode [ 944.228814][T21014] 8021q: adding VLAN 0 to HW filter on device bond9 [ 944.390591][T21014] bond9: (slave bridge10): making interface the new active one [ 944.401597][T21014] bridge10: entered promiscuous mode [ 944.413040][T21014] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 948.344175][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4421'. [ 949.395109][T21090] 8021q: adding VLAN 0 to HW filter on device bond10 [ 949.476695][T21092] bond10: entered promiscuous mode [ 950.982015][T21087] bond10: left promiscuous mode [ 955.002701][T21156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4433'. [ 955.231382][T21156] geneve3: entered promiscuous mode [ 956.393003][ T28] audit: type=1326 audit(2000000215.620:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21157 comm="syz.1.4436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e1039c629 code=0x0 [ 956.561305][T21147] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 956.794709][T21147] team0: Port device batadv1 added [ 957.674505][T21172] overlayfs: failed to clone upperpath [ 957.708049][ T28] audit: type=1326 audit(2000000217.470:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21171 comm="syz.0.4440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90ffb9c629 code=0x0 [ 958.246949][T21186] netlink: 'syz.5.4442': attribute type 4 has an invalid length. [ 961.894950][T21243] tipc: Enabling of bearer rejected, failed to enable media [ 963.793598][T21268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4462'. [ 964.785223][T21275] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 964.810489][T21277] batadv2: entered promiscuous mode [ 964.817467][T21277] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 970.213269][T21318] netlink: 'syz.1.4470': attribute type 11 has an invalid length. [ 970.262430][T21319] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 970.317776][T21319] team0: Port device batadv1 added [ 978.027857][T21418] netlink: 'syz.2.4489': attribute type 16 has an invalid length. [ 978.073979][T21418] netlink: 'syz.2.4489': attribute type 17 has an invalid length. [ 978.302798][T21418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.321291][T21418] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.344470][T21418] net_ratelimit: 24 callbacks suppressed [ 978.344477][T21418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 980.476464][T21439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4492'. [ 983.638439][T21467] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 984.671416][T21498] UBIFS error (pid: 21498): cannot open "./file0", error -22 [ 985.464247][T21510] 9pnet_fd: Insufficient options for proto=fd [ 985.895252][T21510] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 986.351322][T21517] bridge6: entered allmulticast mode [ 987.471789][T21539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4510'. [ 987.984708][T21545] netlink: 'syz.1.4514': attribute type 5 has an invalid length. [ 988.307335][T21551] lo: entered allmulticast mode [ 988.541129][T21554] netlink: 'syz.2.4517': attribute type 1 has an invalid length. [ 988.645873][T21554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 988.658807][T21557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.813116][T21557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.821895][T21557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.929896][T21557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.976345][T21557] bond4: (slave geneve2): making interface the new active one [ 989.051300][T21557] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 990.115000][T21551] lo: left allmulticast mode [ 991.754709][T21608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4527'. [ 991.871326][T21609] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 992.969911][T21627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4532'. [ 993.802127][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.808639][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.477242][T21780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4565'. [ 1003.158615][T21792] UBIFS error (pid: 21792): cannot open "./file0", error -22 [ 1003.275063][T21797] netlink: 'syz.1.4567': attribute type 1 has an invalid length. [ 1003.347935][T21771] lo speed is unknown, defaulting to 1000 [ 1003.516293][T21797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1003.551120][T21797] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1003.614263][T21800] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1003.643816][T21800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1003.679726][T21800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1003.693313][T21800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1003.713413][T21800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1003.738030][T21800] bond11: (slave geneve2): making interface the new active one [ 1003.764461][T21800] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 1003.971118][T21817] netlink: 'syz.5.4571': attribute type 10 has an invalid length. [ 1004.063274][T21817] bond16: option mode: unable to set because the bond device has slaves [ 1006.393375][T21852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.452441][T21852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1009.943429][T21882] libceph: resolve '4..' (ret=-3): failed [ 1010.284066][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1011.489903][T21907] xt_TCPMSS: Only works on TCP SYN packets [ 1011.572469][T21888] team0 (unregistering): Port device batadv1 removed [ 1012.507010][T21910] netlink: 'syz.1.4589': attribute type 1 has an invalid length. [ 