last executing test programs:

10m10.387972387s ago: executing program 32 (id=552):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x2002)
r1 = syz_io_uring_setup(0x1cfd, &(0x7f0000000280)={0x0, 0x800, 0x10000, 0x1, 0x3d22}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16}]})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

10m5.575401271s ago: executing program 33 (id=604):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)

9m57.843607102s ago: executing program 1 (id=683):
setns(0xc9, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r1, 0x0, 0x4068101)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x3}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
syz_open_dev$sndmidi(0x0, 0x9, 0x2)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x3, 0xf32}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x2000000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)

9m57.622004745s ago: executing program 1 (id=684):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xfea3, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

9m57.564824104s ago: executing program 1 (id=686):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8008976)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

9m57.350940867s ago: executing program 1 (id=689):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000640)={[{@fat=@showexec}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@discard}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002f40)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

9m57.350541883s ago: executing program 1 (id=690):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r1=>0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r2=>0x0)
unshare(0x24020400)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r1, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0)

9m56.785672638s ago: executing program 1 (id=694):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x10000000000000}, &(0x7f0000000340)=0x18)

9m56.737758289s ago: executing program 34 (id=694):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x10000000000000}, &(0x7f0000000340)=0x18)

9m20.850809592s ago: executing program 4 (id=1258):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x9520388457b6d5a6}, 0x28)
open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032abd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
prlimit64(0x0, 0xc, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xa318, 0x2002)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x8000000d})
mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='affs\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
shutdown(0xffffffffffffffff, 0x1)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x7c9)

9m19.395003807s ago: executing program 4 (id=1266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6}}}}]}, 0x40}}, 0x4008000)

9m19.324697077s ago: executing program 4 (id=1267):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2)

9m19.250005359s ago: executing program 4 (id=1268):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)

9m18.958816127s ago: executing program 4 (id=1269):
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)

9m18.282370958s ago: executing program 4 (id=1270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x3ff, 0x4)

9m17.975369093s ago: executing program 35 (id=1270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x3ff, 0x4)

9m12.460616828s ago: executing program 2 (id=1310):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14)

9m12.372774213s ago: executing program 2 (id=1311):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000001740)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

9m12.264102942s ago: executing program 2 (id=1312):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
r1 = msgget$private(0x0, 0x32e)
msgsnd(r1, &(0x7f0000000940)={0x1}, 0x2000, 0x800)

9m12.263806565s ago: executing program 2 (id=1313):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

9m12.114900912s ago: executing program 2 (id=1315):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000)

9m11.832349232s ago: executing program 2 (id=1317):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)

9m11.728671027s ago: executing program 36 (id=1317):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)

9m9.843237737s ago: executing program 5 (id=1331):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

9m9.671159891s ago: executing program 5 (id=1332):
r0 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90000001})
epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x5af6, 0x0, 0x0)
epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x542a)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0)

9m8.723379776s ago: executing program 5 (id=1335):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
setns(0xc9, 0x0)
mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2, &(0x7f00000002c0)={[{@dyn}]})

9m8.602777239s ago: executing program 5 (id=1336):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x2)

9m8.528192238s ago: executing program 5 (id=1337):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x16c)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4005, @local, 'batadv0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

9m7.782589197s ago: executing program 5 (id=1343):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f0000000000)=[{r0, 0x141}], 0x1, 0x3)

9m7.53374798s ago: executing program 7 (id=1348):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1, r0}, 0xc)

9m7.43087429s ago: executing program 7 (id=1349):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e248525481ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e0506c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

9m7.429370564s ago: executing program 7 (id=1350):
r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x11}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x718ba0e8031c3b0a, {0x9, 0x100000001}, 0x3}, 0x1)

9m7.334505573s ago: executing program 7 (id=1351):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}})
syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0xac5)
syz_clone3(&(0x7f0000000440)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x1, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

9m7.122114253s ago: executing program 7 (id=1353):
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000014})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d, 0x1}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0xffffcfbf}, {}, {0x6, 0x0, 0x0, 0xfffffffd}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

9m5.292605068s ago: executing program 7 (id=1356):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xc, 0xb}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a1}, 0x40004890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756", 0xe, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)

9m5.089160153s ago: executing program 37 (id=1356):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xc, 0xb}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a1}, 0x40004890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756", 0xe, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)

8m59.164831457s ago: executing program 8 (id=1385):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="257ed0f891e7"})

8m59.16455034s ago: executing program 8 (id=1386):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0xffffffff, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e705a4f251dd9", 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x9})

8m59.103270381s ago: executing program 8 (id=1387):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)

8m59.044190941s ago: executing program 8 (id=1388):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

8m58.953127704s ago: executing program 8 (id=1389):
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

8m58.533903552s ago: executing program 8 (id=1394):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write(r0, &(0x7f00000005c0)="41217beb32678131caacd5abc283a181109f0f09946f9cb3b22b138744155ad18133cd431d3f64f020df9e604c47f6865ec52b42e8b43da62738ea4f7aaf75", 0x3f)

8m58.433409341s ago: executing program 38 (id=1394):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write(r0, &(0x7f00000005c0)="41217beb32678131caacd5abc283a181109f0f09946f9cb3b22b138744155ad18133cd431d3f64f020df9e604c47f6865ec52b42e8b43da62738ea4f7aaf75", 0x3f)

8m52.617244677s ago: executing program 39 (id=1343):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f0000000000)=[{r0, 0x141}], 0x1, 0x3)

1m35.3387955s ago: executing program 9 (id=10435):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

1m35.244869231s ago: executing program 9 (id=10436):
r0 = landlock_create_ruleset(&(0x7f00000005c0)={0xc0d8, 0xa, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0)
landlock_restrict_self(r0, 0xf)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r1, 0xc)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000bc0), 0x1, 0xb0a, &(0x7f0000000c00)="$eJzs3EtrJEUcAPB/dx67JtGJIKLrwcAeDD4mT0FhxeQoLMvCCt6EwZk8yOxGkhE2uZgVQT+AIOpFv0E8COthYdGjZ716E1kMHjwqRHpeec3ksTtxYPz9oNNVXT2p6q6p6uru6Q7gf2ss+5NGPBsRXycRufrytLnGxYit2nr3ZraXsimJ3d0bfyaRRMTdme2lxppJfT5c/wfPRMQPW0lcTo/mu76xuVIol0tr9fhE5eb7E+sbm68s3ywslhZLt2ZmZ6emJl+bfvX1jm3rWjr729Xb13769vN3Pip+/8+XSczFSD1t/3Z0yliMNffJYfOdzqzL9m9n0t/FggAAcKxsaN4XEdmQ7VLkoi8M3gAAAKDXvBkRuwAAAECPS5z/AwAAQI9r/A7g7sz2UmPq7i8S+C/tzEfEaK3+G89311L6Y6s6vxgDETH0V3LgyZCk9rFHNhYRH19/45dsinN6DhsAgD1bdyLi/lyL8X9SH/89vMlD8Vbvwhk7FDf+A4Dzd3++dqA+evxPm9d/osX1n74Wx+6HcfLxP33QgWxoY2c+4sq+dzve21f/daN99djj1Wt+A8nCcrmUje2eiIjxGLiQxaeOyaN/cePvdmlZ/V95+a2fG1OWfzbfWyN90H/h4GeKhUrhUbaZPTt3Ii71t6r/pNn+kzbXf+dOmcdzX/240i7t5PrnPO1+E/FCy/a/d7aWHP9+1olqfzDR6BWOulbJvdsuf/XfXVn7Hzq+/qv9f/N9vetnz+PFPz79ol1a4/7PWfv/weTtagEH68tuFyqVtamIweTq0eXTZy9zr2rsj8b+yup//HLr4/9x/X/2nbh+yjyfvlH8rl3a/vt/2ZTl37gXyPnL6r94QvtPDrT/swd+/eT5D9vlf3L9Z+1/tlqY8foS47+TnbaCul1OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATkkjYiSSNN8Mp2k+HzEcEU/FUFpeXa+8tLD6wa1ilhYxGgPpwnK5NBkRuVo8yeJT1fBefPpQfCYinoyIz3KPVeP591bLxW5vPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE3DETESSZqPiLQaTtN8vpb2e67bpQMAAAA6ZrTbBQAAAADOnfN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAD1jc2VwrlcmlNQEBAoBnods8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Lp/AwAA//+zx8et")

1m35.147675958s ago: executing program 9 (id=10437):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5)

1m35.147387999s ago: executing program 9 (id=10438):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32], 0x11, 0x5e7, &(0x7f0000000680)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x100, 0x30)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
fstat(r0, &(0x7f0000002e00))

1m35.073672081s ago: executing program 9 (id=10439):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x280000004001)

1m34.911642392s ago: executing program 9 (id=10440):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0xfffffffc}}], 0x30, 0x4000000}], 0x1, 0x0)

1m34.836311619s ago: executing program 40 (id=10440):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0xfffffffc}}], 0x30, 0x4000000}], 0x1, 0x0)

21.206698523s ago: executing program 3 (id=11788):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000)

21.059504761s ago: executing program 3 (id=11793):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
close(0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})

20.984478311s ago: executing program 3 (id=11795):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xa13edebd6eef6c4e}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

20.984052959s ago: executing program 3 (id=11797):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x40002, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)

20.899730643s ago: executing program 3 (id=11800):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000)

20.568707941s ago: executing program 3 (id=11801):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0)

9.307574884s ago: executing program 0 (id=11827):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/152, 0x98)

7.653458029s ago: executing program 0 (id=11829):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

7.65336468s ago: executing program 6 (id=11830):
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)

5.890578893s ago: executing program 6 (id=11831):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c0000000000000000000001040000002000000005"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d0007012b037000fedbdf25067c00000c000180f607b41a7f0000010c000380080001"], 0x2c}}, 0x4008030)

5.890018652s ago: executing program 0 (id=11832):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef)

4.030785605s ago: executing program 6 (id=11833):
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000180)={0x1, [0x1]}, 0x5d)

4.030618677s ago: executing program 0 (id=11834):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x80ffffffffffffff, 0x0, 0x0, 0x0, 0x8})

4.030537182s ago: executing program 6 (id=11835):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/152, 0x98)

2.061543579s ago: executing program 6 (id=11836):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}})

2.061380736s ago: executing program 0 (id=11837):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

319.873µs ago: executing program 6 (id=11838):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v2={0x3, 0x3, 0x15, 0xfffffff7}, 0x9, 0x1)

0s ago: executing program 0 (id=11839):
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x105000)

kernel console output (not intermixed with test programs):

