last executing test programs: 4m54.711172016s ago: executing program 3 (id=298): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) fdatasync(r3) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x26, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000600000000000000030400001811000007c83b21a9f42e18d20de7c2564a291d2d41c5d34db577d3f1ec109cef383688728930a168ab4b6d0395b726614ce8a9ab4e58ff6f5fe91aaa93463cc6dbb6f6e43cf5a578962f0bdef2acfb89d80cd2f4c8642470e77a22e8c2efd3a990dfd5018cb15d8cbb1d56d9792012899de6ab9f35cdf2bcd4f58b311f258e94488646351e481e1bfaa10bc2c2387b2c39ea547b1090a1b069883c32badb6ebb5631bc93111e900ae1ba", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4m52.727078135s ago: executing program 3 (id=302): prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) 4m41.001147389s ago: executing program 3 (id=324): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r4, 0x0, 0x4800) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) fdatasync(r3) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x26, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000600000000000000030400001811000007c83b21a9f42e18d20de7c2564a291d2d41c5d34db577d3f1ec109cef383688728930a168ab4b6d0395b726614ce8a9ab4e58ff6f5fe91aaa93463cc6dbb6f6e43cf5a578962f0bdef2acfb89d80cd2f4c8642470e77a22e8c2efd3a990dfd5018cb15d8cbb1d56d9792012899de6ab9f35cdf2bcd4f58b311f258e94488646351e481e1bfaa10bc2c2387b2c39ea547b1090a1b069883c32badb6ebb5631bc93111e900ae1ba", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4m38.674930601s ago: executing program 3 (id=329): r0 = socket(0x5, 0x3, 0x3c) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x6}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 4m34.857878437s ago: executing program 3 (id=337): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 4m31.737095371s ago: executing program 3 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bfb25e4b"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m16.337374289s ago: executing program 32 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bfb25e4b"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m28.925189714s ago: executing program 2 (id=465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x8000001, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) writev(r0, &(0x7f0000000900)=[{&(0x7f00000043c0)="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", 0xbf9}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000073c0)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x7a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24004850}, 0x4048001) 3m28.426150457s ago: executing program 2 (id=469): socket$kcm(0x10, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) write$tun(r2, &(0x7f0000000500)=ANY=[], 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) 3m25.162899342s ago: executing program 2 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 3m22.875319899s ago: executing program 2 (id=478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000000c0)={0xff, 0x4}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 3m17.554641592s ago: executing program 2 (id=494): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e22, 0x5, @private1, 0x3a53}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000002c0)="575169a16502b74d104628916dd2595fcd46d26b439d2e17d76749a7a63eb3c2dfec61a41059fcea528e5c9872878dae7e738bcc2c0b648ed7cc57d4284a258647b2e27118a0a54a5f253407795d9eeb4ae4e7323e", 0x55}], 0x1}, 0x200000d0) socket$inet(0x2, 0x800, 0x5ab4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpid() ptrace$getsig(0x4202, r0, 