1012.693852][T21910] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1012.751692][T21913] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1012.783156][T21913] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1012.809604][T21913] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1012.828673][T21913] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1012.854634][T21913] bond12: (slave geneve3): making interface the new active one [ 1012.892426][T21913] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 1012.939860][T21915] netlink: 'syz.2.4590': attribute type 10 has an invalid length. [ 1013.003227][T21915] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1013.146360][T21917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1013.180339][T21922] syz_tun: entered promiscuous mode [ 1013.209456][T21922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1013.225772][T21922] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 1015.323996][T21982] netlink: 'syz.0.4603': attribute type 10 has an invalid length. [ 1015.845922][T21982] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1020.705171][T22067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1021.427437][T22076] vlan0: entered promiscuous mode [ 1021.458491][T22076] bond13: entered promiscuous mode [ 1024.786407][T22114] netlink: 'syz.2.4628': attribute type 4 has an invalid length. [ 1025.510235][T22126] syz_tun: entered allmulticast mode [ 1025.557605][T22128] netlink: 'syz.1.4631': attribute type 1 has an invalid length. [ 1025.667540][T22128] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1025.676444][T22104] lo speed is unknown, defaulting to 1000 [ 1025.970915][T22128] bond14: entered allmulticast mode [ 1026.024935][T22128] bond14: (slave ip6gretap2): making interface the new active one [ 1026.106639][T22128] ip6gretap2: entered allmulticast mode [ 1026.237442][T22128] bond14: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1027.482180][T22153] libceph: resolve '4..' (ret=-3): failed [ 1029.110921][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4639'. [ 1031.346888][T22197] bond16: option mode: unable to set because the bond device has slaves [ 1031.502310][T22200] netlink: 'syz.0.4646': attribute type 21 has an invalid length. [ 1031.843685][T22211] netlink: 'syz.5.4655': attribute type 10 has an invalid length. [ 1031.860913][T22211] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4655'. [ 1031.894519][T22211] debugfs: Directory 'netdev:nicvf0' with parent 'phy13' already present! [ 1032.802643][T22230] overlayfs: failed to clone upperpath [ 1034.618705][T22255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4656'. [ 1034.628715][T22255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.247635][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4662'. [ 1038.754539][T22284] lo speed is unknown, defaulting to 1000 [ 1043.619708][T22359] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 1044.747142][T22369] syz0: rxe_set_mtu: Set mtu to 4096 [ 1055.037493][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.044020][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.323245][T22450] ptrace attach of "./syz-executor exec"[22454] was attempted by "./syz-executor exec"[22450] [ 1062.636974][T22478] netlink: 'syz.1.4699': attribute type 10 has an invalid length. [ 1062.672489][T22478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4699'. [ 1062.748454][T22478] team0: Failed to send options change via netlink (err -105) [ 1062.782942][T22478] team0: Port device geneve0 added [ 1068.516500][T22520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4707'. [ 1068.591236][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4707'. [ 1068.972323][T22532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.102540][T22532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.781195][T22541] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 1072.823725][T22573] netlink: 'syz.2.4723': attribute type 1 has an invalid length. [ 1074.054860][T22595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1076.431853][T22622] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1076.503153][T22622] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1077.071746][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1080.167551][T22661] bond_slave_1: entered promiscuous mode [ 1080.229481][T22661] bond_slave_1: left promiscuous mode [ 1082.553609][T22677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1091.961024][ T28] audit: type=1326 audit(2000000351.720:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.038474][T22754] netlink: 'syz.0.4776': attribute type 1 has an invalid length. [ 1092.095157][ T28] audit: type=1326 audit(2000000351.720:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.653149][ T28] audit: type=1326 audit(2000000351.720:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.676862][ T28] audit: type=1326 audit(2000000351.720:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.700300][ T28] audit: type=1326 audit(2000000351.750:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.723045][ T28] audit: type=1326 audit(2000000351.750:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.745812][ T28] audit: type=1326 audit(2000000351.820:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.770295][ T28] audit: type=1326 audit(2000000351.840:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.792990][ T28] audit: type=1326 audit(2000000351.840:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1092.826294][ T28] audit: type=1326 audit(2000000351.840:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22752 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f8e1039c629 code=0x7ffc0000 [ 1093.085865][T19913] IPVS: starting estimator