last executing test programs: 2m44.829425987s ago: executing program 1 (id=151): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) 2m44.436578245s ago: executing program 4 (id=152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f0000000600000004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000010000000000000000"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) 2m44.384831338s ago: executing program 3 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7fffc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 2m32.553155659s ago: executing program 1 (id=155): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4a1, &(0x7f0000000540)={0x0, 0xbd57, 0x400, 0x3, 0x285}, 0x0, &(0x7f0000000480)) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) 2m32.499449681s ago: executing program 4 (id=156): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x80000001, 0x8, 0x5, 0x7, 0x9, 0xfffff3b9, 0x200}, 0x1c) 2m32.398019136s ago: executing program 4 (id=159): syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r0, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 2m32.397604916s ago: executing program 3 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m32.279444482s ago: executing program 3 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x54}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m31.644983703s ago: executing program 1 (id=164): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 2m31.568293457s ago: executing program 1 (id=165): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000003140100000000000000000027000200"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 2m31.568101926s ago: executing program 1 (id=166): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0804124, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 2m31.49211238s ago: executing program 1 (id=167): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) 2m31.115010879s ago: executing program 3 (id=168): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 2m30.974596046s ago: executing program 3 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8001) 2m30.860194371s ago: executing program 3 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7fffc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 2m30.566095186s ago: executing program 4 (id=173): socket$inet6(0xa, 0x5, 0x101) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) 2m30.336154167s ago: executing program 4 (id=174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000b80)="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", 0x123}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m30.317169788s ago: executing program 4 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$unix(r3, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2m15.753666132s ago: executing program 32 (id=167): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) 2m15.741571883s ago: executing program 33 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7fffc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 2m14.717863043s ago: executing program 34 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$unix(r3, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2m0.71083784s ago: executing program 5 (id=195): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x73e0, 0xbd66, 0x1, 0x0, 0x27) 2m0.600301756s ago: executing program 5 (id=241): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) unshare(0x22060600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m0.51669018s ago: executing program 5 (id=242): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}], 0x1, 0x80) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1m55.938403884s ago: executing program 5 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118230541448370fa2d1b362ce6c2eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c16231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a34484005b58a703899ad2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e515f9967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf", 0xca1}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15", 0xb4}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="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", 0x12f}], 0x5}, 0x8bb3a321efc09a) 1m40.354189478s ago: executing program 35 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xca1}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15", 0xb4}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="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", 0x12f}], 0x5}, 0x8bb3a321efc09a) 13.158946075s ago: executing program 8 (id=659): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000fffc120003006269746d61703a69702c6d61630000000500040000da18000900020073797a310000000018000780050003001f0000000c00"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x6000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x9368, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r4, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 13.04929887s ago: executing program 8 (id=661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0x7, 0xffe0}, {0x8, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4045}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 12.932951836s ago: executing program 8 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() getrlimit(0x2, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 11.696607747s ago: executing program 8 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 11.573678593s ago: executing program 8 (id=694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="480000002e0001c6000000000000000005001980340011802e"], 0x48}, {&(0x7f0000000380)={0xb0, 0x22, 0x10, 0x70bd27, 0x25dfdbff, "", [@nested={0x4, 0x139}, @typed={0x42, 0x83, 0x0, 0x0, @binary="c0ec293a2c00e65b193c1347501ee4bacaf2132ab5d47d3ca44462cf808a91fe24c52a4d5ebb0e5fbba310654ff7b1aefea6ff35cf77897c94af8d143121"}, @generic="5c18894769f6dc05fa2a17286817eb31b14656146a7da2ca9a08467e3d3e63ebca1aa5693bf4dcaa57c3f4870587dc9cdb7f0862cd5b85cdb4efc9b922c3c16f2cf5a80893a4bf2c41ed6553c5fadbcbf25e82dd09"]}, 0xb0}, {&(0x7f0000000240)={0x18, 0x41, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x103, 0x0, 0x0, @ipv4=@local}]}, 0x18}, {&(0x7f0000000700)={0x4d4, 0x32, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x90, 0x0, 0x0, @u32=0x5}, @nested={0xcd, 0x113, 0x0, 0x1, [@generic="f4cd455a0b8a99d8cc1ec162d97e1c8b4f8a7e3690d9a6ccffdc67f82687055ef14df584874456381aa3f9ed69c4d664687835922f6d899feb9bbbe3f295e61505925fbefc8ed8ae782f20d30e5f74b8cd720455fef1df6bf934d9022f3cd8c7d7bca569aeaaaacd3b44c1537131d87bdae5f8202ee6bb4137e9077aa9e19eb2e0ecd8bed9a1c97c1a12063009c1b305b0450c120656a0b1b3f38fadb5e5766a9680a07046291c7e6fb129fc16f0cb0061ccdf038fcd4b7717578279174470b04d0f7ffc0a", @nested={0x4, 0x12b}]}, @generic="d8781b2a8a", @nested={0x324, 0x157, 0x0, 0x1, [@typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@private1}, @generic="b9dbed163b0fc8492bafb74db40301ad04b92f66979b08be70be313d49f24ab24207c14d17be0b54b6fd68ba3c04f6d5be0657ff5920286013a4a89834bee03f2f19f4033edee2002e7a5491294c37e0121ac3014aa00ebaaa471583aeb4547ca77c3f3357", @generic="b089b611510ed263f7456a8ad558400a21089d6cee8c81c7c064ca8ef74a8d97d8962822d26157946748261408a00d6f465b280fc1bd1e8a597592a0ea7fb8448c44ff8584c8f83f44b078c1b6b5cb91d23b4c48d6dd97324d84cc59e861eda51b9005c61924986d8a520c4fa4edb4928caf24de5bc01599b42dece2cf9de408df9e310b9203f6e082f0d1f76e915a90addfbc01f582dd63893c13b9e1444baafc11809c2720d55419868f654ab6cf9846ab02f433bdb854d40c58eee319d65525f914c1493ca674858a08b0ea43f66b82b112a138f6d8ba592104a8a9", @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x5e, 0x0, 0x0, @u32}, @nested={0x4, 0x10}, @typed={0xe2, 0x22, 0x0, 0x0, @binary="50eb3a5c1ecc70e8c7a5358fa84cf3a5092f7ab42a28a1f25fc3c32a0804b2c2befc12785ade0d2a0e326c2d43ea00bd39ed3e5e68d40759b8f1bc998b36dff07dfdd24174ed51888e7270fa80e5f61612225986beb5a4d4c346e5c54a76c008510ea0e83433aa0284da8c506550ee5a75d21ccabdef9fe87fe3f01be6f4d2bc45f7858e38d548620511fa00f409d880643306609f2ddeb942102aad8cdfcc143e7857cd31caff1697c64e955179581bdaff74303b2ee887dd1745262bd28ddc74c7d022286d70b73c19ec1dea4e2b6baf2a30b7e715efb750dd0aaedba5"}, @generic="5d0596ae1b2bda2be35e861bac3d4e20036d24afd0fede1247f31ca1a62d151ca1ce121acafbd0477cfaa060d526a940b31d25901127b8da374180b285485f94a92e6680d460f23d7f9a2dfef99f0f2c3b5b29ae39c8dcb443c698b411b694ba9d9b2c962595a1464f9c87edc3e1f417acfec3a9c999937897ecd38397d9e3bd514cadef625a1f7cee6c48215fe575e90e493c4a10f321e8797412ac79002c915c5eda1ea0c470351a6b799bb4853b3607f98cfd2d96e4364c3ddfb61797808a2cf81540a7e8"]}, @typed={0x73, 0xbf, 0x0, 0x0, @binary="edcb2952fdb92fd4183174b3a21c1efe866be6f7e458366490d3544ac1f41fdc0111ccc7ccd9ec43ae4812b46ccaa0f63402fada1b2f78cce13e03047456c24f4d7db371852ed89243d400125a79f1503d862523d827083c58471bb2a02551b95611357d815a1d3296398f7fcb455b"}, @typed={0x4c, 0xfe, 0x0, 0x0, @binary="81492f508c040f9745bd48607216ba5022681c8dde9287f2221387279516b5f95ad3b16fa9e2aaac7bd8d8fd3e13e31ce78a4fff293bc58b92ddb2128e0ee5f23f0db325852880a0"}]}, 0x4d4}, {&(0x7f00000000c0)={0x24, 0x3d, 0x100, 0x70bd26, 0x25dfdbff, "", [@typed={0x14, 0x33, 0x0, 0x0, @ipv6=@remote}]}, 0x24}], 0x5, 0x0, 0x0, 0x84}, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x2000000}, 0x20) socket$netlink(0x10, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x409}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010841000000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000008001b000000000099807932646233be44e1b38b7ba2771cc57212bdf39d08f3eca6155c7d41ab6b27025a8f5983693520f4a170466f629729cbb2944638ed7e2d27478c5021cb0bd13e60fb529adb01acc118c39b5acf43f796ec434eb001364bd9215533cfa338607d04447c2f28d38d6aeef272710f7bad0e4b0ee12f6005b98adbb5f7c624548c29e90a99576813ec54e5162bed593c03aa512c96a9f91891b3cc"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 5.183947616s ago: executing program 7 (id=735): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x3, 0x0, 0x6, 0x1, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5.174797576s ago: executing program 2 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, 0x0, 0x0, 0x8000) 3.979696975s ago: executing program 2 (id=740): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x3, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff1, 0xe}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.768051236s ago: executing program 2 (id=743): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffff1b, 0x10007b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x2, 0x0, 0x107fffffff}, 0x0, 0x0) 3.749289036s ago: executing program 6 (id=744): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) migrate_pages(0x0, 0xffff, 0x0, 0x0) 3.608820114s ago: executing program 7 (id=746): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}}, 0x0) 3.020059632s ago: executing program 8 (id=747): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) landlock_create_ruleset(0x0, 0x0, 0x0) 2.601084692s ago: executing program 6 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 2.598741263s ago: executing program 7 (id=749): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0x19, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2.165991924s ago: executing program 7 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3, 0x10000}]}}}}}}}, 0x0) 2.093205358s ago: executing program 0 (id=752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f0806", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.022738691s ago: executing program 0 (id=753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000200000000000000000000000000000000000000000000000000000ffffffffffffffff001a2e0000000000000000000000195d505a389f44230000000a000000000000feffffffff7f4000020000000000000800000000000000000100000000000000440005004e4cf8f1000000000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x81, @mcast2, 0x7}, 0x80, 0x0}, 0x0) 2.019770241s ago: executing program 2 (id=754): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000540)=0xfffffe01, 0x4) 2.017939941s ago: executing program 0 (id=755): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@utf8no}, {@utf8}, {@fat=@sys_immutable}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlateno}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x1, 0x371, &(0x7f0000002980)="$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") r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000300)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x1, 0x73, 0x11, 0x37}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000280)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/firmware/fdt', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f13, 0x12) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x3fc, @loopback, 0x8000}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)={0x1, 0x0, 0xc}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) 1.991324663s ago: executing program 7 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xca1}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ce19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a9887c3e6ea7734e44835fcd6d23a0d7e00", 0xd3}, {&(0x7f0000000f80)="a5ca8683d601768d343ca112b53e7aa9b7692478467c2525cc9ceb426e1540e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce2bcb9e70676fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7fd4240630196a25d1f5f1e15a09f55d4794bcc7f6157b9376d046f30af1ac7464b32a655976a27d8baebcb440d211d60baa353b30fc2a967c9827f4fe99c20abfdbff7b2c090ece74acb8e286dc583d0b86fe35e888ddc2a1f", 0x139}], 0x5}, 0x8bb3a321efc09a) 1.979486793s ago: executing program 6 (id=757): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x3, 