of miimon (100), value rounded to 0 ms
[  468.055617][T24120] 8021q: adding VLAN 0 to HW filter on device bond6
[  469.100169][T24150] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7765'.
[  469.100192][T24150] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7765'.
[  470.333318][T24186] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  470.611966][T24207] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.7790'.
[  471.663369][T24231] ip_tables: iptables: counters copy to user failed while replacing table
[  471.666723][T24231] ip_tables: iptables: counters copy to user failed while replacing table
[  472.323007][T24233] fuse: fd is not a fuse device
[  472.386924][T24239] netlink: 'syz.6.7803': attribute type 58 has an invalid length.
[  472.386937][T24239] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7803'.
[  473.647480][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7831'.
[  473.648009][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7831'.
[  473.648247][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7831'.
[  473.648431][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7831'.
[  473.648708][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7831'.
[  473.987378][T24320] netlink: 260 bytes leftover after parsing attributes in process `syz.9.7841'.
[  475.384174][T24406] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7878'.
[  475.994726][T24422] netlink: Unknown nat attribute (0)
[  475.994745][T24422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.355756][T24503] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.7916'.
[  479.146953][T24518] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7923'.
[  479.796450][T24529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.136094][T24535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.181959][T24537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7932'.
[  480.556175][T24560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7942'.
[  480.717845][T24570] ipvlan0: left promiscuous mode
[  480.719128][T24570] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  480.723753][T24572] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  480.765276][T24574] fuse: fd is not a fuse device
[  481.642681][T24602] ip_tables: iptables: counters copy to user failed while replacing table
[  481.649731][T24602] ip_tables: iptables: counters copy to user failed while replacing table
[  485.790549][T24729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.925590][T24739] netlink: 'syz.6.8022': attribute type 1 has an invalid length.
[  485.925615][T24739] netlink: 'syz.6.8022': attribute type 2 has an invalid length.
[  485.925650][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8022'.
[  486.316555][T24751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8028'.
[  486.416923][T24753] overlayfs: failed to clone upperpath
[  487.631923][T24797] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  489.795568][T24907] xt_policy: output policy not valid in PREROUTING and INPUT
[  491.334022][T24943] netlink: 'syz.6.8117': attribute type 1 has an invalid length.
[  491.334042][T24943] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8117'.
[  492.058909][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8129'.
[  493.340692][T25052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8162'.
[  493.432956][T25062] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8170'.
[  494.808491][T25109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8191'.
[  494.839005][T25119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8194'.
[  494.839379][T25119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8194'.
[  494.871084][T25123] fuse: fd is not a fuse device
[  495.057681][T25133] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8200'.
[  495.874560][T25155] xt_TPROXY: Can be used only with -p tcp or -p udp
[  495.993115][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8207'.
[  496.068031][T25173] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  496.518313][T25210] netlink: 'syz.9.8228': attribute type 3 has an invalid length.
[  496.518332][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8228'.
[  496.827713][T25226] netlink: 'syz.6.8236': attribute type 3 has an invalid length.
[  496.827732][T25226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8236'.
[  497.049147][T25243] openvswitch: netlink: IP tunnel TTL not specified.
[  497.799878][T25284] wg0 speed is unknown, defaulting to 1000
[  499.169632][T25326] fuse: fd is not a fuse device
[  499.359111][T25337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8285'.
[  500.479017][T25384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8303'.
[  501.228823][   T35] audit: type=1326 audit(1791561640.730:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  501.228867][   T35] audit: type=1326 audit(1791561640.730:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  501.230926][   T35] audit: type=1326 audit(1791561640.730:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  501.230963][   T35] audit: type=1326 audit(1791561640.730:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  501.231597][   T35] audit: type=1326 audit(1791561640.730:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  501.291246][   T35] audit: type=1326 audit(1791561640.786:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  501.291285][   T35] audit: type=1326 audit(1791561640.786:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa85519dec2 code=0x7ffc0000
[  501.291314][   T35] audit: type=1326 audit(1791561640.786:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa85519df57 code=0x7ffc0000
[  501.291341][   T35] audit: type=1326 audit(1791561640.786:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa85515ae51 code=0x7ffc0000
[  501.291367][   T35] audit: type=1326 audit(1791561640.786:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.0.8313" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa85519ef49 code=0x7ffc0000
[  501.929328][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  501.929381][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  503.528452][T25441] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  503.743398][T25449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.196654][T25455] xt_TPROXY: Can be used only with -p tcp or -p udp
[  504.689281][T25497] Invalid source name
[  504.689298][T25497] UBIFS error (pid: 25497): cannot open "./file0", error -22
[  504.761637][T25501] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8354'.
[  505.459949][T25517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.303000][T25539] process '/newroot/2580/file0' started with executable stack
[  506.735965][T25570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8386'.
[  506.735980][T25570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8386'.
[  506.736318][T25570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8386'.
[  506.736328][T25570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8386'.
[  511.473556][T25757] netlink: 15358 bytes leftover after parsing attributes in process `syz.0.8473'.
[  511.737141][T25773] netlink: 15358 bytes leftover after parsing attributes in process `syz.9.8481'.
[  511.874854][ T9848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.874871][ T9848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.906765][ T9848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.906784][ T9848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.996441][T25821] ipip0: entered promiscuous mode
[  513.140168][T25844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8515'.
[  513.710776][T25889] netlink: 'syz.6.8535': attribute type 1 has an invalid length.
[  513.710797][T25889] netlink: 'syz.6.8535': attribute type 1 has an invalid length.
[  513.984729][   T35] kauditd_printk_skb: 71 callbacks suppressed
[  513.984740][   T35] audit: type=1326 audit(1791561652.551:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.984762][   T35] audit: type=1326 audit(1791561652.551:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.986456][   T35] audit: type=1326 audit(1791561652.551:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.986479][   T35] audit: type=1326 audit(1791561652.551:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.986494][   T35] audit: type=1326 audit(1791561652.551:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.986508][   T35] audit: type=1326 audit(1791561652.551:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.986522][   T35] audit: type=1326 audit(1791561652.551:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.986536][   T35] audit: type=1326 audit(1791561652.551:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  513.986550][   T35] audit: type=1326 audit(1791561652.551:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.0.8549" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa85519e159 code=0x7ffc0000
[  515.776688][T25980] netlink: 13310 bytes leftover after parsing attributes in process `syz.6.8572'.
[  515.835822][T14360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.835835][T14360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.101774][T26006] netlink: 13310 bytes leftover after parsing attributes in process `syz.0.8581'.
[  516.588780][T26025] netlink: 13310 bytes leftover after parsing attributes in process `syz.0.8591'.
[  519.010155][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8623'.
[  519.140993][T26103] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8625'.
[  519.388340][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8630'.
[  520.321551][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8647'.
[  520.322096][T26153] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8647'.
[  520.503936][T26164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.606567][T26170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8656'.
[  522.375163][T26215] futex_wake_op: syz.9.8677 tries to shift op by 144; fix this program
[  522.386642][T26218] netlink: 13566 bytes leftover after parsing attributes in process `syz.0.8678'.
[  522.942804][T26260] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  523.029557][T26265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.209462][T26272] futex_wake_op: syz.0.8702 tries to shift op by 144; fix this program
[  524.865793][ T7852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.865838][ T7852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.244241][T26336] futex_wake_op: syz.0.8725 tries to shift op by 144; fix this program
[  525.353519][T26344] futex_wake_op: syz.0.8730 tries to shift op by 144; fix this program
[  525.455129][T26352] futex_wake_op: syz.0.8734 tries to shift op by 144; fix this program
[  525.901779][T26360] futex_wake_op: syz.9.8738 tries to shift op by 144; fix this program
[  526.142922][T26373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8744'.
[  526.954695][T26411] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8762'.
[  527.089232][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8764'.
[  527.089300][T26415] netlink: 'syz.9.8764': attribute type 5 has an invalid length.
[  527.089307][T26415] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8764'.
[  527.834474][T26447] overlayfs: failed to clone upperpath
[  528.083980][T26475] 9p: Bad value for 'wfdno'
[  528.264735][T26497] 9p: Bad value for 'wfdno'
[  528.832343][T26538] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8822'.
[  529.072030][T26553] 9p: Bad value for 'wfdno'
[  529.151389][T26561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8833'.
[  529.660991][T26587] wg0 speed is unknown, defaulting to 1000
[  529.981057][T26596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8845'.
[  530.072571][T26600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.205175][T26609] futex_wake_op: syz.9.8851 tries to shift op by 144; fix this program
[  530.899636][T26635] futex_wake_op: syz.0.8862 tries to shift op by 144; fix this program
[  531.348120][T26658] netlink: 'syz.0.8871': attribute type 1 has an invalid length.
[  531.348151][T26658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.321239][T26669] netlink: 'syz.9.8876': attribute type 3 has an invalid length.
[  532.321259][T26669] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8876'.
[  532.415053][   T25] libceph: connect (1)0.0.0.0:6789 error -101
[  532.415378][   T25] libceph: mon0 (1)0.0.0.0:6789 connect error
[  532.464821][T26677] jffs2: notice: (26677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  532.703783][   T25] libceph: connect (1)0.0.0.0:6789 error -101
[  532.703911][   T25] libceph: mon0 (1)0.0.0.0:6789 connect error
[  533.062567][T26712] 9p: Bad value for 'wfdno'
[  533.157777][T26716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.256085][   T25] libceph: connect (1)0.0.0.0:6789 error -101
[  533.256158][   T25] libceph: mon0 (1)0.0.0.0:6789 connect error
[  533.279843][T26671] ceph: No mds server is up or the cluster is laggy
[  533.391789][T26731] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8905'.
[  533.621226][T26754] netlink: 'syz.9.8915': attribute type 3 has an invalid length.
[  533.621243][T26754] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8915'.
[  533.719133][T26762] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8918'.
[  534.431553][T26799] CIFS: bad ip= option (1270.0.1)
[  534.431778][T26799] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  534.432105][T26799] CIFS: Attempting to mount (null)
[  534.435276][T26799] CIFS: VFS: Error connecting to socket. Aborting operation.
[  534.443650][T26799] CIFS: VFS: cifs_mount failed w/return code = -101
[  534.481406][T26801] futex_wake_op: syz.9.8935 tries to shift op by 144; fix this program
[  536.189277][T26861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8963'.
[  536.189298][T26861] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8963'.
[  536.585223][T26873] CIFS: Attempting to mount //127.0.0.1/share
[  536.586432][T26873] CIFS: VFS: Error connecting to socket. Aborting operation.
[  536.586464][T26873] CIFS: VFS: cifs_mount failed w/return code = -101
[  536.686690][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8971'.
[  536.845417][   T35] audit: type=1326 audit(1791561673.666:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26888 comm="syz.0.8976" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85519e159 code=0x0
[  537.141761][T26908] CIFS: bad ip= option (1270.0.1)
[  537.142047][T26908] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  537.446499][T26929] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  537.446527][T26929] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  537.783307][T26934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.365544][T26939] futex_wake_op: syz.9.8998 tries to shift op by 144; fix this program
[  538.440297][T26947] futex_wake_op: syz.6.9002 tries to shift op by 144; fix this program
[  538.728855][T26960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.956378][T26966] futex_wake_op: syz.6.9008 tries to shift op by 144; fix this program
[  539.150393][T26975] netlink: 'syz.0.9011': attribute type 7 has an invalid length.
[  539.262033][T26980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9012'.
[  539.441220][T26990] netlink: 'syz.0.9017': attribute type 10 has an invalid length.
[  539.465212][T26990] team0 (unregistering): Port device team_slave_0 removed
[  539.466552][T26990] team0 (unregistering): Port device team_slave_1 removed
[  539.467020][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9018'.
[  539.467657][T26990] team0 (unregistering): Port device gretap1 removed
[  540.337303][T27035] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  541.986712][T27106] overlayfs: failed to clone upperpath
[  542.199280][T27114] futex_wake_op: syz.6.9076 tries to shift op by 144; fix this program
[  542.238333][T27118] netlink: 'syz.9.9078': attribute type 1 has an invalid length.
[  542.238353][T27118] nbd: illegal input index 393222
[  543.011266][T27150] netlink: 'syz.6.9092': attribute type 10 has an invalid length.
[  543.023261][T27150] team0 (unregistering): Port device team_slave_0 removed
[  543.028078][T27150] team0 (unregistering): Port device team_slave_1 removed