thread 0... [ 1093.224115][T22760] IPVS: using max 16 ests per chain, 38400 per kthread [ 1093.856502][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1100.070071][T22827] syz.0.4799 (22827) used greatest stack depth: 17864 bytes left [ 1102.835190][T22856] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.4807'. [ 1102.856971][T22856] openvswitch: netlink: ct_state flags 00030000 unsupported [ 1105.120355][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1108.084157][T22891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4822'. [ 1109.398547][T22907] virtio-fs: tag not found [ 1114.041579][T22937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4828'. [ 1116.429984][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.436487][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.835112][T22957] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1116.870669][T22957] ref_ctr increment failed for inode: 0x721 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d14cc00 [ 1116.906185][T22957] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1116.948252][T22957] ref_ctr decrement failed for inode: 0x721 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d14cc00 [ 1119.930529][T22989] overlayfs: failed to clone upperpath [ 1121.914353][T23006] MTD: Attempt to mount non-MTD device "./file0" [ 1121.922326][T23006] ./file0: Can't open blockdev [ 1122.896402][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 1122.896419][ T28] audit: type=1326 audit(2000000382.660:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1123.874345][ T28] audit: type=1326 audit(2000000382.660:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1124.101391][ T28] audit: type=1326 audit(2000000382.690:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1124.703498][ T28] audit: type=1326 audit(2000000382.690:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1124.771097][ T28] audit: type=1326 audit(2000000382.690:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1124.932743][ T28] audit: type=1326 audit(2000000382.690:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1125.685476][ T28] audit: type=1326 audit(2000000382.690:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1125.726418][ T28] audit: type=1326 audit(2000000382.690:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1125.754542][ T28] audit: type=1326 audit(2000000382.690:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1125.950849][ T28] audit: type=1326 audit(2000000382.690:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.5.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b59d9c629 code=0x7ffc0000 [ 1151.433312][T23203] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4894'. [ 1151.547986][T23203] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4894'. [ 1158.858866][T23255] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4911'. [ 1166.434667][T23327] netlink: 'syz.1.4930': attribute type 39 has an invalid length. [ 1166.594982][T23327] syz_tun (unregistering): left allmulticast mode [ 1166.626844][T14920] syz0: rxe_query_port: returned err = -19 [ 1167.354435][ T59] smc: removing ib device syz0 [ 1168.927423][T23346] xt_cgroup: invalid path, errno=-2 [ 1171.104204][T23357] tipc: Enabling of bearer rejected, already enabled [ 1171.224525][T23357] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4939'. [ 1171.297282][T23357] tipc: Enabling of bearer rejected, failed to enable media [ 1171.596019][T23362] netlink: 'syz.0.4940': attribute type 10 has an invalid length. [ 1171.802294][T23367] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4940'. [ 1172.869689][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4937'. [ 1175.899864][T23414] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1180.559680][T23452] netlink: 'syz.0.4955': attribute type 4 has an invalid length. [ 1182.266735][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.273162][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.425088][T23509] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1190.934048][T23540] netlink: 'syz.2.4976': attribute type 1 has an invalid length. [ 1191.035733][T23540] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1191.182001][T23542] vlan3: entered promiscuous mode [ 1191.203015][T23542] bond6: entered promiscuous mode [ 1191.234689][T23542] vlan3: entered allmulticast mode [ 1191.256805][T23542] bond6: entered allmulticast mode [ 1191.275583][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1192.131767][T23540] bond6: (slave bridge7): making interface the new active one [ 1192.139537][T23540] bridge7: entered promiscuous mode [ 1192.145458][T23540] bridge7: entered allmulticast mode [ 1192.151875][T23540] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 1197.531011][T23592] netlink: 'syz.5.4989': attribute type 4 has an invalid length. [ 1208.887325][T23689] xt_TCPMSS: Only works on TCP SYN packets [ 1210.317608][T23698] team_slave_1: Caught tx_queue_len zero misconfig [ 1210.458736][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1215.018609][T23766] netlink: 'syz.2.5028': attribute type 4 has an invalid length. [ 1215.718220][T23777] xt_TCPMSS: Only works on TCP SYN packets [ 1219.553485][T23811] tipc: Started in network mode [ 1219.584836][T23811] tipc: Node identity 2, cluster identity 4711 [ 1219.591259][T23811] tipc: Node number set to 2 [ 1222.309730][T23827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5047'. [ 1224.934560][T23843] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5050'. [ 1226.511763][T23843] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5050'. [ 1227.561003][T23863] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 1229.370918][T23880] netlink: 