0x9, &(0x7f0000000000)) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000140)={0x932, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m15.824614857s ago: executing program 2 (id=498): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x11, 0x81, 0x0, @remote}}}}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) 3m0.540134185s ago: executing program 33 (id=498): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x11, 0x81, 0x0, @remote}}}}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) 2m11.896031434s ago: executing program 5 (id=613): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@private1}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m10.607574145s ago: executing program 5 (id=616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0xfc80}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m8.645857741s ago: executing program 5 (id=620): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000004addc6bc05e79779dab343d74e35efb", @ANYRES32=r7, @ANYRESDEC, @ANYRES32=r8, @ANYBLOB="0000000000004000b70500000800008e850000672c94450095e764270446cf93dcb9d856fa3c1543a558b7354450fdf582d28fae4349fd5348d02a3a945c1a1de3163638516a08ab6bcd0e39045322e37e3508d5d583ca97657d0859790f3b6c4d873c0b381e4e7eff06f4b661b155fbf67aa3dfbd26dffc939644dfb66b78cc248918127188211eeae3a2f9ca4721841a6a039b52ce", @ANYRESOCT=r2, @ANYBLOB="5948156e8c2c0b71acb826b48e84fe8ce61e8b2bc46e5e43e215d75141e9c69a33c82ece8d8411f731bdf89510ce7240535c469b534097e9e7dbbaae7f2cc81e8dfbfebe5176d4cd1af4ee13136232080b500eeb6ce347b64d43b0dd9029e9f64dcbcf7d59a05ee4ff43ee252aed7967ddffb54e3accf3995453648c0c7cf960fb3cce42042595bad83d58e408beae56774a2fef7c165431", @ANYRESOCT=r1], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000a806569600b8d3193f6acd2defe1cd52c86d30aef7f93d27182c4b72cfc7ca7b0e038c35ce03c93911bc096a7fbd7ec5a82fe0111143f608ff924787da7caa8ca63ef0bedd1e3680d86bfb38657b7137da75a9d7c5c6d4e494"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m6.885817273s ago: executing program 5 (id=623): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000001500), 0x4) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r1, 0xffffffff, &(0x7f0000002080)) r4 = io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0x388e, 0x400, 0x0, 0x8019d, 0x0, r4}, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x12c, 0x0, 0x22a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf26}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff2a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socket(0x23, 0x2, 0x1) 2m5.516671477s ago: executing program 5 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@private1}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m4.275352537s ago: executing program 5 (id=628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@gettaction={0xa0, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xa0}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m49.051434527s ago: executing program 34 (id=628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@gettaction={0xa0, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xa0}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 32.05634087s ago: executing program 0 (id=776): sched_setscheduler(0x0, 0x2, 0x0) setrlimit(0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r4}, 0xc) 31.978742855s ago: executing program 4 (id=777): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 30.049550038s ago: executing program 0 (id=778): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) 29.259867497s ago: executing program 4 (id=780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x5008, 0x1, @remote, 0x5}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000022c34137d87538384d00260000000000000000000000d53dc87b32990f37c25b350e15002143d3f942d1d7592f7212c1fa651628f7d5dd95afa750a97b7cae8f04ad2e112cf4a53c274d10a6a146efd064363b0e949ba14189e68b30c7ca54a40a7610d06c6d79e27d0ea6923ee0aad475680d99ada47ba69001b0e38a0ffe3edcc7b5764e4d91074f84cf5fc9ffc660465ed584a211b5c3fb526ad30217b156e2b6bb9f4ac2c0a2e6539667dba7c1a7c6b7a5550873464d9a111e4791c70916822d2e08f10a8af47cf56847d72bf30a32", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000240)={0x3, @null}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010025bd70000300000000000006", @ANYRES32=r10, @ANYBLOB="60001c0080080000085abf670e6b000200", @ANYRES32=r5, @ANYBLOB="0e852d5423a3a73c7e1b16d68afa3d42501c732bb20f6521997f530a621756c16eaba281c0d71de089ec867c0ad5e7b661859b7f89a0ae7f0f43196034977d745ea43cd545a32c82b40636aa1b3837e9f25ba6a8dc1edcb815e38b1b6dfed926b9592feb2d550c194f7d06acec2c34fc55646b44f11492a7665156c3b756f07b9a30e4c2df6dac454b6219cecfafc68e38"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r12, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 27.701554685s ago: executing program 0 (id=782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x5008, 0x1, @remote, 0x5}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000022c34137d87538384d00260000000000000000000000d53dc87b32990f37c25b350e15002143d3f942d1d7592f7212c1fa651628f7d5dd95afa750a97b7cae8f04ad2e112cf4a53c274d10a6a146efd064363b0e949ba14189e68b30c7ca54a40a7610d06c6d79e27d0ea6923ee0aad475680d99ada47ba69001b0e38a0ffe3edcc7b5764e4d91074f84cf5fc9ffc660465ed584a211b5c3fb526ad30217b156e2b6bb9f4ac2c0a2e6539667dba7c1a7c6b7a5550873464d9a111e4791c70916822d2e08f10a8af47cf56847d72bf30a32", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x1000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010025bd70000300000000000006", @ANYRES32=r10, @ANYBLOB="60001c0080080000085abf670e6b000200", @ANYRES32=r5, @ANYBLOB="0e852d5423a3a73c7e1b16d68afa3d42501c732bb20f6521997f530a621756c16eaba281c0d71de089ec867c0ad5e7b661859b7f89a0ae7f0f43196034977d745ea43cd545a32c82b40636aa1b3837e9f25ba6a8dc1edcb815e38b1b6dfed926b9592feb2d550c194f7d06acec2c34fc55646b44f11492a7665156c3b756f07b9a30e4c2df6dac454b6219cecfafc68e38"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r12, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 22.678183872s ago: executing program 7 (id=788): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x383, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0xf48, 0x4e23, 0x7, 0x2, 0xa0, 0xa0, 0x16}, {0x1, 0x2, 0x53a, 0x20007, 0x6, 0x1, 0x802, 0x2}, {0x953, 0x100000007, 0x8, 0xaa}, 0x6bfe, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010120, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x3502, 0x0, 0x0, 0x0, 0x7fff, 0xb, 0xfffffffe}}, 0xe8) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r5, &(0x7f0000000040), &(0x7f0000000280)=ANY=[], 0xfe49, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1, 0x1, 0xffffff7d) pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4122, 0x101a, 0x9e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0x4008001) 22.131565994s ago: executing program 4 (id=790): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e22, 0x5, @private1, 0x3a53}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000002c0)="575169a16502b74d104628916dd2595fcd46d26b439d2e17d76749a7a63eb3c2dfec61a41059fcea528e5c9872878dae7e738bcc2c0b648ed7cc57d4284a258647b2e27118a0a54a5f253407795d9eeb4ae4e7323e", 0x55}], 0x1}, 