[  543.286299][T27157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9095'.
[  543.459087][T27166] futex_wake_op: syz.9.9100 tries to shift op by 144; fix this program
[  543.940053][T27193] futex_wake_op: syz.9.9111 tries to shift op by 144; fix this program
[  543.992922][T27200] netlink: 'syz.0.9114': attribute type 10 has an invalid length.
[  544.238434][T27220] netlink: 'syz.9.9122': attribute type 10 has an invalid length.
[  544.245199][T27220] team0 (unregistering): Port device team_slave_0 removed
[  544.247421][T27220] team0 (unregistering): Port device team_slave_1 removed
[  544.332796][T27222] futex_wake_op: syz.9.9123 tries to shift op by 144; fix this program
[  544.526875][T27227] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9125'.
[  544.639417][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9128'.
[  544.837538][T27247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9133'.
[  546.304045][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9159'.
[  547.197890][T27333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.354244][T27341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.577839][T27374] xt_MASQUERADE: bad rangesize 177
[  548.651388][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9186'.
[  549.577343][   T35] audit: type=1326 audit(1791561685.418:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27411 comm="syz.9.9203" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f830ad9e159 code=0x0
[  550.806508][T27470] bond5: (slave veth0_to_bond): Releasing backup interface
[  550.813154][T27470] bond0: (slave bond_slave_0): Releasing backup interface
[  550.833669][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9232'.
[  550.845860][T27470] bond0: (slave bond_slave_1): Releasing backup interface
[  550.856310][T27470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  551.026842][T27491] bond10: entered promiscuous mode
[  551.041382][T27491] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  551.041397][T27491] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  551.067042][T27491] bond10: (slave wireguard0): making interface the new active one
[  551.067055][T27491] wireguard0: entered promiscuous mode
[  551.069635][T27491] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  552.176665][T27527] bond4: (slave veth0_to_bond): Releasing backup interface
[  552.178601][T27527] bond0: (slave bond_slave_0): Releasing backup interface
[  552.192860][T27527] bond0: (slave bond_slave_1): Releasing backup interface
[  552.196698][T27527] bond10: (slave wireguard0): Releasing backup interface
[  552.196712][T27527] wireguard0: left promiscuous mode
[  552.454014][T27550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9262'.
[  553.055880][T27576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.070235][T27580] bond0: (slave bond_slave_1): Releasing backup interface
[  553.075238][T27580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  553.196860][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9278'.
[  553.196873][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9278'.
[  553.196879][T27585] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  553.329282][T27599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9284'.
[  553.329311][T27599] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  553.547836][T27622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9295'.
[  553.734384][T27646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9306'.
[  553.790850][T27649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.054969][T27661] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9313'.
[  555.677344][T27705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9333'.
[  555.756069][T27709] netlink: 'syz.0.9335': attribute type 6 has an invalid length.
[  555.897997][T27719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9340'.
[  557.456679][T27808] fuse: fd is not a fuse device
[  557.546124][T27816] ptrace attach of "/syz-executor exec"[8849] was attempted by ""[27816]
[  557.562574][T27818] tipc: Started in network mode
[  557.562590][T27818] tipc: Node identity ac14140f, cluster identity 4711
[  557.562701][T27818] tipc: New replicast peer: 255.255.255.255
[  557.563049][T27818] tipc: Enabled bearer <udp:syz2>, priority 10
[  558.660915][T27878] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  558.665545][T27874] xt_CT: No such helper "snmp_trap"
[  558.752117][T27887] ptrace attach of "/syz-executor exec"[9531] was attempted by "/syz-executor exec"[27887]
[  558.777783][ T5666] tipc: Node number set to 2886997007
[  558.972818][T27907] ptrace attach of "/syz-executor exec"[9531] was attempted by ""[27907]
[  559.148252][T27921] openvswitch: netlink: IP tunnel dst address not specified
[  559.148280][T27921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.949574][T27950] __nla_validate_parse: 2 callbacks suppressed
[  559.949591][T27950] netlink: 14975 bytes leftover after parsing attributes in process `syz.9.9445'.
[  561.498294][T28008] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.9471'.
[  561.725837][T28016] ptrace attach of "/syz-executor exec"[8849] was attempted by "/syz-executor exec"[28016]
[  561.911582][T28027] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.9478'.
[  562.339188][T28053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9490'.
[  562.675273][T28071] netlink: 14975 bytes leftover after parsing attributes in process `syz.9.9499'.
[  563.103496][T28089] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.9508'.
[  563.260000][T28105] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.9516'.
[  563.794406][T28149] fuse: fd is not a fuse device
[  564.893744][T28203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.232875][ T9029] Bluetooth: hci0: unexpected event for opcode 0x2040
[  565.835307][T28240] cgroup: Invalid name
[  566.610822][T28283] overlayfs: failed to clone upperpath
[  566.849718][T28298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9607'.
[  566.887725][T28302] fuse: fd is not a fuse device
[  567.043937][T28316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  567.357085][T28350] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9630'.
[  568.209177][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  568.209215][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  568.317038][T28419] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.9663'.
[  568.969494][T28439] mac80211_hwsim hwsim15 wlan0: left promiscuous mode
[  569.120002][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9676'.
[  569.120022][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9676'.
[  569.187189][T28452] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9679'.
[  569.524053][T28474] syz.6.9681: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  569.524257][T28474] CPU: 1 UID: 0 PID: 28474 Comm: syz.6.9681 Not tainted syzkaller #0 PREEMPT(full) 
[  569.524269][T28474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  569.524274][T28474] Call Trace:
[  569.524278][T28474]  <TASK>
[  569.524282][T28474]  dump_stack_lvl+0xe8/0x150
[  569.524298][T28474]  warn_alloc+0x24d/0x270
[  569.524307][T28474]  ? kasan_save_track+0x4f/0x80
[  569.524317][T28474]  ? kasan_save_track+0x3e/0x80
[  569.524327][T28474]  ? __pfx_warn_alloc+0x10/0x10
[  569.524335][T28474]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  569.524346][T28474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.524361][T28474]  __vmalloc_node_range_noprof+0x127/0x1540
[  569.524377][T28474]  ? rcu_is_watching+0x16/0xb0
[  569.524389][T28474]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  569.524396][T28474]  ? __kmalloc_cache_noprof+0x321/0x600
[  569.524404][T28474]  ? __kmalloc_cache_noprof+0x14d/0x600
[  569.524412][T28474]  ? xskq_create+0x56/0x220
[  569.524425][T28474]  xskq_create+0x148/0x220
[  569.524434][T28474]  ? xsk_init_queue+0x8a/0xe0
[  569.524444][T28474]  xsk_init_queue+0x8a/0xe0
[  569.524454][T28474]  xsk_setsockopt+0x52a/0x960
[  569.524464][T28474]  ? __pfx_xsk_setsockopt+0x10/0x10
[  569.524473][T28474]  ? __pfx_aa_sk_perm+0x10/0x10
[  569.524487][T28474]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  569.524498][T28474]  ? __pfx_xsk_setsockopt+0x10/0x10
[  569.524508][T28474]  do_sock_setsockopt+0x17c/0x1b0
[  569.524521][T28474]  __x64_sys_setsockopt+0x13d/0x1b0
[  569.524534][T28474]  do_syscall_64+0x166/0x520
[  569.524544][T28474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.524554][T28474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.524561][T28474] RIP: 0033:0x7f3fe1b9e159
[  569.524570][T28474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.524577][T28474] RSP: 002b:00007f3fe29ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  569.524586][T28474] RAX: ffffffffffffffda RBX: 00007f3fe1e26180 RCX: 00007f3fe1b9e159
[  569.524591][T28474] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  569.524596][T28474] RBP: 00007f3fe1c3506b R08: 0000000000000004 R09: 0000000000000000
[  569.524601][T28474] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.524606][T28474] R13: 00007f3fe1e26218 R14: 00007f3fe1e26180 R15: 00007ffdc5627768
[  569.524618][T28474]  </TASK>
[  569.524654][T28474] Mem-Info:
[  569.524660][T28474] active_anon:16253 inactive_anon:0 isolated_anon:0
[  569.524660][T28474]  active_file:107 inactive_file:63073 isolated_file:0
[  569.524660][T28474]  unevictable:1000 dirty:334 writeback:0
[  569.524660][T28474]  slab_reclaimable:12197 slab_unreclaimable:88972
[  569.524660][T28474]  mapped:21469 shmem:9592 pagetables:2081
[  569.524660][T28474]  sec_pagetables:0 bounce:0
[  569.524660][T28474]  kernel_misc_reclaimable:0
[  569.524660][T28474]  free:1076120 free_pcp:25719 free_cma:0
[  569.524728][T28474] Node 0 active_anon:25160kB inactive_anon:0kB active_file:372kB inactive_file:190808kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:47484kB dirty:492kB writeback:0kB shmem:12532kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11448kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  569.524799][T28474] Node 1 active_anon:39852kB inactive_anon:0kB active_file:56kB inactive_file:61484kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:38392kB dirty:844kB writeback:0kB shmem:25836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3904kB pagetables:3664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  569.524873][T28474] Node 0 DMA free:15360kB boost:0kB min:236kB low:292kB high:348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  569.525008][T28474] lowmem_reserve[]: 0 1581 2111 2111 2111
[  569.525069][T28474] Node 0 DMA32 free:1244000kB boost:0kB min:25284kB low:31604kB high:37924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10416kB inactive_anon:0kB active_file:128kB inactive_file:136280kB unevictable:0kB writepending:56kB zspages:0kB present:2080636kB managed:1619596kB mlocked:0kB bounce:0kB free_pcp:49552kB local_pcp:14544kB free_cma:0kB
[  569.525181][T28474] lowmem_reserve[]: 0 0 529 529 529
[  569.525274][T28474] Node 0 Normal free:10588kB boost:0kB min:8468kB low:10584kB high:12700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:14712kB inactive_anon:0kB active_file:244kB inactive_file:54528kB unevictable:2000kB writepending:436kB zspages:0kB present:1572868kB managed:542436kB mlocked:0kB bounce:0kB free_pcp:4412kB local_pcp:108kB free_cma:0kB
[  569.525397][T28474] lowmem_reserve[]: 0 0 0 0 0
[  569.525488][T28474] Node 1 Normal free:3034532kB boost:0kB min:56116kB low:70144kB high:84172kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39852kB inactive_anon:0kB active_file:56kB inactive_file:61484kB unevictable:2000kB writepending:844kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:48912kB local_pcp:21116kB free_cma:0kB
[  569.525555][T28474] lowmem_reserve[]: 0 0 0 0 0
[  569.525614][T28474] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  569.525910][T28474] Node 0 DMA32: 358*4kB (UME) 217*8kB (UM) 172*16kB (UM) 146*32kB (ME) 112*64kB (ME) 46*128kB (UM) 27*256kB (M) 38*512kB (UM) 4*1024kB (ME) 3*2048kB (ME) 289*4096kB (UM) = 1244000kB
[  569.528051][T28474] Node 0 Normal: 129*4kB (UME) 305*8kB (UME) 99*16kB (UME) 63*32kB (UME) 40*64kB (UME) 9*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10524kB
[  569.528485][T28474] Node 1 Normal: 451*4kB (UME) 249*8kB (UME) 549*16kB (UME) 776*32kB (UM) 640*64kB (UME) 319*128kB (UME) 134*256kB (UM) 75*512kB (UM) 26*1024kB (UME) 9*2048kB (UME) 683*4096kB (UM) = 3034532kB
[  569.528910][T28474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  569.528962][T28474] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  569.529014][T28474] 72754 total pagecache pages
[  569.529019][T28474] 0 pages in swap cache
[  569.529023][T28474] Free swap  = 124996kB
[  569.529071][T28474] Total swap = 124996kB
[  569.529076][T28474] 1834877 pages RAM
[  569.529095][T28474] 0 pages HighMem/MovableOnly
[  569.529128][T28474] 391857 pages reserved
[  569.529132][T28474] 0 pages cma reserved
[  569.814622][T28480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9686'.
[  571.126483][T28507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9697'.
[  571.919272][T28553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9719'.
[  572.524317][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9735'.
[  572.524333][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9735'.
[  573.815775][T28625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  573.815790][T28625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  573.963549][T28625] 8021q: adding VLAN 0 to HW filter on device bond1
[  573.993748][T28625] 8021q: adding VLAN 0 to HW filter on device bond2
[  574.002955][T28625] 8021q: adding VLAN 0 to HW filter on device eth0
[  574.005986][T28625] 8021q: adding VLAN 0 to HW filter on device eth1
[  574.017915][T28625] 8021q: adding VLAN 0 to HW filter on device eth2
[  574.027093][T28625] 8021q: adding VLAN 0 to HW filter on device eth3
[  574.037059][T28625] 8021q: adding VLAN 0 to HW filter on device bond3
[  574.053577][T28625] 8021q: adding VLAN 0 to HW filter on device bond4
[  574.071117][T28625] 8021q: adding VLAN 0 to HW filter on device bond5
[  574.096014][T28625] 8021q: adding VLAN 0 to HW filter on device bond9
[  574.097627][T28625] 8021q: adding VLAN 0 to HW filter on device bond10
[  574.117701][T28625] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  574.134347][ T5625] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.134431][ T5625] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.134479][ T5625] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.134502][ T5625] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.206155][ T5645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  574.206682][ T5645] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  574.208834][ T5645] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  575.113047][T28671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9769'.
[  575.322576][T28683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9773'.
[  575.793796][T28699] xt_esp: unknown flags DD
[  575.897355][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9783'.
[  576.006969][T28719] CIFS: Attempting to mount //127.0.0.1/share/file0
[  576.899900][T28719] CIFS: VFS: Error connecting to socket. Aborting operation.
[  576.899941][T28719] CIFS: VFS: cifs_mount failed w/return code = -4
[  578.125821][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  578.211343][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  578.745031][T28829] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9838'.
[  578.745046][T28829] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9838'.
[  578.895488][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  579.085047][T28855] netdevsim netdevsim9 : renamed from netdevsim0
[  579.188499][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9852'.
[  579.531955][T28884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9864'.
[  580.781269][T28917] CIFS: Unable to determine destination address
[  581.727415][T28998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9911'.
[  582.066236][T29027] warn_alloc: 1 callbacks suppressed
[  582.066308][T29027] syz.0.9921: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  582.066565][T29027] CPU: 0 UID: 0 PID: 29027 Comm: syz.0.9921 Not tainted syzkaller #0 PREEMPT(full) 