'syz.0.5061': attribute type 1 has an invalid length. [ 1230.393006][T23885] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1230.420987][T23885] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1230.430796][T23885] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1230.449296][T23885] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1230.546006][T23885] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1230.555069][T23885] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1230.570108][T23885] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1230.583789][T23885] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1230.748305][T23880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5061'. [ 1230.777673][T23880] bond6: (slave bridge3): making interface the new active one [ 1230.787063][T23880] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1232.324416][T23886] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 1232.449314][T23901] netlink: 'syz.2.5065': attribute type 3 has an invalid length. [ 1234.074224][ T42] ------------[ cut here ]------------ [ 1234.080667][ T42] WARNING: CPU: 0 PID: 42 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 1234.090552][ T42] Modules linked in: [ 1234.094593][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1234.102035][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1234.112581][ T42] Workqueue: iou_exit io_ring_exit_work [ 1234.118244][ T42] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 1234.123999][ T42] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 1234.143688][ T42] RSP: 0018:ffffc90000b2fa40 EFLAGS: 00010293 [ 1234.149835][ T42] RAX: ffffffff8a7bea87 RBX: ffff88807ec8a000 RCX: ffff88801d269e00 [ 1234.157839][ T42] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1234.166020][ T42] RBP: ffffc90000b2fbb0 R08: ffffc90000b2f9c7 R09: 1ffff92000165f38 [ 1234.174277][ T42] R10: dffffc0000000000 R11: fffff52000165f39 R12: dffffc0000000000 [ 1234.182356][ T42] R13: ffff88807ec8a288 R14: 0000000100016925 R15: 0000000100016927 [ 1234.190377][ T42] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1234.199507][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1234.206187][ T42] CR2: 0000001b2f420000 CR3: 000000005e096000 CR4: 00000000003506f0 [ 1234.214238][ T42] Call Trace: [ 1234.217566][ T42] [ 1234.220540][ T42] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1234.226491][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.231728][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 1234.237549][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 1234.243319][ T42] process_scheduled_works+0xa5d/0x15d0 [ 1234.249048][ T42] ? assign_work+0x430/0x430 [ 1234.253689][ T42] ? assign_work+0x3d0/0x430 [ 1234.258374][ T42] worker_thread+0xa55/0xfc0 [ 1234.263028][ T42] kthread+0x2fa/0x390 [ 1234.267206][ T42] ? pr_cont_work+0x560/0x560 [ 1234.272018][ T42] ? kthread_blkcg+0xd0/0xd0 [ 1234.276695][ T42] ret_from_fork+0x48/0x80 [ 1234.281313][ T42] ? kthread_blkcg+0xd0/0xd0 [ 1234.285943][ T42] ret_from_fork_asm+0x11/0x20 [ 1234.290802][ T42] [ 1234.293873][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1234.301184][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1234.308593][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1234.318681][ T42] Workqueue: iou_exit io_ring_exit_work [ 1234.324288][ T42] Call Trace: [ 1234.327595][ T42] [ 1234.330557][ T42] dump_stack_lvl+0x18c/0x250 [ 1234.335274][ T42] ? show_regs_print_info+0x20/0x20 [ 1234.340507][ T42] ? load_image+0x400/0x400 [ 1234.345054][ T42] panic+0x2dc/0x730 [ 1234.348984][ T42] ? bpf_jit_dump+0xd0/0xd0 [ 1234.353527][ T42] ? ret_from_fork_asm+0x11/0x20 [ 1234.358498][ T42] __warn+0x2e0/0x470 [ 1234.362516][ T42] ? io_ring_exit_work+0x3a7/0x820 [ 1234.367670][ T42] ? io_ring_exit_work+0x3a7/0x820 [ 1234.372822][ T42] report_bug+0x2be/0x4f0 [ 1234.377210][ T42] ? io_ring_exit_work+0x3a7/0x820 [ 1234.382373][ T42] ? io_ring_exit_work+0x3a7/0x820 [ 1234.387524][ T42] ? io_ring_exit_work+0x3a9/0x820 [ 1234.392675][ T42] handle_bug+0xcf/0x120 [ 1234.396968][ T42] exc_invalid_op+0x1a/0x50 [ 1234.401512][ T42] asm_exc_invalid_op+0x1a/0x20 [ 1234.406400][ T42] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 1234.412163][ T42] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 1234.431832][ T42] RSP: 0018:ffffc90000b2fa40 EFLAGS: 00010293 [ 1234.438021][ T42] RAX: ffffffff8a7bea87 RBX: ffff88807ec8a000 RCX: ffff88801d269e00 [ 1234.446025][ T42] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1234.454196][ T42] RBP: ffffc90000b2fbb0 R08: ffffc90000b2f9c7 R09: 1ffff92000165f38 [ 1234.462189][ T42] R10: dffffc0000000000 R11: fffff52000165f39 R12: dffffc0000000000 [ 1234.470181][ T42] R13: ffff88807ec8a288 R14: 0000000100016925 R15: 0000000100016927 [ 1234.478180][ T42] ? io_ring_exit_work+0x3a7/0x820 [ 1234.483359][ T42] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1234.489213][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.494433][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 1234.500178][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 1234.505935][ T42] process_scheduled_works+0xa5d/0x15d0 [ 1234.511546][ T42] ? assign_work+0x430/0x430 [ 1234.516192][ T42] ? assign_work+0x3d0/0x430 [ 1234.520812][ T42] worker_thread+0xa55/0xfc0 [ 1234.525439][ T42] kthread+0x2fa/0x390 [ 1234.529525][ T42] ? pr_cont_work+0x560/0x560 [ 1234.534240][ T42] ? kthread_blkcg+0xd0/0xd0 [ 1234.538846][ T42] ret_from_fork+0x48/0x80 [ 1234.543288][ T42] ? kthread_blkcg+0xd0/0xd0 [ 1234.547900][ T42] ret_from_fork_asm+0x11/0x20 [ 1234.552707][ T42] [ 1234.556319][ T42] Kernel Offset: disabled [ 1234.560793][ T42] Rebooting in 86400 seconds..