0x200000d0) socket$inet(0x2, 0x800, 0x5ab4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = getpid() ptrace$getsig(0x4202, r0, 0x9, &(0x7f0000000000)) socket$rds(0x15, 0x5, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000140)={0x932, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 21.239658918s ago: executing program 7 (id=791): r0 = socket(0x5, 0x3, 0x3c) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x6}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) 19.266991164s ago: executing program 0 (id=794): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) syz_clone3(&(0x7f0000000600)={0x14002000, 0x0, &(0x7f0000000440)=0x0, &(0x7f0000000240), {0x2f}, &(0x7f00000002c0)=""/202, 0xca, &(0x7f00000003c0)=""/82, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) socket(0x1d, 0x2, 0x6) sched_getattr(r2, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f0000004380)={0x2020}, 0x2032) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) 11.967731314s ago: executing program 1 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) connect$packet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11.828018537s ago: executing program 6 (id=799): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 11.758133285s ago: executing program 1 (id=800): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001400010024051000fddbdf25021f8bc8", @ANYRES32, @ANYBLOB="08000200ac14143c0800090001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.902350666s ago: executing program 1 (id=801): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) 9.901093365s ago: executing program 6 (id=802): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0xfc80}}, 0x0) r1 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x408cd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @local, 0x5}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 9.86828545s ago: executing program 7 (id=803): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x10301) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) socket$pppl2tp(0x18, 0x1, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$inet_sctp(r2, 0x0, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) 9.809625621s ago: executing program 4 (id=804): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed2", 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x8800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x6b) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) 8.653284367s ago: executing program 1 (id=805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x5008, 0x1, @remote, 0x5}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000022c34137d87538384d00260000000000000000000000d53dc87b32990f37c25b350e15002143d3f942d1d7592f7212c1fa651628f7d5dd95afa750a97b7cae8f04ad2e112cf4a53c274d10a6a146efd064363b0e949ba14189e68b30c7ca54a40a7610d06c6d79e27d0ea6923ee0aad475680d99ada47ba69001b0e38a0ffe3edcc7b5764e4d91074f84cf5fc9ffc660465ed584a211b5c3fb526ad30217b156e2b6bb9f4ac2c0a2e6539667dba7c1a7c6b7a5550873464d9a111e4791c70916822d2e08f10a8af47cf56847d72bf30a32", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000240)={0x3, @null, r7}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010025bd70000300000000000006", @ANYRES32=r10, @ANYBLOB="60001c0080080000085abf670e6b000200", @ANYRES32=r5, @ANYBLOB="0e852d5423a3a73c7e1b16d68afa3d42501c732bb20f6521997f530a621756c16eaba281c0d71de089ec867c0ad5e7b661859b7f89a0ae7f0f43196034977d745ea43cd545a32c82b40636aa1b3837e9f25ba6a8dc1edcb815e38b1b6dfed926b9592feb2d550c194f7d06acec2c34fc55646b44f11492a7665156c3b756f07b9a30e4c2df6dac454b6219cecfafc68e38"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r12, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 