[  582.066599][T29027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  582.066606][T29027] Call Trace:
[  582.066611][T29027]  <TASK>
[  582.066616][T29027]  dump_stack_lvl+0xe8/0x150
[  582.066638][T29027]  warn_alloc+0x24d/0x270
[  582.066654][T29027]  ? kasan_save_track+0x4f/0x80
[  582.066668][T29027]  ? kasan_save_track+0x3e/0x80
[  582.066685][T29027]  ? __pfx_warn_alloc+0x10/0x10
[  582.066695][T29027]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  582.066707][T29027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.066723][T29027]  __vmalloc_node_range_noprof+0x127/0x1540
[  582.066738][T29027]  ? rcu_is_watching+0x16/0xb0
[  582.066751][T29027]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  582.066759][T29027]  ? __kmalloc_cache_noprof+0x321/0x600
[  582.066768][T29027]  ? __kmalloc_cache_noprof+0x14d/0x600
[  582.066777][T29027]  ? xskq_create+0x56/0x220
[  582.066789][T29027]  xskq_create+0x148/0x220
[  582.066798][T29027]  ? xsk_init_queue+0x8a/0xe0
[  582.066808][T29027]  xsk_init_queue+0x8a/0xe0
[  582.066819][T29027]  xsk_setsockopt+0x52a/0x960
[  582.066830][T29027]  ? __pfx_xsk_setsockopt+0x10/0x10
[  582.066839][T29027]  ? __pfx_aa_sk_perm+0x10/0x10
[  582.066854][T29027]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  582.066864][T29027]  ? __pfx_xsk_setsockopt+0x10/0x10
[  582.066873][T29027]  do_sock_setsockopt+0x17c/0x1b0
[  582.066912][T29027]  __x64_sys_setsockopt+0x13d/0x1b0
[  582.066925][T29027]  do_syscall_64+0x166/0x520
[  582.066938][T29027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.066948][T29027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.066956][T29027] RIP: 0033:0x7fa85519e159
[  582.066967][T29027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.066974][T29027] RSP: 002b:00007fa8533b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  582.066982][T29027] RAX: ffffffffffffffda RBX: 00007fa855426180 RCX: 00007fa85519e159
[  582.066988][T29027] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  582.066993][T29027] RBP: 00007fa85523506b R08: 0000000000000004 R09: 0000000000000000
[  582.066998][T29027] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  582.067003][T29027] R13: 00007fa855426218 R14: 00007fa855426180 R15: 00007fff0752dc88
[  582.067015][T29027]  </TASK>
[  582.067144][T29027] Mem-Info:
[  582.067151][T29027] active_anon:16317 inactive_anon:0 isolated_anon:0
[  582.067151][T29027]  active_file:110 inactive_file:63071 isolated_file:0
[  582.067151][T29027]  unevictable:1000 dirty:122 writeback:0
[  582.067151][T29027]  slab_reclaimable:12221 slab_unreclaimable:88098
[  582.067151][T29027]  mapped:21422 shmem:9650 pagetables:2063
[  582.067151][T29027]  sec_pagetables:0 bounce:0
[  582.067151][T29027]  kernel_misc_reclaimable:0
[  582.067151][T29027]  free:1062171 free_pcp:39833 free_cma:0
[  582.067173][T29027] Node 0 active_anon:36936kB inactive_anon:0kB active_file:384kB inactive_file:190796kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:58836kB dirty:292kB writeback:0kB shmem:24056kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11520kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  582.067195][T29027] Node 1 active_anon:28332kB inactive_anon:0kB active_file:56kB inactive_file:61488kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:26852kB dirty:196kB writeback:0kB shmem:14544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3876kB pagetables:3424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  582.067262][T29027] Node 0 DMA free:15360kB boost:0kB min:236kB low:292kB high:348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  582.067285][T29027] lowmem_reserve[]: 0 1581 2111 2111 2111
[  582.067418][T29027] Node 0 DMA32 free:1208556kB boost:0kB min:25284kB low:31604kB high:37924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19652kB inactive_anon:0kB active_file:132kB inactive_file:136280kB unevictable:0kB writepending:68kB zspages:0kB present:2080636kB managed:1619596kB mlocked:0kB bounce:0kB free_pcp:85624kB local_pcp:70540kB free_cma:0kB
[  582.067484][T29027] lowmem_reserve[]: 0 0 529 529 529
[  582.067560][T29027] Node 0 Normal free:10024kB boost:0kB min:8468kB low:10584kB high:12700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:17248kB inactive_anon:0kB active_file:252kB inactive_file:54516kB unevictable:2000kB writepending:240kB zspages:0kB present:1572868kB managed:542436kB mlocked:0kB bounce:0kB free_pcp:3868kB local_pcp:3668kB free_cma:0kB
[  582.067625][T29027] lowmem_reserve[]: 0 0 0 0 0
[  582.067684][T29027] Node 1 Normal free:3014744kB boost:0kB min:56116kB low:70144kB high:84172kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28332kB inactive_anon:0kB active_file:56kB inactive_file:61488kB unevictable:2000kB writepending:196kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:69840kB local_pcp:34820kB free_cma:0kB
[  582.067792][T29027] lowmem_reserve[]: 0 0 0 0 0
[  582.067886][T29027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  582.068264][T29027] Node 0 DMA32: 229*4kB (UME) 135*8kB (U) 92*16kB (UME) 185*32kB (UME) 47*64kB (UM) 25*128kB (UME) 4*256kB (UME) 2*512kB (UE) 3*1024kB (UM) 10*2048kB (UME) 285*4096kB (UM) = 1208556kB
[  582.068471][T29027] Node 0 Normal: 7*4kB (UME) 63*8kB (UME) 133*16kB (UME) 74*32kB (UME) 50*64kB (UME) 12*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10020kB
[  582.068827][T29027] Node 1 Normal: 690*4kB (UME) 100*8kB (UME) 398*16kB (UME) 294*32kB (UM) 599*64kB (UM) 332*128kB (UM) 131*256kB (UM) 75*512kB (UM) 26*1024kB (UME) 9*2048kB (UME) 683*4096kB (UM) = 3014728kB
[  582.069227][T29027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  582.069277][T29027] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  582.069285][T29027] 72813 total pagecache pages
[  582.069289][T29027] 0 pages in swap cache
[  582.069292][T29027] Free swap  = 124996kB
[  582.069295][T29027] Total swap = 124996kB
[  582.069298][T29027] 1834877 pages RAM
[  582.069301][T29027] 0 pages HighMem/MovableOnly
[  582.069304][T29027] 391857 pages reserved
[  582.069307][T29027] 0 pages cma reserved
[  582.590887][T29042] overlayfs: failed to clone upperpath
[  583.895694][ T9029] Bluetooth: hci0: unexpected event for opcode 0x202d
[  584.523415][T29167] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2987094910/2987094912
[  584.523430][T29167] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2987094910/2987094911
[  584.593794][T29173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9993'.
[  584.593808][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9993'.
[  584.681743][T29183] netdevsim netdevsim0 : renamed from netdevsim0
[  585.395585][T29246] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  585.445599][T29250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10026'.
[  585.590358][T29268] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2481783689/2481783691
[  585.590375][T29268] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2481783689/2481783690
[  585.590881][T29268] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2481783689/2481783691
[  585.590891][T29268] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2481783689/2481783690
[  585.861686][T29294] IPVS: Scheduler module ip_vs_ not found
[  585.994136][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  586.288692][T29325] geneve2: entered allmulticast mode
[  586.305866][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  586.305897][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.305910][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.305922][   T13] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 6081 - 0
[  586.682616][T29369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10077'.
[  586.689700][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  586.903787][ T9029] Bluetooth: hci3: Malformed Event: 0x2f
[  587.651547][T29422] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.652070][T29422] bond0: (slave gtp0): The slave device specified does not support setting the MAC address
[  587.652592][T29422] bond0: (slave gtp0): Error -95 calling set_mac_address
[  587.928520][T29454] tipc: Failed to remove unknown binding: 66,0,0/2886997007:508246704/508246706
[  587.928536][T29454] tipc: Failed to remove unknown binding: 66,0,0/2886997007:508246704/508246705
[  587.928672][T29454] tipc: Failed to remove unknown binding: 66,0,0/2886997007:508246704/508246706
[  587.928682][T29454] tipc: Failed to remove unknown binding: 66,0,0/2886997007:508246704/508246705
[  588.413424][T29502] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10139'.
[  588.413444][T29502] netlink: 30 bytes leftover after parsing attributes in process `syz.9.10139'.
[  588.413457][T29502] netlink: 30 bytes leftover after parsing attributes in process `syz.9.10139'.
[  588.523966][T29510] fuse: fd is not a fuse device
[  588.630385][T29512] wg0 speed is unknown, defaulting to 1000
[  588.731650][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  589.119893][T29543] 9p: Bad value for 'rfdno'
[  589.230283][T29549] netlink: 'syz.0.10159': attribute type 1 has an invalid length.
[  589.230314][T29549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  590.008099][T29626] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10196'.
[  592.211012][T29764] netlink: 'syz.6.10261': attribute type 1 has an invalid length.
[  592.211032][T29764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  594.868025][T29949] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  595.037148][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10358'.
[  595.037162][T29975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10358'.
[  595.037175][T29975] netlink: 'syz.0.10358': attribute type 6 has an invalid length.
[  595.060465][T29975] vxlan0: entered promiscuous mode
[  595.061090][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10358'.
[  595.061100][T29975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10358'.
[  595.061112][T29975] netlink: 'syz.0.10358': attribute type 6 has an invalid length.
[  595.062322][ T5645] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0
[  595.081503][ T5645] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  595.081554][ T5645] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  595.081573][ T5645] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  595.186449][T29985] CIFS: Attempting to mount //127.0.0.1/share
[  595.191865][T29985] CIFS: VFS: Error connecting to socket. Aborting operation.
[  595.191890][T29985] CIFS: VFS: cifs_mount failed w/return code = -101
[  597.274510][T30101] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10414'.
[  597.274523][T30101] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10414'.
[  597.912414][T30133] netlink: 'syz.9.10429': attribute type 12 has an invalid length.
[  598.050419][T30138] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10431'.
[  598.746675][ T4988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  598.754266][ T4988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  598.762077][ T4988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  598.773643][ T4988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  598.774276][ T4988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  599.086387][T30158] wg0 speed is unknown, defaulting to 1000
[  599.563444][T18379] bond0 (unregistering): Released all slaves
[  599.583606][T18379] bond1 (unregistering): (slave veth3): Releasing active interface
[  599.584476][T18379] bond1 (unregistering): Released all slaves
[  599.601641][T18379] bond2 (unregistering): Released all slaves
[  599.611201][T18379] bond3 (unregistering): Released all slaves
[  599.618784][T18379] bond4 (unregistering): Released all slaves
[  599.631151][T18379] bond5 (unregistering): Released all slaves
[  599.667825][T18379] bond6 (unregistering): Released all slaves
[  599.694493][T30179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10444'.
[  599.723214][ T5334] 8021q: adding VLAN 0 to HW filter on device eth29
[  599.805203][T18379] tipc: Disabling bearer <udp:syz2>
[  599.805389][T18379] tipc: Left network mode
[  600.198549][ T5334] 8021q: adding VLAN 0 to HW filter on device eth30
[  600.230047][T30211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10454'.
[  600.230060][T30211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10454'.
[  600.404422][T30158] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.404532][T30158] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.406155][T30158] bridge_slave_0: entered allmulticast mode
[  600.406987][T30158] bridge_slave_0: entered promiscuous mode
[  600.414224][T30158] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.414331][T30158] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.414408][T30158] bridge_slave_1: entered allmulticast mode
[  600.417721][T30158] bridge_slave_1: entered promiscuous mode
[  600.489413][T30158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  600.503248][T30158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  600.575309][T18379] hsr_slave_0: left promiscuous mode
[  600.579053][T18379] hsr_slave_1: left promiscuous mode
[  600.965734][ T9029] Bluetooth: hci0: command tx timeout
[  601.133415][ T7852] smbdirect: ib_dev[syz0] removed
[  601.169391][ T5334] 8021q: adding VLAN 0 to HW filter on device eth31
[  601.173210][T30158] team0: Port device team_slave_0 added
[  601.194391][T30158] team0: Port device team_slave_1 added
[  601.221040][T30158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  601.221051][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  601.221060][T30158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  601.222815][T30158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  601.222822][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  601.222862][T30158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.321606][T30158] hsr_slave_0: entered promiscuous mode
[  601.322145][T30158] hsr_slave_1: entered promiscuous mode
[  601.342151][T30252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10468'.
[  601.342170][T30252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10468'.
[  601.730729][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  601.780584][ T5334] 8021q: adding VLAN 0 to HW filter on device eth32
[  601.792081][T18379] IPVS: stop unused estimator thread 0...
[  601.822677][T30267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10473'.
[  601.822690][T30267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10473'.
[  602.414800][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  602.794882][T30158] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  602.798192][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  602.799022][T30158] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  602.816319][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  602.817227][T30158] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  602.820183][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  602.831250][T30158] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  602.838128][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  602.916906][T30158] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.945532][T30158] 8021q: adding VLAN 0 to HW filter on device team0
[  602.951245][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.951326][ T9848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  602.958499][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.958582][ T9848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.186708][ T9029] Bluetooth: hci0: command tx timeout
[  603.439549][T30158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.492983][T30158] veth0_vlan: entered promiscuous mode
[  603.499769][T30158] veth1_vlan: entered promiscuous mode
[  603.590452][T30158] veth0_macvtap: entered promiscuous mode
[  603.608541][T30158] veth1_macvtap: entered promiscuous mode