0x0, 0x6, 0x1, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.865651229s ago: executing program 2 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) migrate_pages(0x0, 0xffff, 0x0, 0x0) 1.864326909s ago: executing program 6 (id=759): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x6000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x9368, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r3, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.771030664s ago: executing program 6 (id=760): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 1.065748178s ago: executing program 0 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x20}}, 0x20044800) 1.004888151s ago: executing program 2 (id=762): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r5 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x10, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) close_range(r4, r1, 0x0) 989.344012ms ago: executing program 0 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x7a7cf4bd24331944, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 828.51035ms ago: executing program 0 (id=764): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 827.63336ms ago: executing program 6 (id=765): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$inet(r0, &(0x7f00000010c0), 0x0, 0x20000800) 0s ago: executing program 7 (id=766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a0612e9a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904b038903cf126f72b1849de", @ANYRES32=0x0, @ANYRESOCT=r1], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f0000000600000004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000010000000000000000"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) kernel console output (not intermixed with test programs): address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.978091][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.979854][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.981617][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.984134][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.985265][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.987880][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.989463][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.991383][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.006695][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.008444][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.011579][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.013464][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.016138][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.027735][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.029389][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.030973][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.032567][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.034065][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.035682][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.042266][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.043542][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.045202][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.048953][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.050618][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.052173][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.053721][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.061056][ T4320] device veth0_macvtap entered promiscuous mode [ 35.064156][ T4320] device veth1_macvtap entered promiscuous mode [ 35.067383][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.068734][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.070241][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.071880][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.077255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.078766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.089371][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.090667][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.091611][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.093737][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.095366][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.098263][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.099811][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.101477][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.103022][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.104678][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.108079][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.110452][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.112094][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.113643][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.124570][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.126227][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.129338][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.131089][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.132708][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.134381][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.142476][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.144757][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.146890][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.148461][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.150049][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.153955][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.155724][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.159316][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.161395][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.163686][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.168745][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.169088][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.170013][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.172911][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.174421][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.177991][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.179656][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.187523][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.196640][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.198032][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.199413][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.202806][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.204188][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.205531][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.222201][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.273885][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.276872][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.287505][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.337355][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.338663][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.340305][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.347393][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.348672][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.350764][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.361987][ T4415] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 35.373051][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.374431][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.375816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.395724][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.397346][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.398694][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.425709][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.427506][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.443515][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.948085][ T4428] loop3: detected capacity change from 0 to 512 [ 35.986951][ T4310] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.008572][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 36.010027][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 36.010048][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 36.011183][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 36.012087][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 36.419361][ T4448] tipc: Started in network mode [ 36.420217][ T4448] tipc: Node identity ac14140f, cluster identity 4711 [ 36.421650][ T4448] tipc: New replicast peer: 255.255.255.255 [ 36.423019][ T4448] tipc: Enabled bearer , priority 10 [ 37.159259][ T4466] loop3: detected capacity change from 0 to 8192 [ 37.208390][ T4466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24'. [ 37.255559][ T4478] loop4: detected capacity change from 0 to 1024 [ 37.269202][ T4478] ======================================================= [ 37.269202][ T4478] WARNING: The mand mount option has been deprecated and [ 37.269202][ T4478] and is ignored by this kernel. Remove the mand [ 37.269202][ T4478] option from the mount to silence this warning. [ 37.269202][ T4478] ======================================================= [ 37.385680][ T4478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.439738][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 37.537409][ T4359] tipc: Node number set to 2886997007 [ 37.799034][ T4507] loop1: detected capacity change from 0 to 1024 [ 37.860797][ T4507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.955126][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 38.086771][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 38.087814][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 38.088860][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 38.089804][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 38.090808][ T4333] Bluetooth: hci1: command 0x040f tx timeout [ 38.895111][ T4547] loop3: detected capacity change from 0 to 1024 [ 38.940518][ T4547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.007405][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 39.624223][ T4585] binder: tried to use weak ref as strong ref [ 39.632939][ T4585] binder: 4584:4585 Acquire 1 refcount change on invalid ref 0 ret -22 [ 39.633795][ T4588] netlink: 148 bytes leftover after parsing attributes in process `syz.1.69'. [ 39.634543][ T4585] binder: 4584:4585 got transaction to invalid handle, 1 [ 39.640411][ T4585] binder: 4585:4584 cannot find target node [ 39.642544][ T4585] binder: 4584:4585 transaction async to 0:0 failed 3/29201/-22, size 0-24 line 3045 [ 39.648771][ T1513] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.168795][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 40.168847][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 40.171036][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 40.172480][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 40.173550][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 40.976252][ C0] sched: RT throttling activated [ 41.050973][ T4603] loop1: detected capacity change from 0 to 1024 [ 41.139022][ T4606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.76'. [ 41.162322][ T4603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.259831][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 41.289248][ T4618] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.292370][ T4618] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.412760][ T4625] loop4: detected capacity change from 0 to 256 [ 41.448561][ T4625] FAT-fs (loop4): Directory bread(block 64) failed [ 41.452496][ T4625] FAT-fs (loop4): Directory bread(block 65) failed [ 41.459568][ T4625] FAT-fs (loop4): Directory bread(block 66) failed [ 41.464812][ T4625] FAT-fs (loop4): Directory bread(block 67) failed [ 41.469624][ T4625] FAT-fs (loop4): Directory bread(block 68) failed [ 41.473102][ T4625] FAT-fs (loop4): Directory bread(block 69) failed [ 41.480962][ T4625] FAT-fs (loop4): Directory bread(block 70) failed [ 41.484300][ T4625] FAT-fs (loop4): Directory bread(block 71) failed [ 41.489217][ T4625] FAT-fs (loop4): Directory bread(block 72) failed [ 41.492639][ T4625] FAT-fs (loop4): Directory bread(block 73) failed [ 41.513877][ T4629] loop1: detected capacity change from 0 to 128 [ 41.541533][ T4629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.992783][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.054276][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.059668][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.085197][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 42.114951][ T4632] device bridge_slave_0 left promiscuous mode [ 42.137099][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.289368][ T4632] device bridge_slave_1 left promiscuous mode [ 42.290503][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.338740][ T4632] bond0: (slave bond_slave_0): Releasing backup interface [ 42.347809][ T4653] loop1: detected capacity change from 0 to 1024 [ 42.394661][ T4632] bond0: (slave bond_slave_1): Releasing backup interface [ 42.406935][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.501603][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 42.565593][ T4632] team0: Port device team_slave_0 removed [ 42.581500][ T4632] team0: Port device team_slave_1 removed [ 42.582843][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.584015][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.585955][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.588464][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.413671][ T4683] loop4: detected capacity change from 0 to 256 [ 43.432144][ T4683] FAT-fs (loop4): Directory bread(block 64) failed [ 43.433476][ T4683] FAT-fs (loop4): Directory bread(block 65) failed [ 43.436735][ T4683] FAT-fs (loop4): Directory bread(block 66) failed [ 43.437785][ T4683] FAT-fs (loop4): Directory bread(block 67) failed [ 43.438894][ T4683] FAT-fs (loop4): Directory bread(block 68) failed [ 43.439946][ T4683] FAT-fs (loop4): Directory bread(block 69) failed [ 43.440993][ T4683] FAT-fs (loop4): Directory bread(block 70) failed [ 43.443477][ T4683] FAT-fs (loop4): Directory bread(block 71) failed [ 43.444652][ T4683] FAT-fs (loop4): Directory bread(block 72) failed [ 43.445756][ T4683] FAT-fs (loop4): Directory bread(block 73) failed [ 44.025095][ T4693] loop2: detected capacity change from 0 to 1024 [ 44.061699][ T4693] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.112272][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 44.144442][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 45.556183][ T4716] loop5: detected capacity change from 0 to 7 [ 45.559504][ T4716] Dev loop5: unable to read RDB block 7 [ 45.560471][ T4716] loop5: unable to read partition table [ 45.561483][ T4716] loop5: partition table beyond EOD, truncated [ 45.562458][ T4716] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 46.108124][ T4729] loop0: detected capacity change from 0 to 256 [ 46.109562][ T4727] loop4: detected capacity change from 0 to 1024 [ 46.123088][ T4729] FAT-fs (loop0): Directory bread(block 64) failed [ 46.132967][ T4729] FAT-fs (loop0): Directory bread(block 65) failed [ 46.134043][ T4729] FAT-fs (loop0): Directory bread(block 66) failed [ 46.135063][ T4729] FAT-fs (loop0): Directory bread(block 67) failed [ 46.136219][ T4729] FAT-fs (loop0): Directory bread(block 68) failed [ 46.146623][ T4729] FAT-fs (loop0): Directory bread(block 69) failed [ 46.148260][ T4729] FAT-fs (loop0): Directory bread(block 70) failed [ 46.149224][ T4729] FAT-fs (loop0): Directory bread(block 71) failed [ 46.150244][ T4729] FAT-fs (loop0): Directory bread(block 72) failed [ 46.151313][ T4729] FAT-fs (loop0): Directory bread(block 73) failed [ 46.166164][ T4732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.174847][ T4732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.180759][ T4727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.211149][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 46.878537][ T4746] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 47.175323][ T4753] tmpfs: Unknown parameter 'mpoljBault' [ 47.455720][ T4764] binder: 4763:4764 tried to acquire reference to desc 0, got 1 instead [ 47.460557][ T4764] binder: 4763:4764 ioctl c0306201 200002c0 returned -11 [ 47.461933][ T4371] binder: release 4763:4764 transaction 8 out, still active [ 47.461960][ T4371] binder: undelivered TRANSACTION_COMPLETE [ 47.479835][ T4371] binder: send failed reply for transaction 8, target dead [ 47.522465][ T4766] loop3: detected capacity change from 0 to 1024 [ 47.532105][ T4767] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 47.572601][ T4766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.608350][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 47.712401][ T4774] loop4: detected capacity change from 0 to 256 [ 48.092893][ T4780] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 48.102505][ T4774] FAT-fs (loop4): Directory bread(block 64) failed [ 48.105803][ T4774] FAT-fs (loop4): Directory bread(block 65) failed [ 48.109214][ T4774] FAT-fs (loop4): Directory bread(block 66) failed [ 48.111623][ T4774] FAT-fs (loop4): Directory bread(block 67) failed [ 48.112792][ T4774] FAT-fs (loop4): Directory bread(block 68) failed [ 48.116353][ T4774] FAT-fs (loop4): Directory bread(block 69) failed [ 48.117444][ T4774] FAT-fs (loop4): Directory bread(block 70) failed [ 48.118516][ T4774] FAT-fs (loop4): Directory bread(block 71) failed [ 48.119575][ T4774] FAT-fs (loop4): Directory bread(block 72) failed [ 48.120619][ T4774] FAT-fs (loop4): Directory bread(block 73) failed [ 48.705294][ T4786] device syzkaller0 entered promiscuous mode [ 48.742517][ T4790] lo speed is unknown, defaulting to 1000 [ 48.743565][ T4790] lo speed is unknown, defaulting to 1000 [ 48.744634][ T4790] lo speed is unknown, defaulting to 1000 [ 48.785623][ T4790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.915169][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.920503][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.767191][ T4790] lo speed is unknown, defaulting to 1000 [ 59.768455][ T4790] lo speed is unknown, defaulting to 1000 [ 59.770565][ T4790] lo speed is unknown, defaulting to 1000 [ 59.780689][ T4790] lo speed is unknown, defaulting to 1000 [ 59.781916][ T4790] lo speed is unknown, defaulting to 1000 [ 59.923084][ T4840] loop3: detected capacity change from 0 to 256 [ 60.264171][ T4836] device syzkaller0 entered promiscuous mode [ 60.292679][ T4840] FAT-fs (loop3): Directory bread(block 64) failed [ 60.293920][ T4840] FAT-fs (loop3): Directory bread(block 65) failed [ 60.300360][ T4840] FAT-fs (loop3): Directory bread(block 66) failed [ 60.304736][ T4840] FAT-fs (loop3): Directory bread(block 67) failed [ 60.305954][ T4840] FAT-fs (loop3): Directory bread(block 68) failed [ 60.312329][ T27] audit: type=1326 audit(60.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.0.148" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab77128 code=0x0 [ 60.319109][ T4840] FAT-fs (loop3): Directory bread(block 69) failed [ 60.320314][ T4840] FAT-fs (loop3): Directory bread(block 70) failed [ 60.324909][ T4840] FAT-fs (loop3): Directory bread(block 71) failed [ 60.332477][ T4840] FAT-fs (loop3): Directory bread(block 72) failed [ 60.333836][ T4840] FAT-fs (loop3): Directory bread(block 73) failed [ 60.344885][ T4849] raw_sendmsg: syz.1.149 forgot to set AF_INET. Fix it! [ 64.497536][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498660][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.611899][ T22] cfg80211: failed to load regulatory.db [ 72.707164][ T4863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 73.121931][ T4910] loop2: detected capacity change from 0 to 256 [ 73.147059][ T4739] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.511877][ T4910] FAT-fs (loop2): Directory bread(block 64) failed [ 73.526392][ T4910] FAT-fs (loop2): Directory bread(block 65) failed [ 73.532212][ T4910] FAT-fs (loop2): Directory bread(block 66) failed [ 73.539021][ T4910] FAT-fs (loop2): Directory bread(block 67) failed [ 73.545610][ T4910] FAT-fs (loop2): Directory bread(block 68) failed [ 73.556438][ T4910] FAT-fs (loop2): Directory bread(block 69) failed [ 73.557718][ T4910] FAT-fs (loop2): Directory bread(block 70) failed [ 73.569940][ T4910] FAT-fs (loop2): Directory bread(block 71) failed [ 73.571129][ T4910] FAT-fs (loop2): Directory bread(block 72) failed [ 73.579617][ T4910] FAT-fs (loop2): Directory bread(block 73) failed [ 73.716344][ T4739] usb 1-1: Using ep0 maxpacket: 8 [ 73.719874][ T4739] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 73.721204][ T4739] usb 1-1: config 179 has no interface number 0 [ 73.722188][ T4739] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 73.723857][ T4739] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 73.725814][ T4739] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 73.736671][ T4739] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 73.738612][ T4739] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 73.740947][ T4739] usb 1-1: config 179 interface 65 has no altsetting 0 [ 73.742219][ T4739] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 73.743745][ T4739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.312452][ T4739] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input2 [ 74.419020][ T4938] device syzkaller0 entered promiscuous mode [ 74.519574][ T4739] usb 1-1: USB disconnect, device number 2 [ 74.520672][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 74.522220][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 74.524318][ T4739] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 75.174257][ T5035] 9pnet_virtio: no channels available for device syz [ 75.306550][ T5036] 9pnet_virtio: no channels available for device syz [ 77.497414][ T5040] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 79.995065][ T5073] Bluetooth: MGMT ver 1.22 [ 80.216341][ T5078] siw: device registration error -23 [ 81.416417][ T5079] siw: device registration error -23 [ 81.932837][ T5084] 9pnet_virtio: no channels available for device syz [ 81.961347][ T5084] siw: device registration error -23 [ 82.001577][ T5084] 9pnet_virtio: no channels available for device syz [ 82.827017][ T5086] loop2: detected capacity change from 0 to 128 [ 82.839392][ T5086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.854917][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 89.552919][ T4328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.554965][ T4328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.556610][ T4328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.558186][ T4328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.559553][ T4328] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.562521][ T4336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.563490][ T4328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.564263][ T4336] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.566944][ T4336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.568428][ T4336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.570252][ T4336] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.571480][ T4336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.571617][ T4333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.573495][ T4333] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.575113][ T4333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.577022][ T4333] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.578782][ T4333] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.579968][ T4333] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.447262][ T5035] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 91.458479][ T5098] lo speed is unknown, defaulting to 1000 [ 91.544892][ T5104] lo speed is unknown, defaulting to 1000 [ 91.606372][ T4333] Bluetooth: hci6: command 0x0409 tx timeout [ 91.606385][ T4336] Bluetooth: hci5: command 0x0409 tx timeout [ 91.667019][ T5107] lo speed is unknown, defaulting to 1000 [ 91.731188][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 91.779692][ T5139] loop0: detected capacity change from 0 to 128 [ 91.787768][ T5139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.801347][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 91.828548][ T5115] lo speed is unknown, defaulting to 1000 [ 91.973316][ T5145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 92.236984][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.238234][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.239856][ T5104] device bridge_slave_0 entered promiscuous mode [ 92.290938][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.297973][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.299199][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.300814][ T5104] device bridge_slave_1 entered promiscuous mode [ 92.318817][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.325589][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.387488][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.392390][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 92.399712][ T5104] team0: Port device team_slave_0 added [ 92.408132][ T5104] team0: Port device team_slave_1 added [ 92.422224][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.423460][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.428026][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.439637][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.440781][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.445303][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.478729][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.489611][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.490966][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.492463][ T5107] device bridge_slave_0 entered promiscuous mode [ 92.546599][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.547829][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.549568][ T5107] device bridge_slave_1 entered promiscuous mode [ 92.587927][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.638173][ T5104] device hsr_slave_0 entered promiscuous mode [ 92.646614][ T4333] Bluetooth: hci7: command 0x0409 tx timeout [ 92.676614][ T5104] device hsr_slave_1 entered promiscuous mode [ 92.736353][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.737579][ T5104] Cannot create hsr debugfs directory [ 92.739764][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.742961][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 92.750110][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.764695][ T5107] team0: Port device team_slave_0 added [ 92.767063][ T5107] team0: Port device team_slave_1 added [ 92.780053][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.781207][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.785313][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.812539][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.813777][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.818741][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.867661][ T5107] device hsr_slave_0 entered promiscuous mode [ 92.885770][ T5171] loop2: detected capacity change from 0 to 128 [ 92.898791][ T5171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.906977][ T5107] device hsr_slave_1 entered promiscuous mode [ 92.915783][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 92.926543][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.927854][ T5107] Cannot create hsr debugfs directory [ 92.953487][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.954787][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.956480][ T5115] device bridge_slave_0 entered promiscuous mode [ 92.970120][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.971420][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.972933][ T5115] device bridge_slave_1 entered promiscuous mode [ 93.007542][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.038017][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.040256][ T5104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.233572][ T5104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.308073][ T5104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.420068][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 93.426020][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 93.706678][ T4333] Bluetooth: hci5: command 0x041b tx timeout [ 93.706704][ T4328] Bluetooth: hci6: command 0x041b tx timeout [ 94.255191][ T5193] slcan: can't register candev [ 94.400615][ T5115] team0: Port device team_slave_0 added [ 94.454295][ T5104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.459927][ T4328] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 94.504017][ T5115] team0: Port device team_slave_1 added [ 94.726379][ T4328] Bluetooth: hci7: command 0x041b tx timeout [ 94.893930][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.895134][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.903782][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.972178][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.973609][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.979709][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.093522][ T5107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.159362][ T5107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.187892][ T5107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.273576][ T5107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.347722][ T5115] device hsr_slave_0 entered promiscuous mode [ 95.380257][ T5115] device hsr_slave_1 entered promiscuous mode [ 95.434624][ T5281] loop0: detected capacity change from 0 to 128 [ 95.444520][ T5281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.457256][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.458480][ T5115] Cannot create hsr debugfs directory [ 95.470822][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 95.819228][ T4333] Bluetooth: hci6: command 0x040f tx timeout [ 95.820211][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 95.873602][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.886388][ T4371] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.002004][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.004081][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.012754][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.035384][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.037818][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.039308][ T4867] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.040504][ T4867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.041937][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.043567][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.045076][ T4867] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.046144][ T4867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.047837][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.050434][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.057454][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.066429][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 96.069561][ T4371] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 96.070970][ T4371] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.072658][ T4371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.074310][ T4371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.075973][ T4371] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.081906][ T4371] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.083440][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.294150][ T4371] usb 1-1: usb_control_msg returned -32 [ 96.295147][ T4371] usbtmc 1-1:16.0: can't read capabilities [ 96.358898][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.371193][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.373393][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.375308][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.377926][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.383617][ T5104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.385263][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.404540][ T5115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 96.428194][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.432298][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.433902][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.435580][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.446839][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.450586][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.455202][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.460821][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.466777][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.468352][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.474374][ T5012] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.475492][ T5012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.483468][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.485443][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.488988][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.490163][ T5012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.550492][ T5115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 96.588540][ T5115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 96.627517][ T5107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.630154][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.633004][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.634529][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.635890][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.641381][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.643209][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.648145][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.660965][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.662707][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.664466][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.666806][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.669308][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.673013][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.806412][ T4328] Bluetooth: hci7: command 0x040f tx timeout [ 96.979136][ T5115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 97.026049][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.028304][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.029854][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.031672][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.033216][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.089712][ T55] device hsr_slave_0 left promiscuous mode [ 97.127174][ T55] device hsr_slave_1 left promiscuous mode [ 97.188112][ T5338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.189503][ T5338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.207675][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.208981][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.210802][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.211939][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.213465][ T55] device bridge_slave_1 left promiscuous mode [ 97.215151][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.267064][ T55] device bridge_slave_0 left promiscuous mode [ 97.268185][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.387189][ T55] device veth1_macvtap left promiscuous mode [ 97.388328][ T55] device veth0_macvtap left promiscuous mode [ 97.389398][ T55] device veth1_vlan left promiscuous mode [ 97.390446][ T55] device veth0_vlan left promiscuous mode [ 97.714538][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'. [ 97.846346][ T4328] Bluetooth: hci5: command 0x0419 tx timeout [ 97.847294][ T4328] Bluetooth: hci6: command 0x0419 tx timeout [ 98.521121][ T4372] usb 1-1: USB disconnect, device number 3 [ 98.555923][ T5346] loop0: detected capacity change from 0 to 128 [ 98.595484][ T5346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.614494][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 98.886407][ T4333] Bluetooth: hci7: command 0x0419 tx timeout [ 99.983693][ T55] team0 (unregistering): Port device team_slave_1 removed [ 100.262316][ T55] team0 (unregistering): Port device team_slave_0 removed [ 100.831306][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.106816][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.628509][ T55] bond0 (unregistering): Released all slaves [ 102.934208][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.944778][ T22] lo speed is unknown, defaulting to 1000 [ 103.004470][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.013988][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.015705][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.024602][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.028785][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.034295][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.035443][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.042051][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.102731][ T5380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 103.110630][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.112393][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.113920][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.115125][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.127986][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.131795][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.135432][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.137917][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.139449][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.146631][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.148559][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.169952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.171923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.196910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.198331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.203572][ T5387] loop0: detected capacity change from 0 to 128 [ 103.211417][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.214273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.215864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.229181][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.254072][ T5387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.341916][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 103.589576][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.591221][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.612637][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.614320][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.616046][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.638561][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.651531][ T5104] device veth0_vlan entered promiscuous mode [ 103.661436][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.662792][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.664338][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.666208][ T5104] device veth1_vlan entered promiscuous mode [ 103.754325][ T5104] device veth0_macvtap entered promiscuous mode [ 103.756689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.758254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.759681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.761184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.764378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.783832][ T5104] device veth1_macvtap entered promiscuous mode [ 103.820039][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.821663][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.832891][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.834624][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.836219][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.845242][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.848857][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.185189][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.186750][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.189138][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.200367][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.208400][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.216797][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.218462][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.226318][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.227921][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.230377][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.233817][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.236010][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.242461][ T5104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.243914][ T5104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.245315][ T5104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.261229][ T5104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.342230][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.344293][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.358485][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.359883][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.369182][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.392471][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.394756][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.398441][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.400085][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.404707][ T5107] device veth0_vlan entered promiscuous mode [ 104.434182][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.436065][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.441896][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.443215][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.444633][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.452154][ T5107] device veth1_vlan entered promiscuous mode [ 104.457188][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.458779][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.460299][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.461885][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.463279][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.478099][ T5115] device veth0_vlan entered promiscuous mode [ 104.513205][ T5115] device veth1_vlan entered promiscuous mode [ 105.641715][ T5107] device veth0_macvtap entered promiscuous mode [ 105.644213][ T5107] device veth1_macvtap entered promiscuous mode [ 105.664903][ T5115] device veth0_macvtap entered promiscuous mode [ 105.671908][ T5115] device veth1_macvtap entered promiscuous mode [ 105.678308][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.680003][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.681870][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.725988][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.734559][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.736129][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.750419][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.751967][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.785611][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.809379][ T5446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 105.810944][ T5446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 105.933031][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.970206][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.971882][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.994266][ T5468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 106.024847][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.027183][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.033600][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.035201][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.042034][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.043663][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.047365][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.051850][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.130003][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.162084][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.163846][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.165433][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.169960][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.171591][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.173315][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.174889][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.194702][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.197310][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.201286][ T5488] loop2: detected capacity change from 0 to 128 [ 106.202803][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.204338][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.209816][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.211776][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.249787][ T5488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.288449][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.301132][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.303035][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.304676][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.314528][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.316320][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.318214][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.319747][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.321404][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.323131][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.324865][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.338001][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.340037][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 106.346442][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.348140][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.367401][ T5115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.368792][ T5115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.370167][ T5115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.371600][ T5115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.438344][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.441933][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.443648][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.445543][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.450735][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.452252][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.453984][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.466046][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.468580][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.470184][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.471967][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.487136][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.501548][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.503385][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.528725][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.535191][ T5107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.546418][ T5107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.547853][ T5107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.576447][ T5107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.744604][ T5014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.745971][ T5014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.750888][ T5012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.771055][ T5012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.774716][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.783421][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.376296][ T5511] Zero length message leads to an empty skb [ 109.104578][ T5529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 109.138542][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.144815][ T4993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.147176][ T4993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.150526][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.163791][ T5534] loop7: detected capacity change from 0 to 128 [ 109.174282][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.175874][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.177955][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.205263][ T5534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 109.228195][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.312545][ T5115] EXT4-fs (loop7): unmounting filesystem. [ 109.322410][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.336061][ T5540] tipc: Started in network mode [ 109.337319][ T5540] tipc: Node identity b26da5846bc9, cluster identity 4711 [ 109.338539][ T5540] tipc: Enabled bearer , priority 0 [ 109.343440][ T5540] device syzkaller0 entered promiscuous mode [ 109.487863][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.494422][ T5540] tipc: Resetting bearer [ 109.513311][ T5539] tipc: Resetting bearer [ 111.888240][ T5539] tipc: Disabling bearer [ 111.902570][ T1513] tipc: Node number set to 3651446148 [ 111.986880][ T5569] device syzkaller0 entered promiscuous mode [ 112.058792][ T5583] netlink: 16 bytes leftover after parsing attributes in process `syz.7.263'. [ 112.122208][ T5589] loop7: detected capacity change from 0 to 128 [ 112.153909][ T5589] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 112.234881][ T5115] EXT4-fs (loop7): unmounting filesystem. [ 114.347175][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.276'. [ 114.569405][ T27] audit: type=1326 audit(114.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.576001][ T27] audit: type=1326 audit(114.550:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.582270][ T27] audit: type=1326 audit(114.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.588075][ T5639] syz.7.277 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.590281][ T27] audit: type=1326 audit(114.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=103 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.593624][ T27] audit: type=1326 audit(114.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.626188][ T27] audit: type=1326 audit(114.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.629716][ T27] audit: type=1326 audit(114.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.633181][ T27] audit: type=1326 audit(114.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.646419][ T27] audit: type=1326 audit(114.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 114.649950][ T27] audit: type=1326 audit(114.580:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5629 comm="syz.7.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1577128 code=0x7ffc0000 [ 115.916089][ T5650] process 'syz.6.282' launched './file0' with NULL argv: empty string added [ 118.589816][ T5670] netlink: 16 bytes leftover after parsing attributes in process `syz.7.288'. [ 124.965994][ T4328] Bluetooth: hci1: Malformed Event: 0x2f [ 125.026177][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.030866][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.040199][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.041775][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.043795][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 125.045074][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.726967][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.728958][ T2061] ieee802154 phy1 wpan1: encryption failed: -22  @   @ /dev/fusefd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)̆@s[ 127.032821][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.623996][ T4336] Bluetooth: hci0: command 0x0409 tx timeout ./file0/file0[ 127.711707][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.7.298'. [ 127.732919][ T5724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.299'. [ 127.760484][ C1] vkms_vblank_simulate: vblank timer overrun ./file0fuseh&s [ 127.902429][ T5690] chnl_net:caif_netlink_parms(): no params data found .file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3%[ 127.921069][ T55] tipc: Disabling bearer [ 127.946703][ T55] tipc: Left network mode [ 128.019584][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.300'. FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-[ 129.883749][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 130.489825][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.491606][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.494723][ T5690] device bridge_slave_0 entered promiscuous mode [ 130.515818][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.517968][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.521610][ T5690] device bridge_slave_1 entered promiscuous mode [ 130.606820][ T5690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.609442][ T5690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.641932][ T5690] team0: Port device team_slave_0 added [ 130.644975][ T5690] team0: Port device team_slave_1 added [ 130.655769][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.658366][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.662517][ T5690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.669044][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.670123][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.674079][ T5690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.927000][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 132.720160][ T5799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'. [ 132.978517][ T5690] device hsr_slave_0 entered promiscuous mode [ 133.016884][ T5690] device hsr_slave_1 entered promiscuous mode [ 133.057087][ T5690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.062210][ T5690] Cannot create hsr debugfs directory [ 133.675405][ T5816] ceph: No mds server is up or the cluster is laggy [ 133.690826][ T3897] libceph: connect (1)[c::]:6789 error -101 [ 133.696137][ T3897] libceph: mon0 (1)[c::]:6789 connect error [ 133.736899][ T5690] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 133.976512][ T5690] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 134.017867][ T5690] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 134.039679][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 134.639201][ T5690] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 135.138088][ T5690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.158232][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.159752][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.270189][ T5690] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.276742][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.278350][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.279749][ T5014] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.280848][ T5014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.282322][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.283950][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.285430][ T5014] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.286712][ T5014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.307109][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.311737][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.323380][ T5690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.325072][ T5690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.423695][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c06c8486: rx timeout, send abort [ 135.440254][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.442137][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.444496][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.448074][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.452224][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.454111][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.455714][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.485988][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.489839][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.491346][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.493250][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.699257][ T5878] binder: 5866:5878 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 135.743958][ T5878] binder: 5866:5878 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 135.745978][ T5878] binder: 5878 RLIMIT_NICE not set [ 135.809938][ T5879] binder: 5866:5879 got transaction to invalid handle, 3 [ 135.811118][ T5879] binder: 5879:5866 cannot find target node [ 135.812048][ T5879] binder: 5866:5879 transaction call to 0:0 failed 10/29201/-22, size 0-0 line 3045 [ 135.923863][ C1] vcan0: j1939_tp_rxtimer: 0x0000000055e2dd4c: rx timeout, send abort [ 135.925706][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c06c8486: abort rx timeout. Force session deactivation [ 136.462779][ C1] vcan0: j1939_tp_rxtimer: 0x0000000082f01b4d: rx timeout, send abort [ 136.464289][ C1] vcan0: j1939_tp_rxtimer: 0x0000000055e2dd4c: abort rx timeout. Force session deactivation [ 136.465933][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000082f01b4d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 136.692312][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.783731][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.327'. [ 138.665823][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.667632][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.856378][ T5690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.860012][ T5943] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 139.599225][ T5988] device syzkaller1 entered promiscuous mode [ 139.648289][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.650054][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.704458][ T55] device hsr_slave_0 left promiscuous mode [ 139.770803][ T55] device hsr_slave_1 left promiscuous mode [ 139.890328][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.952052][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.969099][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.970603][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.976138][ T55] device bridge_slave_1 left promiscuous mode [ 140.231813][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.278725][ T55] device bridge_slave_0 left promiscuous mode [ 140.279881][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.319229][ T55] device hsr_slave_0 left promiscuous mode [ 140.346526][ T55] device hsr_slave_1 left promiscuous mode [ 140.436342][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.437645][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.439417][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.440777][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.442350][ T55] device bridge_slave_1 left promiscuous mode [ 140.444517][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.496948][ T55] device bridge_slave_0 left promiscuous mode [ 140.498092][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.701288][ T55] device veth1_macvtap left promiscuous mode [ 140.702355][ T55] device veth0_macvtap left promiscuous mode [ 140.703512][ T55] device veth1_vlan left promiscuous mode [ 140.704484][ T55] device veth0_vlan left promiscuous mode [ 140.917732][ T55] device veth1_macvtap left promiscuous mode [ 140.921959][ T55] device veth0_macvtap left promiscuous mode [ 140.923187][ T55] device veth1_vlan left promiscuous mode [ 140.924274][ T55] device veth0_vlan left promiscuous mode [ 141.654680][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.656584][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.761583][ T6036] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 144.071233][ T55] team0 (unregistering): Port device team_slave_1 removed [ 144.278629][ T55] team0 (unregistering): Port device team_slave_0 removed [ 144.436893][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.667945][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.118530][ T55] bond0 (unregistering): Released all slaves [ 148.508774][ T55] team0 (unregistering): Port device team_slave_1 removed [ 148.667585][ T55] team0 (unregistering): Port device team_slave_0 removed [ 148.847411][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.066864][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.668315][ T55] bond0 (unregistering): Released all slaves [ 150.971139][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.972948][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.987284][ T6041] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 150.988901][ T6041] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.037196][ T5690] device veth0_vlan entered promiscuous mode [ 151.044187][ T5690] device veth1_vlan entered promiscuous mode [ 151.049959][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.051549][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.053011][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.072902][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.080403][ T5690] device veth0_macvtap entered promiscuous mode [ 151.082707][ T5690] device veth1_macvtap entered promiscuous mode [ 151.086672][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.088281][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.089831][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.091349][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.118797][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.120460][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.122102][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.123913][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.125445][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.132548][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.134047][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.135660][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.170124][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.172758][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.174281][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.175869][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.177855][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.179371][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.181182][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.182808][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.184496][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.187816][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.579965][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.581802][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.583400][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.584933][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.604069][ T5690] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.605472][ T5690] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.610949][ T5690] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.612295][ T5690] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.616737][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 151.739070][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.740464][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.741777][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.758336][ T4598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.759726][ T4598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.761584][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.013964][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 156.413361][ T6167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.379'. [ 156.417963][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.419476][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.558816][ T6169] only policy match revision 0 supported [ 156.558832][ T6169] unable to load match [ 158.178736][ T6196] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3 [ 158.717427][ T6187] device syzkaller0 entered promiscuous mode [ 158.763627][ T6191] tipc: Started in network mode [ 158.764438][ T6191] tipc: Node identity 969bd3ea0eb3, cluster identity 4711 [ 158.777745][ T6191] tipc: Enabled bearer , priority 0 [ 158.796379][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 158.797436][ T4328] Bluetooth: hci1: command 0x0406 tx timeout [ 158.882153][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 158.971560][ T6206] tipc: Resetting bearer [ 159.141987][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 159.153966][ T6186] tipc: Resetting bearer [ 159.328452][ T6186] tipc: Disabling bearer [ 163.180692][ T55] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.199328][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.8.406'. [ 163.300384][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.7.405'. [ 163.397814][ T55] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.572968][ T55] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.314092][ T6297] ceph: No mds server is up or the cluster is laggy [ 164.317004][ T4370] libceph: connect (1)[c::]:6789 error -101 [ 164.317936][ T4370] libceph: mon0 (1)[c::]:6789 connect error [ 164.348743][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.354427][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.355727][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.583763][ T24] libceph: connect (1)[c::]:6789 error -101 [ 164.584783][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 164.625162][ T6319] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 164.738500][ T55] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.746057][ T6319] random: crng reseeded on system resumption [ 166.009321][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.418'. [ 167.006762][ T6356] Bluetooth: MGMT ver 1.22 [ 167.019860][ T6356] Bluetooth: hci0: service_discovery: too big uuid_count value 29743 [ 168.389777][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 168.487802][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.7.433'. [ 168.505987][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.7.433'. [ 168.521682][ T6375] device syzkaller0 entered promiscuous mode [ 168.531723][ T6375] 0: reclassify loop, rule prio 0, protocol 800 [ 168.969107][ T6390] tipc: Can't bind to reserved service type 2 [ 172.380602][ T6437] loop7: detected capacity change from 0 to 256 [ 172.492650][ T6437] FAT-fs (loop7): Directory bread(block 64) failed [ 172.493770][ T6437] FAT-fs (loop7): Directory bread(block 65) failed [ 172.494853][ T6437] FAT-fs (loop7): Directory bread(block 66) failed [ 172.495944][ T6437] FAT-fs (loop7): Directory bread(block 67) failed [ 172.506611][ T6437] FAT-fs (loop7): Directory bread(block 68) failed [ 172.507849][ T6437] FAT-fs (loop7): Directory bread(block 69) failed [ 172.508899][ T6437] FAT-fs (loop7): Directory bread(block 70) failed [ 172.510293][ T6437] FAT-fs (loop7): Directory bread(block 71) failed [ 172.518034][ T6437] FAT-fs (loop7): Directory bread(block 72) failed [ 172.519068][ T6437] FAT-fs (loop7): Directory bread(block 73) failed [ 174.869270][ T6481] device syzkaller0 entered promiscuous mode [ 176.091805][ T6511] loop0: detected capacity change from 0 to 256 [ 176.152859][ T6511] FAT-fs (loop0): Directory bread(block 64) failed [ 176.153924][ T6511] FAT-fs (loop0): Directory bread(block 65) failed [ 176.167650][ T6511] FAT-fs (loop0): Directory bread(block 66) failed [ 176.172655][ T6511] FAT-fs (loop0): Directory bread(block 67) failed [ 176.183130][ T6511] FAT-fs (loop0): Directory bread(block 68) failed [ 176.191763][ T6511] FAT-fs (loop0): Directory bread(block 69) failed [ 176.195762][ T6511] FAT-fs (loop0): Directory bread(block 70) failed [ 176.205051][ T6511] FAT-fs (loop0): Directory bread(block 71) failed [ 176.213583][ T6511] FAT-fs (loop0): Directory bread(block 72) failed [ 176.229405][ T6511] FAT-fs (loop0): Directory bread(block 73) failed [ 176.299478][ T4336] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 176.774261][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.775730][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.386503][ T6566] loop0: detected capacity change from 0 to 256 [ 177.399570][ T6566] FAT-fs (loop0): Directory bread(block 64) failed [ 177.400802][ T6566] FAT-fs (loop0): Directory bread(block 65) failed [ 177.568256][ T6568] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4 [ 178.448404][ T6566] FAT-fs (loop0): Directory bread(block 66) failed [ 178.449529][ T6566] FAT-fs (loop0): Directory bread(block 67) failed [ 178.450647][ T6566] FAT-fs (loop0): Directory bread(block 68) failed [ 178.451620][ T6566] FAT-fs (loop0): Directory bread(block 69) failed [ 178.452619][ T6566] FAT-fs (loop0): Directory bread(block 70) failed [ 178.453716][ T6566] FAT-fs (loop0): Directory bread(block 71) failed [ 178.454915][ T6566] FAT-fs (loop0): Directory bread(block 72) failed [ 178.456034][ T6566] FAT-fs (loop0): Directory bread(block 73) failed [ 179.507152][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.477'. [ 180.276119][ T55] device hsr_slave_0 left promiscuous mode [ 180.356207][ T55] device hsr_slave_1 left promiscuous mode [ 180.406591][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.408000][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.236827][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.238107][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.239948][ T55] device bridge_slave_1 left promiscuous mode [ 181.241113][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.271108][ T55] device bridge_slave_0 left promiscuous mode [ 181.272195][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.467436][ T6622] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 181.589984][ T55] device veth1_macvtap left promiscuous mode [ 181.591039][ T55] device veth0_macvtap left promiscuous mode [ 181.592169][ T55] device veth1_vlan left promiscuous mode [ 181.593140][ T55] device veth0_vlan left promiscuous mode [ 181.853173][ T6629] random: crng reseeded on system resumption [ 184.611128][ T55] team0 (unregistering): Port device team_slave_1 removed [ 184.788351][ T55] team0 (unregistering): Port device team_slave_0 removed [ 184.957652][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.208993][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.527392][ T4336] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 185.528934][ T4336] Bluetooth: hci7: Injecting HCI hardware error event [ 185.531091][ T4328] Bluetooth: hci7: hardware error 0x00 [ 186.750523][ T55] bond0 (unregistering): Released all slaves [ 187.085411][ T6647] loop8: detected capacity change from 0 to 256 [ 187.119163][ T6647] FAT-fs (loop8): Directory bread(block 64) failed [ 187.120269][ T6647] FAT-fs (loop8): Directory bread(block 65) failed [ 187.121317][ T6647] FAT-fs (loop8): Directory bread(block 66) failed [ 187.122500][ T6647] FAT-fs (loop8): Directory bread(block 67) failed [ 187.123586][ T6647] FAT-fs (loop8): Directory bread(block 68) failed [ 187.124637][ T6647] FAT-fs (loop8): Directory bread(block 69) failed [ 187.125775][ T6647] FAT-fs (loop8): Directory bread(block 70) failed [ 187.135528][ T6647] FAT-fs (loop8): Directory bread(block 71) failed [ 187.136975][ T6647] FAT-fs (loop8): Directory bread(block 72) failed [ 187.137972][ T6647] FAT-fs (loop8): Directory bread(block 73) failed [ 187.582377][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.582465][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.786646][ T4328] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 188.804035][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.824910][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.432855][ T6703] loop8: detected capacity change from 0 to 256 [ 189.478090][ T6703] FAT-fs (loop8): Directory bread(block 64) failed [ 189.483140][ T6703] FAT-fs (loop8): Directory bread(block 65) failed [ 189.492480][ T6703] FAT-fs (loop8): Directory bread(block 66) failed [ 189.497160][ T6703] FAT-fs (loop8): Directory bread(block 67) failed [ 189.503947][ T6703] FAT-fs (loop8): Directory bread(block 68) failed [ 189.510470][ T6703] FAT-fs (loop8): Directory bread(block 69) failed [ 189.514878][ T6703] FAT-fs (loop8): Directory bread(block 70) failed [ 189.521746][ T6703] FAT-fs (loop8): Directory bread(block 71) failed [ 189.530603][ T6703] FAT-fs (loop8): Directory bread(block 72) failed [ 189.534427][ T6703] FAT-fs (loop8): Directory bread(block 73) failed [ 190.635370][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.662593][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.950818][ T6738] netlink: 212412 bytes leftover after parsing attributes in process `syz.6.522'. [ 190.977226][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'. [ 191.082526][ T6754] loop0: detected capacity change from 0 to 256 [ 191.098683][ T6754] FAT-fs (loop0): Directory bread(block 64) failed [ 191.099940][ T6754] FAT-fs (loop0): Directory bread(block 65) failed [ 191.101083][ T6754] FAT-fs (loop0): Directory bread(block 66) failed [ 191.109175][ T6752] netlink: 'syz.7.525': attribute type 25 has an invalid length. [ 191.111641][ T6754] FAT-fs (loop0): Directory bread(block 67) failed [ 191.112733][ T6754] FAT-fs (loop0): Directory bread(block 68) failed [ 191.113797][ T6754] FAT-fs (loop0): Directory bread(block 69) failed [ 191.118984][ T6754] FAT-fs (loop0): Directory bread(block 70) failed [ 191.119990][ T6754] FAT-fs (loop0): Directory bread(block 71) failed [ 191.121026][ T6754] FAT-fs (loop0): Directory bread(block 72) failed [ 191.126465][ T6754] FAT-fs (loop0): Directory bread(block 73) failed [ 191.161886][ T6762] netlink: 'syz.6.529': attribute type 2 has an invalid length. [ 191.163174][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.529'. [ 191.261067][ T6769] netlink: 'syz.7.530': attribute type 29 has an invalid length. [ 191.262319][ T6769] netlink: 'syz.7.530': attribute type 29 has an invalid length. [ 191.263775][ T6764] netlink: 'syz.7.530': attribute type 29 has an invalid length. [ 192.457680][ T6803] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 192.458962][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 192.477072][ T6803] bridge0: port 3(dummy0) entered blocking state [ 192.484283][ T6803] bridge0: port 3(dummy0) entered disabled state [ 192.517438][ T6803] device dummy0 entered promiscuous mode [ 192.519062][ T6803] bridge0: port 3(dummy0) entered blocking state [ 192.520119][ T6803] bridge0: port 3(dummy0) entered forwarding state [ 192.663846][ T6827] loop8: detected capacity change from 0 to 256 [ 192.674101][ T6827] FAT-fs (loop8): Directory bread(block 64) failed [ 192.726870][ T6827] FAT-fs (loop8): Directory bread(block 65) failed [ 192.728046][ T6827] FAT-fs (loop8): Directory bread(block 66) failed [ 192.729190][ T6827] FAT-fs (loop8): Directory bread(block 67) failed [ 192.749754][ T6827] FAT-fs (loop8): Directory bread(block 68) failed [ 192.750945][ T6827] FAT-fs (loop8): Directory bread(block 69) failed [ 192.754435][ T6827] FAT-fs (loop8): Directory bread(block 70) failed [ 192.757306][ T6827] FAT-fs (loop8): Directory bread(block 71) failed [ 192.758340][ T6827] FAT-fs (loop8): Directory bread(block 72) failed [ 192.759401][ T6827] FAT-fs (loop8): Directory bread(block 73) failed [ 195.116123][ T6884] loop7: detected capacity change from 0 to 256 [ 195.131960][ T6884] FAT-fs (loop7): Directory bread(block 64) failed [ 195.133301][ T6884] FAT-fs (loop7): Directory bread(block 65) failed [ 195.134529][ T6884] FAT-fs (loop7): Directory bread(block 66) failed [ 195.135676][ T6884] FAT-fs (loop7): Directory bread(block 67) failed [ 195.141703][ T6884] FAT-fs (loop7): Directory bread(block 68) failed [ 195.143079][ T6884] FAT-fs (loop7): Directory bread(block 69) failed [ 195.144364][ T6884] FAT-fs (loop7): Directory bread(block 70) failed [ 195.145569][ T6884] FAT-fs (loop7): Directory bread(block 71) failed [ 195.147304][ T6884] FAT-fs (loop7): Directory bread(block 72) failed [ 195.148527][ T6884] FAT-fs (loop7): Directory bread(block 73) failed [ 206.788149][ T6876] device dummy0 left promiscuous mode [ 206.789223][ T6876] bridge0: port 3(dummy0) entered disabled state [ 206.837174][ T6876] device bridge_slave_1 left promiscuous mode [ 206.838259][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.860170][ T6876] device bridge_slave_0 left promiscuous mode [ 206.861251][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.957006][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.8.571'. [ 207.040498][ T6916] loop8: detected capacity change from 0 to 256 [ 207.054082][ T6916] FAT-fs (loop8): Directory bread(block 64) failed [ 207.055186][ T6916] FAT-fs (loop8): Directory bread(block 65) failed [ 207.056710][ T6916] FAT-fs (loop8): Directory bread(block 66) failed [ 207.057776][ T6916] FAT-fs (loop8): Directory bread(block 67) failed [ 207.058883][ T6916] FAT-fs (loop8): Directory bread(block 68) failed [ 207.059959][ T6916] FAT-fs (loop8): Directory bread(block 69) failed [ 207.061185][ T6916] FAT-fs (loop8): Directory bread(block 70) failed [ 207.062189][ T6916] FAT-fs (loop8): Directory bread(block 71) failed [ 207.063267][ T6916] FAT-fs (loop8): Directory bread(block 72) failed [ 207.064330][ T6916] FAT-fs (loop8): Directory bread(block 73) failed [ 207.255479][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.577'. [ 207.366966][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.582'. [ 208.683077][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.598'. [ 208.750903][ T7007] loop0: detected capacity change from 0 to 256 [ 208.783928][ T7007] FAT-fs (loop0): Directory bread(block 64) failed [ 208.785017][ T7007] FAT-fs (loop0): Directory bread(block 65) failed [ 208.786121][ T7007] FAT-fs (loop0): Directory bread(block 66) failed [ 208.793981][ T7007] FAT-fs (loop0): Directory bread(block 67) failed [ 208.795130][ T7007] FAT-fs (loop0): Directory bread(block 68) failed [ 208.796109][ T7007] FAT-fs (loop0): Directory bread(block 69) failed [ 208.797185][ T7007] FAT-fs (loop0): Directory bread(block 70) failed [ 208.798224][ T7007] FAT-fs (loop0): Directory bread(block 71) failed [ 208.799301][ T7007] FAT-fs (loop0): Directory bread(block 72) failed [ 208.800350][ T7007] FAT-fs (loop0): Directory bread(block 73) failed [ 208.830249][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.604'. [ 208.832842][ T7015] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 208.934579][ T7012] device bond1 entered promiscuous mode [ 208.948805][ T7012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.051680][ T7012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.061787][ T7012] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 209.073501][ T7012] bond1: (slave sit1): Error -95 calling set_mac_address [ 209.098707][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.6.612'. [ 209.125873][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.7.615'. [ 209.176722][ T7054] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 209.363484][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.625'. [ 209.372020][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.625'. [ 209.404899][ T7079] bond0: option min_links: invalid value (18446744071562133520) [ 209.406464][ T7079] bond0: option min_links: allowed values 0 - 2147483647 [ 209.487182][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.6.628'. [ 209.503560][ T7103] device bond2 entered promiscuous mode [ 209.504654][ T7103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.530953][ T7107] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 209.631112][ T7103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.639003][ T7103] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 210.388329][ T7103] bond2: (slave sit1): Error -95 calling set_mac_address [ 210.812528][ T7151] loop7: detected capacity change from 0 to 256 [ 210.861151][ T7151] FAT-fs (loop7): Directory bread(block 64) failed [ 210.862300][ T7151] FAT-fs (loop7): Directory bread(block 65) failed [ 210.863412][ T7151] FAT-fs (loop7): Directory bread(block 66) failed [ 210.864481][ T7151] FAT-fs (loop7): Directory bread(block 67) failed [ 210.865562][ T7151] FAT-fs (loop7): Directory bread(block 68) failed [ 210.906066][ T7151] FAT-fs (loop7): Directory bread(block 69) failed [ 210.907297][ T7151] FAT-fs (loop7): Directory bread(block 70) failed [ 210.908287][ T7151] FAT-fs (loop7): Directory bread(block 71) failed [ 210.909345][ T7151] FAT-fs (loop7): Directory bread(block 72) failed [ 210.910403][ T7151] FAT-fs (loop7): Directory bread(block 73) failed [ 211.044095][ T7169] device bond3 entered promiscuous mode [ 211.046818][ T7169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.209399][ T7169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.219072][ T7169] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 211.974973][ T7169] bond3: (slave sit1): Error -95 calling set_mac_address [ 212.034319][ T7188] RDS: rds_bind could not find a transport for fe80::3d, load rds_tcp or rds_rdma? [ 212.060951][ T7184] __nla_validate_parse: 3 callbacks suppressed [ 212.060968][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 212.139008][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.8.659'. [ 212.257702][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.8.661'. [ 212.268722][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.8.661'. [ 212.411385][ T7220] loop0: detected capacity change from 0 to 256 [ 212.441163][ T7220] FAT-fs (loop0): Directory bread(block 64) failed [ 212.447485][ T7220] FAT-fs (loop0): Directory bread(block 65) failed [ 212.448618][ T7220] FAT-fs (loop0): Directory bread(block 66) failed [ 212.449711][ T7220] FAT-fs (loop0): Directory bread(block 67) failed [ 212.450797][ T7220] FAT-fs (loop0): Directory bread(block 68) failed [ 212.451906][ T7220] FAT-fs (loop0): Directory bread(block 69) failed [ 212.452980][ T7220] FAT-fs (loop0): Directory bread(block 70) failed [ 212.454328][ T7220] FAT-fs (loop0): Directory bread(block 71) failed [ 212.455330][ T7220] FAT-fs (loop0): Directory bread(block 72) failed [ 212.484309][ T7220] FAT-fs (loop0): Directory bread(block 73) failed [ 212.703310][ T7238] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 212.820721][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.670'. [ 212.828086][ T7242] device bond1 entered promiscuous mode [ 212.829421][ T7242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.847497][ T7242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.849167][ T7242] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 212.851791][ T7242] bond1: (slave sit1): Error -95 calling set_mac_address [ 213.001223][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.6.671'. [ 213.312952][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 213.322594][ T7282] device bond1 entered promiscuous mode [ 213.327484][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.349488][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.350721][ T7282] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 213.352715][ T7282] bond1: (slave sit1): Error -95 calling set_mac_address [ 213.499464][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 213.505279][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'. [ 213.589543][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 213.683059][ T7319] loop6: detected capacity change from 0 to 256 [ 213.726164][ T7319] FAT-fs (loop6): Directory bread(block 64) failed [ 213.734793][ T7319] FAT-fs (loop6): Directory bread(block 65) failed [ 213.739551][ T7319] FAT-fs (loop6): Directory bread(block 66) failed [ 213.743684][ T7319] FAT-fs (loop6): Directory bread(block 67) failed [ 213.749982][ T7319] FAT-fs (loop6): Directory bread(block 68) failed [ 213.755567][ T7319] FAT-fs (loop6): Directory bread(block 69) failed [ 213.759042][ T7319] FAT-fs (loop6): Directory bread(block 70) failed [ 213.760206][ T7319] FAT-fs (loop6): Directory bread(block 71) failed [ 213.768779][ T7319] FAT-fs (loop6): Directory bread(block 72) failed [ 213.772279][ T7319] FAT-fs (loop6): Directory bread(block 73) failed [ 213.778512][ T7328] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 213.806191][ T7330] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 213.809925][ T7325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.811166][ T7325] IPv6: NLM_F_CREATE should be set when creating new route [ 214.165282][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.166653][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.688596][ T7325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.706012][ T7325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.005801][ T7325] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.007406][ T7325] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.008717][ T7325] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.010041][ T7325] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.047025][ T4336] Bluetooth: hci6: command 0x0406 tx timeout [ 215.628945][ T7384] loop7: detected capacity change from 0 to 256 [ 215.649913][ T7384] FAT-fs (loop7): Directory bread(block 64) failed [ 215.652216][ T7384] FAT-fs (loop7): Directory bread(block 65) failed [ 215.654513][ T7384] FAT-fs (loop7): Directory bread(block 66) failed [ 215.658951][ T7384] FAT-fs (loop7): Directory bread(block 67) failed [ 215.661150][ T7384] FAT-fs (loop7): Directory bread(block 68) failed [ 215.663416][ T7384] FAT-fs (loop7): Directory bread(block 69) failed [ 215.665760][ T7384] FAT-fs (loop7): Directory bread(block 70) failed [ 215.669662][ T7384] FAT-fs (loop7): Directory bread(block 71) failed [ 215.672129][ T7384] FAT-fs (loop7): Directory bread(block 72) failed [ 215.674693][ T7384] FAT-fs (loop7): Directory bread(block 73) failed [ 215.927404][ T7408] device bond1 entered promiscuous mode [ 215.928759][ T7408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.939924][ T7408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.941653][ T7408] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 215.943958][ T7408] bond1: (slave sit1): Error -95 calling set_mac_address [ 216.860699][ C0] vcan0: j1939_tp_rxtimer: 0x00000000213cc9f0: rx timeout, send abort [ 216.862119][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000213cc9f0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.192037][ T7461] loop7: detected capacity change from 0 to 256 [ 218.215899][ T7461] FAT-fs (loop7): Directory bread(block 64) failed [ 218.218227][ T7461] FAT-fs (loop7): Directory bread(block 65) failed [ 218.219260][ T7461] FAT-fs (loop7): Directory bread(block 66) failed [ 218.220367][ T7461] FAT-fs (loop7): Directory bread(block 67) failed [ 218.229184][ T7461] FAT-fs (loop7): Directory bread(block 68) failed [ 218.230317][ T7461] FAT-fs (loop7): Directory bread(block 69) failed [ 218.232823][ T7461] FAT-fs (loop7): Directory bread(block 70) failed [ 218.233858][ T7461] FAT-fs (loop7): Directory bread(block 71) failed [ 218.243398][ T7461] FAT-fs (loop7): Directory bread(block 72) failed [ 218.244602][ T7461] FAT-fs (loop7): Directory bread(block 73) failed [ 218.301684][ T7469] device syzkaller0 entered promiscuous mode [ 218.363484][ T3897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.443253][ T7477] __nla_validate_parse: 4 callbacks suppressed [ 218.443272][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 218.468899][ T7477] device bond2 entered promiscuous mode [ 218.469960][ T7477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.377559][ T7477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.382645][ T7477] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 219.388275][ T7477] bond2: (slave sit1): Error -95 calling set_mac_address [ 221.102143][ T7507] tipc: Started in network mode [ 221.105352][ T7507] tipc: Node identity ac14140f, cluster identity 4711 [ 221.167139][ T7507] tipc: New replicast peer: 255.255.255.255 [ 221.169292][ T7507] tipc: Enabled bearer , priority 10 [ 221.288097][ T7518] netlink: 20 bytes leftover after parsing attributes in process `syz.6.739'. [ 221.289518][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.739'. [ 221.384949][ T7525] loop0: detected capacity change from 0 to 256 [ 221.435278][ T7525] FAT-fs (loop0): Directory bread(block 64) failed [ 221.451624][ T7525] FAT-fs (loop0): Directory bread(block 65) failed [ 221.452719][ T7525] FAT-fs (loop0): Directory bread(block 66) failed [ 221.453732][ T7525] FAT-fs (loop0): Directory bread(block 67) failed [ 221.454943][ T7525] FAT-fs (loop0): Directory bread(block 68) failed [ 221.455969][ T7525] FAT-fs (loop0): Directory bread(block 69) failed [ 221.488323][ T7525] FAT-fs (loop0): Directory bread(block 70) failed [ 221.489502][ T7525] FAT-fs (loop0): Directory bread(block 71) failed [ 221.490651][ T7525] FAT-fs (loop0): Directory bread(block 72) failed [ 221.491769][ T7525] FAT-fs (loop0): Directory bread(block 73) failed [ 222.177770][ T4739] tipc: Node number set to 2886997007 [ 223.293469][ T7585] loop0: detected capacity change from 0 to 256 [ 223.311783][ T7585] FAT-fs (loop0): Directory bread(block 64) failed [ 223.312899][ T7585] FAT-fs (loop0): Directory bread(block 65) failed [ 223.319642][ T7585] FAT-fs (loop0): Directory bread(block 66) failed [ 223.320750][ T7585] FAT-fs (loop0): Directory bread(block 67) failed [ 223.321749][ T7585] FAT-fs (loop0): Directory bread(block 68) failed [ 223.322778][ T7585] FAT-fs (loop0): Directory bread(block 69) failed [ 223.323885][ T7585] FAT-fs (loop0): Directory bread(block 70) failed [ 223.324911][ T7585] FAT-fs (loop0): Directory bread(block 71) failed [ 223.325954][ T7585] FAT-fs (loop0): Directory bread(block 72) failed [ 223.354339][ T7591] device syzkaller0 entered promiscuous mode [ 223.363317][ T7585] FAT-fs (loop0): Directory bread(block 73) failed [ 223.375418][ T7591] 0: reclassify loop, rule prio 0, protocol 800 [ 225.307864][ T7626] [ 225.308337][ T7626] ====================================================== [ 225.309479][ T7626] WARNING: possible circular locking dependency detected [ 225.310650][ T7626] syzkaller #0 Not tainted [ 225.311372][ T7626] ------------------------------------------------------ [ 225.312585][ T7626] syz.0.764/7626 is trying to acquire lock: [ 225.313589][ T7626] ffff0000f3331458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 225.315548][ T7626] [ 225.315548][ T7626] but task is already holding lock: [ 225.316881][ T7626] ffff0000f3330130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 225.318440][ T7626] [ 225.318440][ T7626] which lock already depends on the new lock. [ 225.318440][ T7626] [ 225.320227][ T7626] [ 225.320227][ T7626] the existing dependency chain (in reverse order) is: [ 225.321756][ T7626] [ 225.321756][ T7626] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 225.323087][ T7626] lock_sock_nested+0x70/0x130 [ 225.323965][ T7626] smc_listen_out+0x114/0x3a4 [ 225.324773][ T7626] smc_listen_work+0x490/0xde0 [ 225.325722][ T7626] process_one_work+0x7f8/0x13a4 [ 225.326628][ T7626] worker_thread+0x8c4/0xfec [ 225.327511][ T7626] kthread+0x250/0x2d8 [ 225.328299][ T7626] ret_from_fork+0x10/0x20 [ 225.329112][ T7626] [ 225.329112][ T7626] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 225.330880][ T7626] __lock_acquire+0x2880/0x6800 [ 225.331800][ T7626] lock_acquire+0x20c/0x63c [ 225.332623][ T7626] __flush_work+0x10c/0x1ec [ 225.333497][ T7626] __cancel_work_timer+0x300/0x458 [ 225.334431][ T7626] cancel_work_sync+0x24/0x38 [ 225.335254][ T7626] smc_clcsock_release+0x64/0xe8 [ 225.336133][ T7626] __smc_release+0x568/0x6bc [ 225.336945][ T7626] smc_close_non_accepted+0xd8/0x254 [ 225.337928][ T7626] smc_close_active+0x9c4/0xd24 [ 225.338795][ T7626] __smc_release+0x48c/0x6bc [ 225.339611][ T7626] smc_release+0x258/0x50c [ 225.340413][ T7626] sock_close+0xb4/0x1f8 [ 225.341179][ T7626] __fput+0x1bc/0x7b8 [ 225.341907][ T7626] ____fput+0x20/0x30 [ 225.342637][ T7626] task_work_run+0x1ec/0x278 [ 225.343462][ T7626] do_notify_resume+0x1fa0/0x2aa4 [ 225.344471][ T7626] el0_svc+0x98/0x128 [ 225.345140][ T7626] el0t_64_sync_handler+0x84/0xf0 [ 225.345950][ T7626] el0t_64_sync+0x18c/0x190 [ 225.346717][ T7626] [ 225.346717][ T7626] other info that might help us debug this: [ 225.346717][ T7626] [ 225.348241][ T7626] Possible unsafe locking scenario: [ 225.348241][ T7626] [ 225.349355][ T7626] CPU0 CPU1 [ 225.350166][ T7626] ---- ---- [ 225.351037][ T7626] lock(sk_lock-AF_SMC/1); [ 225.351764][ T7626] lock((work_completion)(&new_smc->smc_listen_work)); [ 225.353246][ T7626] lock(sk_lock-AF_SMC/1); [ 225.354476][ T7626] lock((work_completion)(&new_smc->smc_listen_work)); [ 225.355531][ T7626] [ 225.355531][ T7626] *** DEADLOCK *** [ 225.355531][ T7626] [ 225.356757][ T7626] 2 locks held by syz.0.764/7626: [ 225.357563][ T7626] #0: ffff0000e312be10 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 225.359157][ T7626] #1: ffff0000f3330130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 225.360737][ T7626] [ 225.360737][ T7626] stack backtrace: [ 225.361613][ T7626] CPU: 1 PID: 7626 Comm: syz.0.764 Not tainted syzkaller #0 [ 225.362750][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 225.364319][ T7626] Call trace: [ 225.364825][ T7626] dump_backtrace+0x1c0/0x1ec [ 225.365556][ T7626] show_stack+0x2c/0x3c [ 225.366251][ T7626] __dump_stack+0x30/0x40 [ 225.366956][ T7626] dump_stack_lvl+0xf4/0x15c [ 225.367714][ T7626] dump_stack+0x1c/0x5c [ 225.368385][ T7626] print_circular_bug+0x148/0x1b0 [ 225.369227][ T7626] check_noncircular+0x264/0x2f8 [ 225.370085][ T7626] __lock_acquire+0x2880/0x6800 [ 225.370878][ T7626] lock_acquire+0x20c/0x63c [ 225.371566][ T7626] __flush_work+0x10c/0x1ec [ 225.372233][ T7626] __cancel_work_timer+0x300/0x458 [ 225.373072][ T7626] cancel_work_sync+0x24/0x38 [ 225.373787][ T7626] smc_clcsock_release+0x64/0xe8 [ 225.374570][ T7626] __smc_release+0x568/0x6bc [ 225.375295][ T7626] smc_close_non_accepted+0xd8/0x254 [ 225.376112][ T7626] smc_close_active+0x9c4/0xd24 [ 225.376843][ T7626] __smc_release+0x48c/0x6bc [ 225.377559][ T7626] smc_release+0x258/0x50c [ 225.378245][ T7626] sock_close+0xb4/0x1f8 [ 225.378877][ T7626] __fput+0x1bc/0x7b8 [ 225.379485][ T7626] ____fput+0x20/0x30 [ 225.380151][ T7626] task_work_run+0x1ec/0x278 [ 225.380905][ T7626] do_notify_resume+0x1fa0/0x2aa4 [ 225.381737][ T7626] el0_svc+0x98/0x128 [ 225.382360][ T7626] el0t_64_sync_handler+0x84/0xf0 [ 225.383165][ T7626] el0t_64_sync+0x18c/0x190 [ 225.549073][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.766'.