8.123433081s ago: executing program 0 (id=806): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) 7.406082875s ago: executing program 6 (id=807): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @local, 0x5}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 7.155163834s ago: executing program 7 (id=808): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x8000000010, 0x2, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 6.333978683s ago: executing program 0 (id=809): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x5008, 0x1, @remote, 0x5}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000022c34137d87538384d00260000000000000000000000d53dc87b32990f37c25b350e15002143d3f942d1d7592f7212c1fa651628f7d5dd95afa750a97b7cae8f04ad2e112cf4a53c274d10a6a146efd064363b0e949ba14189e68b30c7ca54a40a7610d06c6d79e27d0ea6923ee0aad475680d99ada47ba69001b0e38a0ffe3edcc7b5764e4d91074f84cf5fc9ffc660465ed584a211b5c3fb526ad30217b156e2b6bb9f4ac2c0a2e6539667dba7c1a7c6b7a5550873464d9a111e4791c70916822d2e08f10a8af47cf56847d72bf30a32", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000240)={0x3, @null}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010025bd70000300000000000006", @ANYRES32=r10, @ANYBLOB="60001c0080080000085abf670e6b000200", @ANYRES32=r5, @ANYBLOB="0e852d5423a3a73c7e1b16d68afa3d42501c732bb20f6521997f530a621756c16eaba281c0d71de089ec867c0ad5e7b661859b7f89a0ae7f0f43196034977d745ea43cd545a32c82b40636aa1b3837e9f25ba6a8dc1edcb815e38b1b6dfed926b9592feb2d550c194f7d06acec2c34fc55646b44f11492a7665156c3b756f07b9a30e4c2df6dac454b6219cecfafc68e38"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r12, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 6.19021714s ago: executing program 6 (id=810): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x25, 0x3, 0x800200ff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) syz_fuse_handle_req(r0, &(0x7f00000042c0)="4a489b2b672028717e291f7bd39f2d91b883289c6d41be38181724c917744217efeaf2514f2b62e551d7ff0470c5b04c5cbc86955b353edfcf7dd37911378f298e70979f7d0841919d18119413518240dbcd9a37856ac270076f6b30e04b0785a7c5cafb619b5914358b2ed9d59d445b36f2ccf23ea594e6706f4afa16843469d36646262e0d108d234d1481599c3048898448df0b9f64967fa2a423d7203c695fe65ce24d41076a30120fcc316c1ccb60559221895b68b756f754456b900ce0fb68c47970bf6a6a4298a06a57a76f9b143280821114315da74e1dfb34f36d8084f3a1886905c283356ac305bdfcfae723516c39b265bc034970adef2811edd3697675506bc60046f99f6595553d5dd20c783fb5da4b034b9f049b019201995c3ab868352f4dc582f8fcd7a020943caa341ab7e4a0fd3bcfe7314bdf88c06841d2df559e5eb901a9f46d1df788f47cc9afbf6ca6ff8780c15e2319a7f9479a650e24a72e59dc37cb7121fc7ac32e5854cef78c9d150dfcc765de862b5566c96db7d65fed953b73ad06339c6ca7815188c3ba6982af4433cbcb3bb4daec540524cac8b3deb0c0d7c21278d62961bbc0ac575653b920869061f912ac194bc937357858fdf3fc3be4c33ffbb19eaddf0ae8b74510ec619e636d09fcd52c9e9e808b6f033b8113fb98301769e7e62474b746ba7ef86ad6546eb1705d4f07629785f96637459d799fe30ba1586c2b19210f3914ba328a25c05ff19323f756df71da79e5bf1395284d2bb92fb2ffd33d30a5b4cbeda9b1a1407eb2a56597eaac5d0b5407e240d6de155c05661f79c31c893f53af220e3aeeea9d85936f554824ad01c7114aebd4c728f8ffeb7e9eec4626d852e836c11570171550e295eb14ee0645473ec149dbc977f24d9f65e3f6f106b226293e6cba22d31a432ad9adaea336abdff85a59e78bf0d6d0e4dccfc72c6e94e0f264ff38487330de317ea8b774684167722152b5557a9bc5ed28eb81b690246e27444b3b989022553389f6c822e148dd4ffe6c3efa712b86ba1e7e2ec9cee70910b8e24720789118d3bb8cbe0660dd162