[  603.632335][T30158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.642303][T30158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.712584][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.712830][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.712925][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.712939][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.794223][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.795356][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.811411][ T9848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.811516][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.829319][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.829331][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.883241][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.883254][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.228674][T30423] __nla_validate_parse: 4 callbacks suppressed
[  604.228685][T30423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10510'.
[  605.151901][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.152358][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.418870][ T9029] Bluetooth: hci0: command tx timeout
[  605.672044][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10522'.
[  606.251221][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10530'.
[  606.959423][T30522] lo: Caught tx_queue_len zero misconfig
[  607.448342][T30560] loop3: detected capacity change from 0 to 256
[  607.642483][ T9029] Bluetooth: hci0: command tx timeout
[  607.769898][T30572] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.10571' sets config #1
[  607.885121][T30580] loop3: detected capacity change from 0 to 1024
[  607.891975][ T9029] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  607.892013][ T9029] Bluetooth: hci3: Injecting HCI hardware error event
[  607.898238][ T9029] Bluetooth: hci3: hardware error 0x00
[  607.900858][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  607.930838][T30580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.957841][T30158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.231594][T30598] loop3: detected capacity change from 0 to 1024
[  608.238990][T30598] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  608.239006][T30598] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  608.249213][T30598] jbd2_journal_init_inode: Cannot locate journal superblock
[  608.249223][T30598] EXT4-fs (loop3): Could not load journal inode
[  608.297482][T30600] loop3: detected capacity change from 0 to 1024
[  608.309318][T30600] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  608.309343][T30600] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  608.313047][T30600] jbd2_journal_init_inode: Cannot locate journal superblock
[  608.313063][T30600] EXT4-fs (loop3): Could not load journal inode
[  608.401628][ T4988] Bluetooth: hci1: command 0x2016 tx timeout
[  608.415195][T30608] netlink: 'syz.3.10588': attribute type 15 has an invalid length.
[  608.524110][T30622] fuse: fd is not a fuse device
[  608.526436][T30621] loop3: detected capacity change from 0 to 1024
[  608.527436][T30621] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  608.527451][T30621] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  608.528478][T30621] jbd2_journal_init_inode: Cannot locate journal superblock
[  608.528485][T30621] EXT4-fs (loop3): Could not load journal inode
[  608.925980][  T807] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  609.087581][  T807] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  609.091153][  T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.091174][  T807] usb 4-1: Product: syz
[  609.091184][  T807] usb 4-1: Manufacturer: syz
[  609.091193][  T807] usb 4-1: SerialNumber: syz
[  609.093552][  T807] usb 4-1: config 0 descriptor??
[  609.100503][  T807] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  610.022368][T30646] ip_tables: iptables: counters copy to user failed while replacing table
[  610.117455][ T9029] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  610.625612][ T9029] Bluetooth: hci1: command 0x2016 tx timeout
[  611.186735][  T807] gspca_stk1135: reg_w 0x200 err -71
[  611.187766][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187777][  T807] gspca_stk1135: Sensor write failed
[  611.187794][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187800][  T807] gspca_stk1135: Sensor write failed
[  611.187818][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187825][  T807] gspca_stk1135: Sensor read failed
[  611.187841][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187848][  T807] gspca_stk1135: Sensor read failed
[  611.187852][  T807] gspca_stk1135: Detected sensor type unknown (0x0)
[  611.187874][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187880][  T807] gspca_stk1135: Sensor read failed
[  611.187896][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187902][  T807] gspca_stk1135: Sensor read failed
[  611.187918][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187925][  T807] gspca_stk1135: Sensor write failed
[  611.187941][  T807] gspca_stk1135: serial bus timeout: status=0x00
[  611.187947][  T807] gspca_stk1135: Sensor write failed
[  611.188005][  T807] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  611.194479][  T807] usb 4-1: USB disconnect, device number 2
[  611.916072][T30688] ptrace attach of "/syz-executor exec"[30158] was attempted by ""[30688]
[  612.082314][T30698] loop3: detected capacity change from 0 to 4096
[  612.088169][T30698] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  612.114130][T30698] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  612.269904][T30701] Bluetooth: MGMT ver 1.23
[  612.269931][T30701] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  612.446610][T30716] trusted_key: encrypted_key: insufficient parameters specified
[  612.587488][T30724] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  612.736304][T30734] ptrace attach of "/syz-executor exec"[30158] was attempted by "/syz-executor exec"[30734]
[  612.816354][   T35] audit: type=1326 audit(1791561752.547:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30689 comm="syz.0.10621" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85519e159 code=0x7fc00000
[  612.849490][T30742] loop3: detected capacity change from 0 to 512
[  612.850586][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10647'.
[  612.850598][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10647'.
[  612.875505][T30742] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  612.892582][T30742] EXT4-fs (loop3): 1 truncate cleaned up
[  612.893385][T30742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.919024][T30742] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.10646: bad extra_isize 62 (inode size 256)
[  612.929980][T30742] EXT4-fs (loop3): Remounting filesystem read-only
[  612.976572][T30158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.102088][T30767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10657'.
[  613.580581][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10664'.
[  613.880988][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10671'.
[  614.145368][T30818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10677'.
[  614.311477][T30832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10684'.
[  614.450355][T30841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10687'.
[  615.184336][ T4988] Bluetooth: hci1: Malformed Event: 0x2f
[  615.333146][T30890] loop3: detected capacity change from 0 to 32768
[  615.378546][T30890] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  615.396202][T30890] XFS (loop3): Ending clean mount
[  615.421135][T30158] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  615.946189][ T4988] Bluetooth: hci1: Malformed Event: 0x2f
[  616.701380][T30964] trusted_key: encrypted_key: insufficient parameters specified
[  617.088729][T30990] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  617.101228][T30994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10749'.
[  617.108106][T30990] bond1 (unregistering): Released all slaves
[  617.368217][T31012] openvswitch: netlink: IP tunnel dst address not specified
[  617.592177][T31008] loop3: detected capacity change from 0 to 32768
[  617.669095][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669095][T31008] 
[  617.669126][T31008] xtLookup: xtSearch returned -5
[  617.669133][T31008] free_index: error reading directory table
[  617.669139][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669139][T31008] 
[  617.669154][T31008] xtLookup: xtSearch returned -5
[  617.669160][T31008] free_index: error reading directory table
[  617.669165][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669165][T31008] 
[  617.669181][T31008] xtLookup: xtSearch returned -5
[  617.669187][T31008] free_index: error reading directory table
[  617.669192][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669192][T31008] 
[  617.669205][T31008] xtLookup: xtSearch returned -5
[  617.669209][T31008] free_index: error reading directory table
[  617.669214][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669214][T31008] 
[  617.669226][T31008] xtLookup: xtSearch returned -5
[  617.669231][T31008] free_index: error reading directory table
[  617.669238][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669238][T31008] 
[  617.669253][T31008] xtLookup: xtSearch returned -5
[  617.669258][T31008] add_index: get/read_metapage failed!
[  617.669263][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669263][T31008] 
[  617.669276][T31008] xtLookup: xtSearch returned -5
[  617.669281][T31008] free_index: error reading directory table
[  617.669285][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669285][T31008] 
[  617.669299][T31008] xtLookup: xtSearch returned -5
[  617.669303][T31008] free_index: error reading directory table
[  617.669308][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669308][T31008] 
[  617.669320][T31008] xtLookup: xtSearch returned -5
[  617.669325][T31008] free_index: error reading directory table
[  617.669330][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669330][T31008] 
[  617.669342][T31008] xtLookup: xtSearch returned -5
[  617.669347][T31008] free_index: error reading directory table
[  617.669353][T31008] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  617.669353][T31008] 
[  617.669366][T31008] xtLookup: xtSearch returned -5
[  617.669373][T31008] free_index: error reading directory table
[  618.387328][T31065] warn_alloc: 1 callbacks suppressed
[  618.387342][T31065] syz.6.10776: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  618.387380][T31065] CPU: 1 UID: 0 PID: 31065 Comm: syz.6.10776 Not tainted syzkaller #0 PREEMPT(full) 
[  618.387395][T31065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  618.387403][T31065] Call Trace:
[  618.387408][T31065]  <TASK>
[  618.387414][T31065]  dump_stack_lvl+0xe8/0x150
[  618.387461][T31065]  warn_alloc+0x24d/0x270
[  618.387478][T31065]  ? kasan_save_track+0x4f/0x80
[  618.387491][T31065]  ? kasan_save_track+0x3e/0x80
[  618.387503][T31065]  ? __pfx_warn_alloc+0x10/0x10
[  618.387510][T31065]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  618.387523][T31065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.387539][T31065]  __vmalloc_node_range_noprof+0x127/0x1540
[  618.387557][T31065]  ? rcu_is_watching+0x16/0xb0
[  618.387568][T31065]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  618.387576][T31065]  ? __kmalloc_cache_noprof+0x321/0x600
[  618.387585][T31065]  ? __kmalloc_cache_noprof+0x14d/0x600
[  618.387593][T31065]  ? xskq_create+0x56/0x220
[  618.387630][T31065]  xskq_create+0x148/0x220
[  618.387642][T31065]  ? xsk_init_queue+0x8a/0xe0
[  618.387653][T31065]  xsk_init_queue+0x8a/0xe0
[  618.387664][T31065]  xsk_setsockopt+0x52a/0x960
[  618.387674][T31065]  ? __pfx_xsk_setsockopt+0x10/0x10
[  618.387684][T31065]  ? __pfx_aa_sk_perm+0x10/0x10
[  618.387700][T31065]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  618.387711][T31065]  ? __pfx_xsk_setsockopt+0x10/0x10
[  618.387721][T31065]  do_sock_setsockopt+0x17c/0x1b0
[  618.387733][T31065]  __x64_sys_setsockopt+0x13d/0x1b0
[  618.387746][T31065]  do_syscall_64+0x166/0x520
[  618.387756][T31065]  ? trace_irq_disable+0x3b/0x140
[  618.387764][T31065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.387773][T31065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.387781][T31065] RIP: 0033:0x7f3fe1b9e159
[  618.387791][T31065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  618.387798][T31065] RSP: 002b:00007f3fe29ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  618.387807][T31065] RAX: ffffffffffffffda RBX: 00007f3fe1e26180 RCX: 00007f3fe1b9e159
[  618.387813][T31065] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  618.387818][T31065] RBP: 00007f3fe1c3506b R08: 0000000000000004 R09: 0000000000000000
[  618.387823][T31065] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  618.387827][T31065] R13: 00007f3fe1e26218 R14: 00007f3fe1e26180 R15: 00007ffdc5627768
[  618.387840][T31065]  </TASK>
[  618.387883][T31065] Mem-Info:
[  618.387889][T31065] active_anon:12694 inactive_anon:0 isolated_anon:0
[  618.387889][T31065]  active_file:118 inactive_file:63078 isolated_file:0
[  618.387889][T31065]  unevictable:1002 dirty:298 writeback:0
[  618.387889][T31065]  slab_reclaimable:12177 slab_unreclaimable:89885
[  618.387889][T31065]  mapped:21670 shmem:5558 pagetables:2124
[  618.387889][T31065]  sec_pagetables:0 bounce:0
[  618.387889][T31065]  kernel_misc_reclaimable:0
[  618.387889][T31065]  free:1070222 free_pcp:34031 free_cma:0
[  618.387911][T31065] Node 0 active_anon:22096kB inactive_anon:0kB active_file:416kB inactive_file:190804kB unevictable:2008kB isolated(anon):0kB isolated(file):0kB mapped:48512kB dirty:420kB writeback:0kB shmem:7436kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11624kB pagetables:4900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  618.387933][T31065] Node 1 active_anon:28680kB inactive_anon:0kB active_file:56kB inactive_file:61508kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:38168kB dirty:772kB writeback:0kB shmem:14796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3452kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  618.387954][T31065] Node 0 DMA free:15360kB boost:0kB min:236kB low:292kB high:348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  618.387978][T31065] lowmem_reserve[]: 0 1581 2111 2111 2111
[  618.387994][T31065] Node 0 DMA32 free:1218100kB boost:0kB min:25284kB low:31604kB high:37924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6252kB inactive_anon:0kB active_file:144kB inactive_file:136280kB unevictable:8kB writepending:88kB zspages:0kB present:2080636kB managed:1619596kB mlocked:8kB bounce:0kB free_pcp:78052kB local_pcp:13980kB free_cma:0kB
[  618.388018][T31065] lowmem_reserve[]: 0 0 529 529 529
[  618.388033][T31065] Node 0 Normal free:10472kB boost:0kB min:8468kB low:10584kB high:12700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:15928kB inactive_anon:0kB active_file:272kB inactive_file:54524kB unevictable:2000kB writepending:332kB zspages:0kB present:1572868kB managed:542436kB mlocked:0kB bounce:0kB free_pcp:4276kB local_pcp:96kB free_cma:0kB
[  618.388057][T31065] lowmem_reserve[]: 0 0 0 0 0
[  618.388071][T31065] Node 1 Normal free:3036956kB boost:0kB min:56116kB low:70144kB high:84172kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28680kB inactive_anon:0kB active_file:56kB inactive_file:61508kB unevictable:2000kB writepending:772kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:53796kB local_pcp:26284kB free_cma:0kB
[  618.388094][T31065] lowmem_reserve[]: 0 0 0 0 0
[  618.388110][T31065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  618.388155][T31065] Node 0 DMA32: 153*4kB (UME) 32*8kB (ME) 56*16kB (UME) 186*32kB (UM) 118*64kB (UME) 51*128kB (UM) 37*256kB (UME) 6*512kB (UME) 12*1024kB (UM) 6*2048kB (UME) 283*4096kB (UM) = 1218084kB
[  618.388215][T31065] Node 0 Normal: 406*4kB (UM) 43*8kB (UM) 120*16kB (UM) 82*32kB (UM) 40*64kB (UM) 9*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10480kB
[  618.388265][T31065] Node 1 Normal: 355*4kB (ME) 602*8kB (UME) 588*16kB (UME) 494*32kB (UME) 610*64kB (UM) 328*128kB (UM) 148*256kB (UM) 82*512kB (UME) 30*1024kB (UM) 6*2048kB (UM) 684*4096kB (UM) = 3037020kB
[  618.388465][T31065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  618.388627][T31065] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  618.388677][T31065] 68736 total pagecache pages
[  618.388682][T31065] 0 pages in swap cache
[  618.388727][T31065] Free swap  = 124996kB
[  618.388746][T31065] Total swap = 124996kB
[  618.388777][T31065] 1834877 pages RAM
[  618.388782][T31065] 0 pages HighMem/MovableOnly
[  618.388826][T31065] 391857 pages reserved
[  618.388831][T31065] 0 pages cma reserved
[  618.522654][T31067] netlink: 'syz.0.10779': attribute type 5 has an invalid length.
[  619.767237][T31102] cgroup: fork rejected by pids controller in /syz6
[  619.955885][T31150] loop3: detected capacity change from 0 to 32768
[  619.986513][T31150] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  619.986513][T31150] 
[  619.986536][T31150] xtLookup: xtSearch returned -5
[  619.986542][T31150] free_index: error reading directory table
[  619.986651][T31150] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  619.986651][T31150] 
[  619.986664][T31150] xtLookup: xtSearch returned -5
[  619.986668][T31150] free_index: error reading directory table
[  619.986673][T31150] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  619.986673][T31150] 
[  619.986683][T31150] xtLookup: xtSearch returned -5
[  619.986687][T31150] free_index: error reading directory table
[  620.249035][T31173] netlink: 'syz.3.10812': attribute type 83 has an invalid length.
[  620.788783][T31200] lo: Caught tx_queue_len zero misconfig
[  621.111425][T31220] loop3: detected capacity change from 0 to 4096
[  621.222439][T31228] fuse: fd is not a fuse device
[  621.439541][T31243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  621.573346][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.573490][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.573882][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.573950][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.561839][T31318] fuse: fd is not a fuse device
[  623.813755][T31340] netlink: 'syz.3.10883': attribute type 83 has an invalid length.
[  624.097721][ T4988] Bluetooth: hci0: Unable to find connection for big 0x00
[  624.725125][T31394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  625.038015][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10918'.
[  625.063881][T31417] bond1: entered allmulticast mode
[  625.064125][T31417] 8021q: adding VLAN 0 to HW filter on device bond1
[  627.730681][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.730788][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.731201][   T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.731269][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.381948][T31496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10954'.
[  629.344161][T31518] loop3: detected capacity change from 0 to 4096
[  630.002624][T31549] loop3: detected capacity change from 0 to 512
[  630.003326][T31549] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  630.027178][T31549] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  630.027484][T31549] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  630.027561][T31549] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  630.927221][T30379] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  631.093237][T30379] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  631.099722][T30379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.099743][T30379] usb 4-1: Product: syz
[  631.099752][T30379] usb 4-1: Manufacturer: syz
[  631.099761][T30379] usb 4-1: SerialNumber: syz
[  631.104167][T30379] usb 4-1: config 0 descriptor??
[  631.110119][T30379] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  631.204306][ T4988] Bluetooth: hci1: Unable to find connection for big 0x00
[  631.428661][T31603] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11004'.
[  632.447468][T31629] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.11016'.
[  632.831367][T30379] gspca_stk1135: reg_w 0x200 err -71
[  632.832399][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832410][T30379] gspca_stk1135: Sensor write failed
[  632.832452][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832460][T30379] gspca_stk1135: Sensor write failed
[  632.832477][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832482][T30379] gspca_stk1135: Sensor read failed
[  632.832500][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832506][T30379] gspca_stk1135: Sensor read failed
[  632.832511][T30379] gspca_stk1135: Detected sensor type unknown (0x0)
[  632.832530][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832537][T30379] gspca_stk1135: Sensor read failed
[  632.832552][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832558][T30379] gspca_stk1135: Sensor read failed
[  632.832572][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832579][T30379] gspca_stk1135: Sensor write failed
[  632.832593][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  632.832599][T30379] gspca_stk1135: Sensor write failed
[  632.832655][T30379] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  632.838744][T30379] usb 4-1: USB disconnect, device number 3
[  633.203894][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  633.206698][ T9850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.206853][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.513315][T31665] bridge_slave_0: left allmulticast mode
[  633.513338][T31665] bridge_slave_0: left promiscuous mode
[  633.513546][T31665] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.529766][T31665] bridge_slave_1: left allmulticast mode
[  633.529790][T31665] bridge_slave_1: left promiscuous mode
[  633.529952][T31665] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.566448][T31665] bond0: (slave bond_slave_0): Releasing backup interface
[  633.575490][T31665] bond0: (slave bond_slave_1): Releasing backup interface
[  633.597936][T31665] team0: Port device team_slave_0 removed
[  633.604276][T31665] team0: Port device team_slave_1 removed
[  633.604659][T31665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  633.604669][T31665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  633.605576][T31665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  633.605585][T31665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  633.606666][T31665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  633.640576][T31667] team0: Mode changed to "activebackup"
[  633.888073][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  633.892611][ T9850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.892894][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.893861][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  633.893906][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  634.305157][   T35] audit: type=1326 audit(1791561772.649:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31682 comm="syz.0.11038" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85519e159 code=0x0
[  634.341588][T31687] team_slave_0: Caught tx_queue_len zero misconfig
[  634.341609][T31687] netlink: 'syz.6.11040': attribute type 4 has an invalid length.
[  634.957315][T30379] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  635.120110][T30379] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  635.123926][T30379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.123939][T30379] usb 4-1: Product: syz
[  635.123945][T30379] usb 4-1: Manufacturer: syz
[  635.123951][T30379] usb 4-1: SerialNumber: syz
[  635.129994][T30379] usb 4-1: config 0 descriptor??
[  635.136672][T30379] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  636.560046][T31797] netlink: del zone limit has 4 unknown bytes
[  636.596762][T31799] tmpfs: User quota inode hardlimit too large.
[  636.869706][T30379] gspca_stk1135: reg_w 0x200 err -71
[  636.875902][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.875911][T30379] gspca_stk1135: Sensor write failed
[  636.875922][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.875927][T30379] gspca_stk1135: Sensor write failed
[  636.875938][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.875942][T30379] gspca_stk1135: Sensor read failed
[  636.875953][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.875957][T30379] gspca_stk1135: Sensor read failed
[  636.875960][T30379] gspca_stk1135: Detected sensor type unknown (0x0)
[  636.875974][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.875978][T30379] gspca_stk1135: Sensor read failed
[  636.875989][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.875993][T30379] gspca_stk1135: Sensor read failed
[  636.876004][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.876008][T30379] gspca_stk1135: Sensor write failed
[  636.876019][T30379] gspca_stk1135: serial bus timeout: status=0x00
[  636.876023][T30379] gspca_stk1135: Sensor write failed
[  636.876060][T30379] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  636.879446][T30379] usb 4-1: USB disconnect, device number 4
[  637.395996][T31825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  637.806109][ T2260] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  637.866681][T31852] warn_alloc: 1 callbacks suppressed
[  637.866697][T31852] syz.6.11117: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  637.866738][T31852] CPU: 0 UID: 0 PID: 31852 Comm: syz.6.11117 Not tainted syzkaller #0 PREEMPT(full) 
[  637.866750][T31852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  637.866765][T31852] Call Trace:
[  637.866771][T31852]  <TASK>
[  637.866778][T31852]  dump_stack_lvl+0xe8/0x150
[  637.866801][T31852]  warn_alloc+0x24d/0x270
[  637.866816][T31852]  ? kasan_save_track+0x4f/0x80
[  637.866831][T31852]  ? kasan_save_track+0x3e/0x80
[  637.866848][T31852]  ? __pfx_warn_alloc+0x10/0x10
[  637.866861][T31852]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  637.866882][T31852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.866910][T31852]  __vmalloc_node_range_noprof+0x127/0x1540
[  637.866940][T31852]  ? rcu_is_watching+0x16/0xb0
[  637.866958][T31852]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  637.866972][T31852]  ? __kmalloc_cache_noprof+0x321/0x600
[  637.866988][T31852]  ? __kmalloc_cache_noprof+0x14d/0x600
[  637.867002][T31852]  ? xskq_create+0x56/0x220
[  637.867022][T31852]  xskq_create+0x148/0x220
[  637.867040][T31852]  ? xsk_init_queue+0x8a/0xe0
[  637.867058][T31852]  xsk_init_queue+0x8a/0xe0
[  637.867076][T31852]  xsk_setsockopt+0x52a/0x960
[  637.867094][T31852]  ? __pfx_xsk_setsockopt+0x10/0x10
[  637.867111][T31852]  ? __pfx_aa_sk_perm+0x10/0x10
[  637.867136][T31852]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  637.867153][T31852]  ? __pfx_xsk_setsockopt+0x10/0x10
[  637.867170][T31852]  do_sock_setsockopt+0x17c/0x1b0
[  637.867193][T31852]  __x64_sys_setsockopt+0x13d/0x1b0
[  637.867216][T31852]  do_syscall_64+0x166/0x520
[  637.867234][T31852]  ? trace_irq_disable+0x3b/0x140
[  637.867248][T31852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.867263][T31852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.867276][T31852] RIP: 0033:0x7f3fe1b9e159
[  637.867289][T31852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.867301][T31852] RSP: 002b:00007f3fe2a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  637.867317][T31852] RAX: ffffffffffffffda RBX: 00007f3fe1e26090 RCX: 00007f3fe1b9e159
[  637.867350][T31852] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  637.867387][T31852] RBP: 00007f3fe1c3506b R08: 0000000000000004 R09: 0000000000000000
[  637.867397][T31852] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  637.867405][T31852] R13: 00007f3fe1e26128 R14: 00007f3fe1e26090 R15: 00007ffdc5627768
[  637.867445][T31852]  </TASK>
[  637.867530][T31852] Mem-Info:
[  637.867539][T31852] active_anon:12659 inactive_anon:0 isolated_anon:0
[  637.867539][T31852]  active_file:127 inactive_file:63083 isolated_file:0
[  637.867539][T31852]  unevictable:1000 dirty:243 writeback:0
[  637.867539][T31852]  slab_reclaimable:13028 slab_unreclaimable:88842
[  637.867539][T31852]  mapped:21689 shmem:5529 pagetables:2218
[  637.867539][T31852]  sec_pagetables:0 bounce:0
[  637.867539][T31852]  kernel_misc_reclaimable:0
[  637.867539][T31852]  free:1018642 free_pcp:46360 free_cma:0
[  637.867612][T31852] Node 0 active_anon:33528kB inactive_anon:0kB active_file:452kB inactive_file:190804kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:59972kB dirty:336kB writeback:0kB shmem:18804kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11728kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  637.867688][T31852] Node 1 active_anon:17108kB inactive_anon:0kB active_file:56kB inactive_file:61528kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:26784kB dirty:636kB writeback:0kB shmem:3312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3512kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  637.867724][T31852] Node 0 DMA free:15360kB boost:0kB min:236kB low:292kB high:348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  637.867767][T31852] lowmem_reserve[]: 0 1581 2111 2111 2111
[  637.867793][T31852] Node 0 DMA32 free:1178508kB boost:0kB min:25284kB low:31604kB high:37924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16512kB inactive_anon:0kB active_file:148kB inactive_file:136280kB unevictable:0kB writepending:48kB zspages:0kB present:2080636kB managed:1619596kB mlocked:0kB bounce:0kB free_pcp:43712kB local_pcp:28660kB free_cma:0kB
[  637.867831][T31852] lowmem_reserve[]: 0 0 529 529 529
[  637.867855][T31852] Node 0 Normal free:10456kB boost:0kB min:8468kB low:10584kB high:12700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16972kB inactive_anon:0kB active_file:304kB inactive_file:54524kB unevictable:2000kB writepending:288kB zspages:0kB present:1572868kB managed:542436kB mlocked:0kB bounce:0kB free_pcp:3408kB local_pcp:3280kB free_cma:0kB
[  637.867891][T31852] lowmem_reserve[]: 0 0 0 0 0
[  637.867982][T31852] Node 1 Normal free:2870244kB boost:0kB min:56116kB low:70144kB high:84172kB reserved_highatomic:0kB free_highatomic:0kB active_anon:17108kB inactive_anon:0kB active_file:56kB inactive_file:61528kB unevictable:2000kB writepending:636kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:138288kB local_pcp:30348kB free_cma:0kB
[  637.868021][T31852] lowmem_reserve[]: 0 0 0 0 0
[  637.868046][T31852] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  637.868128][T31852] Node 0 DMA32: 177*4kB (UME) 171*8kB (UME) 217*16kB (UME) 123*32kB (ME) 97*64kB (UM) 91*128kB (UM) 27*256kB (UM) 7*512kB (UM) 20*1024kB (UM) 9*2048kB (M) 269*4096kB (UM) = 1178572kB
[  637.868384][T31852] Node 0 Normal: 517*4kB (UME) 366*8kB (UME) 143*16kB (UM) 46*32kB (UM) 13*64kB (M) 5*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10484kB
[  637.868481][T31852] Node 1 Normal: 1503*4kB (UME) 1201*8kB (UME) 322*16kB (UME) 432*32kB (UME) 362*64kB (UME) 108*128kB (UME) 118*256kB (UM) 65*512kB (UME) 27*1024kB (UM) 14*2048kB (UM) 654*4096kB (UM) = 2870180kB
[  637.868590][T31852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  637.868601][T31852] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  637.868612][T31852] 68715 total pagecache pages
[  637.868617][T31852] 0 pages in swap cache
[  637.868622][T31852] Free swap  = 124996kB
[  637.868628][T31852] Total swap = 124996kB
[  637.868633][T31852] 1834877 pages RAM
[  637.868639][T31852] 0 pages HighMem/MovableOnly
[  637.868644][T31852] 391857 pages reserved
[  637.868649][T31852] 0 pages cma reserved
[  637.961924][ T2260] usb 4-1: New USB device found, idVendor=0e41, idProduct=4147, bcdDevice= 0.40
[  637.962972][ T2260] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 73, changing to 10
[  637.965125][ T2260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.965135][ T2260] usb 4-1: Product: syz
[  637.965141][ T2260] usb 4-1: Manufacturer: syz
[  637.965147][ T2260] usb 4-1: SerialNumber: syz
[  638.201788][ T2260] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  638.201815][ T2260] usb 4-1: MIDIStreaming interface descriptor not found
[  638.272462][ T2260] usb 4-1: USB disconnect, device number 5
[  638.290135][T31867] overlayfs: failed to clone upperpath
[  638.325169][T31868] udevd[31868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  638.390883][   T35] audit: type=1800 audit(1791561776.474:746): pid=31873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11125" name="nullb0" dev="tmpfs" ino=15892 res=0 errno=0