c176146abddbf9ec37f2981747f63e54ef959cef9e1563a02f69ed8bc25020aa1d833a2498f2aa289348e4ffd4e0cefab664224a95aabd2074dae33c6abb029a76c7513b664c3b41c696b55e7a7442fa5731cf33b9a19a675140ea2d40a5ca9c925727a00ee319624f904aa8582800d4051ffc51fca739803877f30eee083130b516cf162369a0d4cb9360ca82bb07962f6a6e9d80547da7fea456cb7594785057eddca74247d0fb047d136a320005a9f6501596e0cb235f3fd83c80fc6d3a20599935915803ea1ff2ef86ce5cdbd105ffebf68c3514101a4745341e880fddc448732e0770c3e2989d0f69e4a73690b97b9801c832d3df7c26ff96a82cef2b1d2c3969307f73ba491a9e4ed7ac60c356d80d181cd3b3fb8b07099754aacb4db3d4bec550adda59635b4944bb7c60eb950b2c49541adfc349f5e602ced7dda7cf2e7e7561f428bc23bef33d2a77ef26ba8a0d64b67241533116c71cdec6ca0ab66eb1195921fa6baffe13f27c4e4437064fbaf973a60e0c4ba1b4fe31b60fb65cd53e628134a83a34b025abd6094944f00b4020d31e1e84073e3a4e369b47fb75ca3cc84fe350aadfaf9ae61f5f7acf7a813b9cbb511a9117e0690f6e4a4e712a58b39c881670b9eb392eacaefe819bcd9c6af03712ad02037eb42e6722a14fbd1a8d988dfb69ee067876b44479aa6271ab14155b3924f6902367e9ad4f5536266f0a00c0d59fd21d3923625d917afe516d1fcdf0638d66c223a605956bb2e7e56c03526fc68002ce19cf14f056f1adc20888784e62c32d81f2c7db62cffa35eb8bdf0be066c34b7531d8d2afad487ea34d42f07ceb15a5e7dc8ae393285941e820ae7812827c3d9b33beee54c5052eea4c0ba0a77e95aa9b19dbafb4dc6efe548979ef926640269f9486a4d32284fa7cb0f779082be1d8bf0f935216911be3cbc76c8b972f59505a9df398b8aaee3252b7896081f17dc80c1089b836c51a0761d1a8ebabae6a8cd0a83b0167864b12763a5515993f5000f2633c3d9aa73fb240d45b811390b381cda6df7ea1222a477f27891b28e27901ecbacf3229d8f20aba6f77cb67931a200b0d46c22bad550f2c7674a0f18c08ff11f575b45ecadb9b57eaa2a115f44d9d69a1ba6462613cc8d7c1628f9773d6aa5a034ddd9d0024b5f635369fe912455bba816cac72a960b3b1738d973eb4464f7264c8810f8ed8659aeca6836ff0956eb0862b628003fba029f548cb4bd67e0744a4cb03992012c903a9016c4e71c7f8f5e45e871c25c8040970d2cdfa72399a2c8597458cb0ca4418fb36597d20d80597b23ccdd9f5b7c66dd93c130de8829a7711aac25f82b5a4a103c0e2828c6d2db6201306067b0c10472cdb2c81b9aab62e95967cc7674ca7e7b4acd64a417984b1180f1236d3ec3fcd90f53e9f3224cab007e51619e91da001abffd90e798d48b177a0ee91a4987c8bf5fc231c72342200641cb51c6a2e7f57d0030cb77235e43830a214a2d0669927c2dae9c3c306511c1dc0118713b0f9e36569e08af161dd12c0b79257476296510a5a81d90e08d58f227b09fbd7df8712bb745e7cde96537895c726127a8d29d2baaaa6e6fd576792569bb0de42ebe11c2d47a881dbe94c1103b9cb5a8acde4c19c115fcf11af59fbcdbfc157165ba38fd88cb334cdbdaecbf56846f2d52f6d916beba34492d6bfd22295cfe62347aff71c415ea57a161dce25f00f9764b1afe0acb468512826f83781cfd7e2657950a9c10c7d92d1e04a4ab54a699f5c51c968ef2da5022c1a2884547a25a352b7b7f72a2c9c5df8927f68b390adb1081b70679b0c71da7c4199693b3fd7a3abbc0a4e34d1a7d186ff04da4b75744b578ca4b9bce5ac3c17732847646e3ccbe292b76d7343fe8a7744c3f7fb8c7143b15b20216c7082d2f4034e97e202e17b49522cf5d8c5b224e32e13e2d5f496a740e6fbfd976c75da75cdb858fe4a25e0fe15d514756bc09b349ac1194ccafe220b0bc3b27eacef1c5876334f6ee156cb8f30c42a082c0a72147d69eb586a326ab7ca1d171d7fcb777b0d2003848667d5cb3aca5a47ef5ba3ea018745fd8515d3e1d361953fd78d2523715ab29939892fba2dc548f218f2ea29112cec8618dbfdaa6972d17c9f06efcc6c0ccfe1fac71a59a07ab49f38aac5da21b1dab112542b5b192581234d2a74d08309811385f03076acbc74287d9f0e37a9f7b97c413652bfcbf327295163517c4d2daa70b84cdb880f645956833feda59c24405686a510b812605862b1e330af3204dbed01a65a51616cdc11357f0c603cb4c638c0948613b5de22f20be23459153e87ff8b0100d5c04edc009423e8106a05f90b12fd0657874d97ef5f2f839185a6dee96e5201d304ff291c6f27d08e35990406f138ae3e1591ce7489f5088afa0c8c5652561a3a3eecd89b6bec9a1dde85b5daba98e252e51d84f4eed648fb5193edd1be5368bfc2ef9eecd869691e6f926e7c549413fd9eff515a51e81499730cea9c576