[  638.593007][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.593140][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.362281][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.363457][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.654573][ T4988] Bluetooth: hci1: Malformed Event: 0x2f
[  639.763682][T31928] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  640.050790][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.050953][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.140712][T31940] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11155'.
[  640.140735][T31940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  640.438514][T31952] loop3: detected capacity change from 0 to 40427
[  640.439643][T31952] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  640.439654][T31952] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  640.440351][T31952] F2FS-fs (loop3): invalid crc value
[  640.489497][T31952] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  640.500698][T31952] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  640.500716][T31952] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  640.815545][T31966] bio_check_eod: 1016 callbacks suppressed
[  640.815559][T31966] syz.3.11161: attempt to access beyond end of device
[  640.815559][T31966] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  641.265120][T30158] syz-executor: attempt to access beyond end of device
[  641.265120][T30158] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  641.284645][T30158] CPU: 0 UID: 0 PID: 30158 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  641.284668][T30158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  641.284676][T30158] Call Trace:
[  641.284682][T30158]  <TASK>
[  641.284690][T30158]  dump_stack_lvl+0xe8/0x150
[  641.284716][T30158]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  641.284740][T30158]  f2fs_write_end_bio+0x1211/0x16e0
[  641.284757][T30158]  ? blkg_put+0x22/0x240
[  641.284785][T30158]  __submit_merged_bio+0x258/0x6a0
[  641.284804][T30158]  ? rcu_is_watching+0x16/0xb0
[  641.284824][T30158]  __submit_merged_write_cond+0x3c9/0x4e0
[  641.284849][T30158]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  641.284882][T30158]  f2fs_write_data_pages+0x2a27/0x36f0
[  641.284896][T30158]  ? __bfs+0x153/0x290
[  641.284909][T30158]  ? __pfx_usage_match+0x10/0x10
[  641.284946][T30158]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  641.284959][T30158]  ? lock_acquire+0x115/0x350
[  641.285001][T30158]  ? __pfx_hlock_conflict+0x10/0x10
[  641.285017][T30158]  ? __bfs+0x153/0x290
[  641.285030][T30158]  ? __pfx_hlock_conflict+0x10/0x10
[  641.285057][T30158]  ? lockdep_unlock+0x5c/0xd0
[  641.285068][T30158]  ? __lock_acquire+0x1511/0x2de0
[  641.285100][T30158]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  641.285115][T30158]  do_writepages+0x338/0x560
[  641.285138][T30158]  ? do_raw_spin_unlock+0x4d/0x200
[  641.285159][T30158]  filemap_fdatawrite+0x1e9/0x2f0
[  641.285198][T30158]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  641.285245][T30158]  ? do_raw_spin_unlock+0x4d/0x200
[  641.285266][T30158]  f2fs_sync_dirty_inodes+0x30e/0x830
[  641.285290][T30158]  f2fs_write_checkpoint+0xa3d/0x2710
[  641.285305][T30158]  ? __lock_acquire+0x747/0x2de0
[  641.285372][T30158]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  641.285424][T30158]  kill_f2fs_super+0x2dd/0x700
[  641.285448][T30158]  ? __pfx_kill_f2fs_super+0x10/0x10
[  641.285470][T30158]  ? call_rcu+0x64d/0x8b0
[  641.285485][T30158]  ? lockdep_hardirqs_on+0x7b/0x110
[  641.285512][T30158]  deactivate_locked_super+0xbe/0x110
[  641.285532][T30158]  cleanup_mnt+0x3d3/0x460
[  641.285550][T30158]  task_work_run+0x1d9/0x270
[  641.285567][T30158]  ? __pfx_task_work_run+0x10/0x10
[  641.285587][T30158]  exit_to_user_mode_loop+0x204/0x770
[  641.285602][T30158]  ? rcu_is_watching+0x16/0xb0
[  641.285621][T30158]  do_syscall_64+0x328/0x520
[  641.285637][T30158]  ? trace_irq_disable+0x3b/0x140
[  641.285651][T30158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.285668][T30158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.285681][T30158] RIP: 0033:0x7f89d779f397
[  641.285697][T30158] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  641.285708][T30158] RSP: 002b:00007ffe6bda5d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  641.285723][T30158] RAX: 0000000000000000 RBX: 00007f89d78344bb RCX: 00007f89d779f397
[  641.285732][T30158] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6bda5dd0
[  641.285740][T30158] RBP: 00007ffe6bda5dd0 R08: 00007ffe6bda6dd0 R09: 00000000ffffffff
[  641.285751][T30158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6bda6e60
[  641.285759][T30158] R13: 00007f89d78344bb R14: 000000000009a3f9 R15: 00007ffe6bda6ea0
[  641.285780][T30158]  </TASK>
[  641.289775][T30158] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  643.209450][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11228'.
[  643.779371][   T35] audit: type=1326 audit(1791561781.516:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32116 comm="syz.0.11230" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85519e159 code=0x0
[  644.848501][ T7852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.848641][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.519465][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  645.584790][ T9850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.585015][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.802554][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.521875][T32185] syz.3.11257 (32185) used greatest stack depth: 16696 bytes left
[  649.019095][T32202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11265'.
[  649.191113][T32187] loop3: detected capacity change from 0 to 131072
[  649.192019][T32187] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[  649.192034][T32187] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  649.195673][T32187] F2FS-fs (loop3): invalid crc value
[  649.306545][T32187] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  649.326740][T32187] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  649.326757][T32187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  649.357728][T32187] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:8, node_footer[nid:8,ino:10986248,ofs:0,cpver:5623501055258199522,blkaddr:4614]
[  649.363880][T32187] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:8, node_footer[nid:8,ino:10986248,ofs:0,cpver:5623501055258199522,blkaddr:4614]
[  649.538670][T32223] Process accounting resumed
[  649.641416][T32231] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  649.641480][T32231] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11275'.
[  650.442340][T32114] syz.3.11229 (32114) used greatest stack depth: 16232 bytes left
[  650.732381][T32313] loop3: detected capacity change from 0 to 128
[  650.752641][T32313] vfat: Bad value for 'nonumtail'
[  650.763723][T32315] netlink: 'syz.0.11317': attribute type 39 has an invalid length.
[  650.994084][T32160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.994238][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.110887][ T5659] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  651.278303][ T5659] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  651.290662][ T4988] Bluetooth: hci1: unexpected event for opcode 0x202d
[  651.296152][ T5659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.296173][ T5659] usb 4-1: Product: syz
[  651.296183][ T5659] usb 4-1: Manufacturer: syz
[  651.296218][ T5659] usb 4-1: SerialNumber: syz
[  651.300370][ T5659] usb 4-1: config 0 descriptor??
[  651.312579][ T5659] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  651.556842][T32368] cgroup: No subsys list or none specified
[  651.691663][T14352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.691907][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.933917][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.121281][T32401] netlink: 'syz.6.11356': attribute type 5 has an invalid length.
[  652.391864][T32418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  652.406053][T32418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.059195][ T5659] gspca_stk1135: reg_w 0x200 err -71
[  653.060218][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060226][ T5659] gspca_stk1135: Sensor write failed
[  653.060236][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060240][ T5659] gspca_stk1135: Sensor write failed
[  653.060251][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060255][ T5659] gspca_stk1135: Sensor read failed
[  653.060266][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060270][ T5659] gspca_stk1135: Sensor read failed
[  653.060273][ T5659] gspca_stk1135: Detected sensor type unknown (0x0)
[  653.060287][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060291][ T5659] gspca_stk1135: Sensor read failed
[  653.060301][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060306][ T5659] gspca_stk1135: Sensor read failed
[  653.060399][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060404][ T5659] gspca_stk1135: Sensor write failed
[  653.060414][ T5659] gspca_stk1135: serial bus timeout: status=0x00
[  653.060418][ T5659] gspca_stk1135: Sensor write failed
[  653.060450][ T5659] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  653.062696][ T5659] usb 4-1: USB disconnect, device number 6
[  653.374978][T32449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  653.872424][T32474] Could not find key with description: [syz]
[  653.872439][T32474] process_request_key_err: No key
[  653.872445][T32474] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  653.872454][T32474] One or more global auth toks could not properly register; rc = [-2]
[  653.872477][T32474] Error validating options; rc = [-2]
[  654.094501][T32490] Could not find key with description: [syz]
[  654.094513][T32490] process_request_key_err: No key
[  654.094519][T32490] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  654.094526][T32490] One or more global auth toks could not properly register; rc = [-2]
[  654.094548][T32490] Error validating options; rc = [-2]
[  654.223682][ T2260] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  654.280882][T32502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11399'.
[  654.385731][ T2260] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  654.388324][ T2260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.388337][ T2260] usb 4-1: Product: syz
[  654.388343][ T2260] usb 4-1: Manufacturer: syz
[  654.388349][ T2260] usb 4-1: SerialNumber: syz
[  654.390037][ T2260] usb 4-1: config 0 descriptor??
[  654.395833][ T2260] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  654.676416][T32518] warn_alloc: 1 callbacks suppressed
[  654.676432][T32518] syz.0.11406: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  654.676474][T32518] CPU: 1 UID: 0 PID: 32518 Comm: syz.0.11406 Not tainted syzkaller #0 PREEMPT(full) 
[  654.676488][T32518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  654.676497][T32518] Call Trace:
[  654.676502][T32518]  <TASK>
[  654.676509][T32518]  dump_stack_lvl+0xe8/0x150
[  654.676531][T32518]  warn_alloc+0x24d/0x270
[  654.676546][T32518]  ? kasan_save_track+0x4f/0x80
[  654.676561][T32518]  ? kasan_save_track+0x3e/0x80
[  654.676576][T32518]  ? __pfx_warn_alloc+0x10/0x10
[  654.676588][T32518]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  654.676607][T32518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.676632][T32518]  __vmalloc_node_range_noprof+0x127/0x1540
[  654.676660][T32518]  ? rcu_is_watching+0x16/0xb0
[  654.676680][T32518]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  654.676692][T32518]  ? __kmalloc_cache_noprof+0x321/0x600
[  654.676705][T32518]  ? __kmalloc_cache_noprof+0x14d/0x600
[  654.676741][T32518]  ? xskq_create+0x56/0x220
[  654.676764][T32518]  xskq_create+0x148/0x220
[  654.676782][T32518]  ? xsk_init_queue+0x8a/0xe0
[  654.676800][T32518]  xsk_init_queue+0x8a/0xe0
[  654.676819][T32518]  xsk_setsockopt+0x52a/0x960
[  654.676838][T32518]  ? __pfx_xsk_setsockopt+0x10/0x10
[  654.676855][T32518]  ? __pfx_aa_sk_perm+0x10/0x10
[  654.676880][T32518]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  654.676898][T32518]  ? __pfx_xsk_setsockopt+0x10/0x10
[  654.676915][T32518]  do_sock_setsockopt+0x17c/0x1b0
[  654.676936][T32518]  __x64_sys_setsockopt+0x13d/0x1b0
[  654.676960][T32518]  do_syscall_64+0x166/0x520
[  654.676979][T32518]  ? trace_irq_disable+0x3b/0x140
[  654.676993][T32518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.677010][T32518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.677031][T32518] RIP: 0033:0x7fa85519e159
[  654.677045][T32518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.677057][T32518] RSP: 002b:00007fa8533f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  654.677072][T32518] RAX: ffffffffffffffda RBX: 00007fa855425fa0 RCX: 00007fa85519e159
[  654.677083][T32518] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  654.677092][T32518] RBP: 00007fa85523506b R08: 0000000000000004 R09: 0000000000000000
[  654.677101][T32518] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  654.677110][T32518] R13: 00007fa855426038 R14: 00007fa855425fa0 R15: 00007fff0752dc88
[  654.677134][T32518]  </TASK>
[  654.677201][T32518] Mem-Info:
[  654.677210][T32518] active_anon:13544 inactive_anon:14 isolated_anon:0
[  654.677210][T32518]  active_file:133 inactive_file:63079 isolated_file:0
[  654.677210][T32518]  unevictable:1000 dirty:111 writeback:0
[  654.677210][T32518]  slab_reclaimable:12527 slab_unreclaimable:90406
[  654.677210][T32518]  mapped:21817 shmem:6068 pagetables:2263
[  654.677210][T32518]  sec_pagetables:0 bounce:0
[  654.677210][T32518]  kernel_misc_reclaimable:0
[  654.677210][T32518]  free:1018078 free_pcp:44480 free_cma:0
[  654.677248][T32518] Node 0 active_anon:23312kB inactive_anon:48kB active_file:472kB inactive_file:190836kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:48568kB dirty:212kB writeback:0kB shmem:7404kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11592kB pagetables:5020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  654.677287][T32518] Node 1 active_anon:30864kB inactive_anon:8kB active_file:60kB inactive_file:61480kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:38700kB dirty:232kB writeback:0kB shmem:16868kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3608kB pagetables:4032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  654.677324][T32518] Node 0 DMA free:15360kB boost:0kB min:236kB low:292kB high:348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  654.677364][T32518] lowmem_reserve[]: 0 1581 2111 2111 2111
[  654.677391][T32518] Node 0 DMA32 free:1153200kB boost:0kB min:25284kB low:31604kB high:37924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6008kB inactive_anon:32kB active_file:152kB inactive_file:136296kB unevictable:0kB writepending:16kB zspages:404kB present:2080636kB managed:1619596kB mlocked:0kB bounce:0kB free_pcp:72548kB local_pcp:14348kB free_cma:0kB
[  654.677428][T32518] lowmem_reserve[]: 0 0 529 529 529
[  654.677451][T32518] Node 0 Normal free:10696kB boost:0kB min:8468kB low:10584kB high:12700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:17340kB inactive_anon:16kB active_file:320kB inactive_file:54540kB unevictable:2000kB writepending:196kB zspages:0kB present:1572868kB managed:542436kB mlocked:0kB bounce:0kB free_pcp:2224kB local_pcp:0kB free_cma:0kB
[  654.677537][T32518] lowmem_reserve[]: 0 0 0 0 0
[  654.677560][T32518] Node 1 Normal free:2893056kB boost:0kB min:56116kB low:70144kB high:84172kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30864kB inactive_anon:8kB active_file:60kB inactive_file:61480kB unevictable:2000kB writepending:232kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:103148kB local_pcp:73224kB free_cma:0kB
[  654.677595][T32518] lowmem_reserve[]: 0 0 0 0 0
[  654.677617][T32518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  654.677683][T32518] Node 0 DMA32: 9388*4kB (UME) 516*8kB (UME) 258*16kB (UME) 149*32kB (UME) 224*64kB (UME) 116*128kB (UME) 67*256kB (UME) 31*512kB (UME) 30*1024kB (UM) 13*2048kB (M) 240*4096kB (UM) = 1153168kB
[  654.677779][T32518] Node 0 Normal: 230*4kB (UME) 568*8kB (UME) 215*16kB (UM) 43*32kB (UM) 6*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10664kB
[  654.677906][T32518] Node 1 Normal: 2346*4kB (ME) 1183*8kB (UM) 620*16kB (UM) 413*32kB (UME) 619*64kB (UME) 171*128kB (UME) 123*256kB (UM) 69*512kB (UME) 29*1024kB (UM) 11*2048kB (UM) 652*4096kB (UM) = 2893120kB
[  654.678002][T32518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  654.678011][T32518] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  654.678027][T32518] 69283 total pagecache pages
[  654.678032][T32518] 0 pages in swap cache
[  654.678038][T32518] Free swap  = 124840kB
[  654.678043][T32518] Total swap = 124996kB
[  654.678048][T32518] 1834877 pages RAM
[  654.678053][T32518] 0 pages HighMem/MovableOnly
[  654.678058][T32518] 391857 pages reserved
[  654.678063][T32518] 0 pages cma reserved
[  655.153291][T32542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11417'.
[  655.153382][T32542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11417'.
[  655.189511][T32544] netlink: 'syz.0.11418': attribute type 39 has an invalid length.
[  656.206250][ T2260] gspca_stk1135: reg_w 0x200 err -71
[  656.207275][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207283][ T2260] gspca_stk1135: Sensor write failed
[  656.207294][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207299][ T2260] gspca_stk1135: Sensor write failed
[  656.207310][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207314][ T2260] gspca_stk1135: Sensor read failed
[  656.207325][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207330][ T2260] gspca_stk1135: Sensor read failed
[  656.207332][ T2260] gspca_stk1135: Detected sensor type unknown (0x0)
[  656.207346][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207350][ T2260] gspca_stk1135: Sensor read failed
[  656.207361][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207365][ T2260] gspca_stk1135: Sensor read failed
[  656.207376][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207380][ T2260] gspca_stk1135: Sensor write failed
[  656.207390][ T2260] gspca_stk1135: serial bus timeout: status=0x00
[  656.207394][ T2260] gspca_stk1135: Sensor write failed
[  656.207430][ T2260] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  656.262738][ T2260] usb 4-1: USB disconnect, device number 7
[  656.845273][T32572] netlink: 'syz.3.11430': attribute type 39 has an invalid length.
[  657.067860][T32575] fuse: Bad value for 'fd'
[  657.151474][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.151730][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.795899][T32622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11453'.
[  657.795935][T32622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11453'.
[  657.835687][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.835831][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.900160][T32630] IPVS: length: 153 != 24
[  657.985795][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.986004][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.273971][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.274379][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.693400][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.693558][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.714541][T32660] loop3: detected capacity change from 0 to 512
[  658.720423][T32660] EXT4-fs (loop3): orphan cleanup on readonly fs
[  658.720637][T32660] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.11471: ea_inode with extended attributes
[  658.720651][T32660] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  658.723940][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  658.723953][    C1] EXT4-fs (loop3): initial error at time 1791561795: ext4_xattr_inode_iget:437: inode 11
[  658.723965][    C1] EXT4-fs (loop3): last error at time 1791561795: ext4_xattr_inode_iget:437: inode 11
[  658.726436][T32660] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.11471: error while reading EA inode 11 err=-117
[  658.726452][T32660] loop3: lost filesystem error report for type 5 error -117
[  658.727182][T32660] EXT4-fs (loop3): 1 orphan inode deleted
[  658.737829][T32660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  658.762920][T30158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.405728][T32722] xt_hashlimit: size too large, truncated to 1048576
[  660.464965][T32728] xt_hashlimit: size too large, truncated to 1048576
[  660.508700][T32730] netlink: 'syz.6.11502': attribute type 39 has an invalid length.
[  660.894278][T32761] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  661.352194][ T5645] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0
[  661.360234][ T5645] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[  661.376716][ T5645] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  661.376902][ T5645] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.377340][ T5645] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  661.377704][ T5645] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.378096][ T5645] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  661.378339][ T5645] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.966144][  T340] fuse: Bad value for 'fd'
[  662.224479][  T349] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11542'.
[  662.571487][ T2260] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  662.732159][ T2260] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  662.733135][ T2260] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  662.733147][ T2260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  662.733155][ T2260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  662.733172][ T2260] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  662.734537][ T2260] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  662.734547][ T2260] usb 4-1: Product: syz
[  662.734552][ T2260] usb 4-1: Manufacturer: syz
[  662.741566][ T2260] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  662.957802][ T2260] usb 4-1: USB disconnect, device number 8
[  663.091982][  T405] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11565'.
[  663.320473][ T8105] net_ratelimit: 6 callbacks suppressed
[  663.320491][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.320682][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.541759][   T35] audit: type=1800 audit(1791561799.990:748): pid=418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11571" name="file1" dev="overlay" ino=1429 res=0 errno=0
[  663.822102][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.822372][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.153385][  T434] netlink: 'syz.6.11576': attribute type 4 has an invalid length.
[  664.229619][  T437] fuse: Bad value for 'fd'
[  664.340172][  T443] bridge0: port 1(bond0) entered blocking state
[  664.340276][  T443] bridge0: port 1(bond0) entered disabled state
[  664.340451][  T443] bond0: entered allmulticast mode
[  664.351407][  T443] bond0: entered promiscuous mode
[  664.362325][  T443] netlink: 124 bytes leftover after parsing attributes in process `syz.6.11581'.
[  664.362394][  T443] bond0: Caught tx_queue_len zero misconfig
[  664.699908][  T449] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11584'.
[  665.221683][  T468] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11593'.
[  665.251294][  T476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11596'.
[  665.523407][  T499] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11608'.
[  665.573484][  T510] overlayfs: failed to clone upperpath
[  665.693839][  T526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11619'.
[  665.756989][  T535] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11620'.
[  665.941069][  T559] netlink: 'syz.0.11632': attribute type 10 has an invalid length.
[  665.941447][  T559] netlink: 'syz.0.11632': attribute type 10 has an invalid length.
[  665.979868][  T563] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11631'.
[  665.991379][  T562] loop3: detected capacity change from 0 to 512
[  665.999539][  T562] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  666.017926][  T562] EXT4-fs (loop3): 1 truncate cleaned up
[  666.021939][  T562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.070551][T30158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.161991][  T574] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  667.568381][  T599] loop3: detected capacity change from 0 to 32768
[  667.572209][  T599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11648 (599)
[  667.610160][  T599] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  667.610179][  T599] BTRFS info (device loop3): using crc32c checksum algorithm
[  667.744434][  T599] BTRFS info (device loop3): enabling ssd optimizations
[  667.744448][  T599] BTRFS info (device loop3): turning on flush-on-commit
[  667.744454][  T599] BTRFS info (device loop3): enabling free space tree
[  667.744461][  T599] BTRFS info (device loop3): enabling auto defrag
[  667.744468][  T599] BTRFS info (device loop3): use lzo compression, level 1
[  667.744475][  T599] BTRFS info (device loop3): max_inline set to 4096
[  667.797741][  T650] __nla_validate_parse: 2 callbacks suppressed
[  667.797752][  T650] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11661'.
[  667.812568][T30158] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  667.838023][  T652] overlayfs: failed to clone upperpath
[  668.207269][  T673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11673'.
[  668.239119][  T676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.310847][  T686] veth0_to_bond: Caught tx_queue_len zero misconfig
[  668.469901][  T697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11685'.
[  668.602790][  T712] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11689'.
[  668.769571][  T732] overlayfs: failed to clone upperpath
[  668.789322][  T731] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  668.891603][  T741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11705'.
[  669.054025][  T764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11714'.
[  669.071898][  T767] xt_hashlimit: max too large, truncated to 1048576
[  669.072053][  T767] xt_hashlimit: overflow, try lower: 18446744073709551612/8
[  669.144759][  T779] overlayfs: failed to clone upperpath
[  669.179733][  T785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11723'.
[  669.307122][  T803] overlayfs: failed to clone upperpath
[  669.512610][  T816] fuse: fd is not a fuse device
[  669.672047][  T829] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11741'.
[  669.707023][  T831] netlink: 124 bytes leftover after parsing attributes in process `syz.0.11742'.
[  669.713202][T30379] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  669.812509][  T843] overlayfs: failed to clone upperpath
[  669.873133][T30379] usb 4-1: Using ep0 maxpacket: 32
[  669.875334][T30379] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  669.877946][T30379] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  669.877980][T30379] usb 4-1: config 0 has no interface number 0
[  669.877999][T30379] usb 4-1: config 0 interface 12 has no altsetting 0
[  669.879694][T30379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.879705][T30379] usb 4-1: Product: syz
[  669.879711][T30379] usb 4-1: Manufacturer: syz
[  669.879716][T30379] usb 4-1: SerialNumber: syz
[  669.883836][T30379] usb 4-1: config 0 descriptor??
[  669.936234][  T849] netlink: 124 bytes leftover after parsing attributes in process `syz.0.11751'.
[  670.787183][  T881] jffs2: notice: (881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  671.686079][T30379] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  671.686106][T30379] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  671.686113][T30379] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  671.686149][T30379] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  671.690990][T30379] usb 4-1: USB disconnect, device number 9
[  671.870879][  T922] overlayfs: failed to resolve './bus': -2
[  672.328436][  T957] fuse: fd is not a fuse device
[  672.499835][  T974] cgroup: fork rejected by pids controller in /syz3
[  673.026947][ T5645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.096239][ T5645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.172134][ T5645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.246120][ T5645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.596794][ T5645] bond0 (unregistering): Released all slaves
[  673.608321][ T5645] bond1 (unregistering): Released all slaves
[  673.640440][ T5334] 8021q: adding VLAN 0 to HW filter on device eth5
[  673.909526][ T5334] 8021q: adding VLAN 0 to HW filter on device eth6
[  673.985844][ T5645] hsr_slave_0: left promiscuous mode
[  673.986651][ T5645] hsr_slave_1: left promiscuous mode
[  673.997816][ T5645] veth1_macvtap: left promiscuous mode
[  673.997933][ T5645] veth0_macvtap: left promiscuous mode
[  673.998136][ T5645] veth1_vlan: left promiscuous mode
[  673.998230][ T5645] veth0_vlan: left promiscuous mode
[  674.360532][ T5334] 8021q: adding VLAN 0 to HW filter on device eth7
[  674.549555][ T5334] 8021q: adding VLAN 0 to HW filter on device eth8
[  677.597731][ T1057] __nla_validate_parse: 4 callbacks suppressed
[  677.597748][ T1057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11814'.
[  678.664556][ T1068] fuse: fd is not a fuse device
[  679.859863][ T1074] netlink: 'syz.6.11819': attribute type 1 has an invalid length.
[  679.859884][ T1074] netlink: 'syz.6.11819': attribute type 1 has an invalid length.
[  682.703514][ T1116] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11824'.
[  693.442994][ T1186] overlayfs: failed to clone upperpath
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: failed to mkdtemp
 (errno 1: Operation not permitted)
SYZFAIL: repeatedly failed to execute the program
proc=3 req=11801 state=1 status=67 (errno 9: Bad file descriptor)
[  696.137310][   T13] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  696.137336][   T13] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.243596][   T13] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  696.243653][   T13] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.315818][   T13] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  696.315835][   T13] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.383567][   T13] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  696.383593][   T13] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.541604][   T13] bond0: left allmulticast mode
[  696.545148][   T13] bond0: left promiscuous mode
[  696.545305][   T13] bridge0: port 1(bond0) entered disabled state
[  696.820903][   T13] bond0 (unregistering): Released all slaves
[  696.824864][   T13] bond1 (unregistering): Released all slaves
[  696.830393][   T13] bond2 (unregistering): Released all slaves
[  696.836598][   T13] bond3 (unregistering): Released all slaves
[  696.842527][   T13] bond4 (unregistering): Released all slaves
[  696.849040][   T13] bond5 (unregistering): Released all slaves
[  696.860344][   T13] bond6 (unregistering): Released all slaves
[  696.865928][   T13] bond7 (unregistering): Released all slaves
[  696.884949][   T13] bond8 (unregistering): Released all slaves
[  696.890627][   T13] bond9 (unregistering): Released all slaves
[  696.896065][   T13] bond10 (unregistering): Released all slaves
[  696.902288][   T13] bond11 (unregistering): Released all slaves
[  696.907571][   T13] bond12 (unregistering): Released all slaves
[  696.913010][   T13] bond13 (unregistering): Released all slaves
[  696.918248][   T13] bond14 (unregistering): Released all slaves
[  697.018114][   T13] tipc: Left network mode
[  697.051118][   T13] IPVS: stopping master sync thread 17299 ...
[  697.052162][   T13] IPVS: stopping backup sync thread 18633 ...
[  697.173406][ T5334] 8021q: adding VLAN 0 to HW filter on device eth33
[  697.775748][ T5334] 8021q: adding VLAN 0 to HW filter on device eth34
[  697.957589][ T5334] 8021q: adding VLAN 0 to HW filter on device eth35
[  698.121962][ T5334] 8021q: adding VLAN 0 to HW filter on device eth36
[  698.974871][   T13] IPVS: stop unused estimator thread 0...
[  699.573756][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  699.573784][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