ff2595de95b6e3fd3c49d6b38023828ed9c49c731d690428d4d9c9a03d47081087762fb1031c281e2a48afe513f81132d54f2168d692890deb7353fd189794423abcc0065c42396e43531b687d2e4ea57993d517843870b855bf7de1078ca8c29f7c860199a74ff0fdbc31eaab87c9ab2ae65d1c8f7e8930ffb4df995f006007440321e041304a9dd69336def8a0d73c6688d7a79fbc1acd03b5b48b16a6747dedfa90ef4c0dbedd9a6d8658d926b5aa2035d03265ba9af321bd3dccd8b16e87c81f06b1b6a9436bee8369edce280fd09a6f1363c743511466267d6377400009b9708380982e0c58a0ad3bc6ad0a8cfd06e7483755e4bcbf4b1ef51bef14fd3201344c1b8f78d54c3fc91f36e6554deb227bc666506db29b74ec1cd6ecc88affeb8d7142179c5ebe6674f23d001598654ea5ad49040195fb70615e5b0ea791a42d782b75f8f822b8b07d8521c67925541de054ee1e2532a76b0a14e8679cdbc04a139a806178c21d16f8db9b8d19b1ea78510fdf14cd7af73e05edcafbe4e7cdb394b2245f17587a1479545a302314c63240c35353d6467fb49b6510850325a5f5e77f1c3d08f018a85c78f8907e11c5896f209675772cf1e88e8ed417a9401a50374c9df479128bb925898a2f65bab7e8047de8e1d66767b07fd7526dc6d81fdef6730124d1858f956cc6dcf3296fd06f31e45cff8e210491b908a9b443efad1a37363ac81bd739c72f77855b5f288816e38d6803d81726d4ef69e8fb4c7aae8fc66993f0062c7b3c52d47834977218251ade4a916689c34e1b8d301b1bfbcff14ad3a737d2872b8c565a8443d4f0d3e40767218b9d16a40147ae54ca8bf02479b2bfeaa401226ff141bd940bea2bb585e787b8ea65a096f6e09918e295293961a70212fc3ceca440eeeb00c30c16bc1cd4fd89b7e82444ed67776cf2c5664e82f3471f968c458ad3d004e23fd3a89f38cafe0354adc146d8263e7f853941b1421070ba3dc56829ae19783a5be0556a01ad54db1c7daa124098bfe88a906dffbb0ae5be182b743efae75dd0f244033fa7b59e13be3e9e884449f7dd8367a75dcbff20306abd6cbb721811e1cf69ed10e2eb6a9cf5630ff9f705fb5036cae6f0a81c944412474306aa3ddd37100b1d151da32931d6411a92a2b9b54cb834a12b88a89a77799ebe29718ae13a3ba71802b63981298bf391d34981724a994107f1073023f79961e9566d217e95a9187712a040191057579c975b0e18aa5c95e91743f6299f544924060ae91d992e7bfa77de0ef1061491375d069e4af9a755b14335484af581daa0d4c172883de51819832fd7e26645c834b094e7b86b7f1a93f3b3d34b5f7c17cad73eb3c1cb983623b90251ef8588b8bda62f9be3731e42ae08feb4d2b3f374f7bf8b94f3f00b9e569f407e5d38955fab28d95ff8e3d417eaf92626d2dc1bae5747e5bc42885c942d30ccec9596a796af544a00ec298b10843e482f895e1607eec81e808f2bb5f181cff52504761b7aaef48582904afee92afb0c91a54d025cd1b0ff6996a9752804105c6d0599069aa350e37933967e2a543339ed744a45622d5903c106cdaac1c91dd4959927cfb188bd45d60979e124c607d90ad30a1683d2d9ea30874c41ceae0f312241bb05de0c7222971a39b52a4aecc1b1b528d89cbdc4b461238dce9728954b9d69d592987ea11c70c653c9d63d9335efc18767683726f2527bc355abd018db3a8c35c51caec1b7d8cca460c16f84610564ebc1755cfd951a9ca78034ffcbddfb3d8a9c17b8e5260300e6b572edd993889ef3c5dbe97ef8de4237b67cb622c3242a2789dcf4306d233cc7c29d456f403da6d35c0fc05d6ec23a480ae17a85eb9c0ba5dcc1192e61dd6819bb22f13cd9dae41da18fb8a9dce352828f0128d2b1aaa5648ca0e516f9f7461a111c85d00f7d9d6f5772561568f45a03006c3b371ea38969ae545b245efe123d9790b2713969daab6f13b732fb220e1a84fe39e4ab033baa4b31167593a07d3f80e2f937b7cb99ba59c3087dfd04d255e0ce2c012543da401b6a6f074526abbdcfd5892fc66e9402367ceeebc29a05706b41e9ddd34fff19de040093340bfcd8593fc2130f05d9e07fe923b8abd572fa205b394d93520c787df9d2629cdf1443fc3178351327f1bf643cec7a57af41e6fecff51cb076eee3bcf98c7e66b149c1524a7069f60f84a73e54b433e32feed5fde55648c12fc22e8b19b6eff95235588bb8e9793abd50fe19d480a5c354cd74b811c231bb3712797d4db89208d4c6269a79fa4ff98386c012e4e8cad23c7fa2ae3f4d52bca514450606c7a016551ee51484aa8367a7019f719c1c79a5ed2ac72f1960a7973edff5251e083cb58b6d0c03affa457651513d061ce215de2a49f36885f256a4bc65a055fc13ebf6309a5180350166ee9a8e1fa349c372c94cf3557e98f25dc55f9664b3be3a34c2cc14e6943149c2e8a759169db1ddeac4bb573da6074ef33550c1debf8b5c4650c50e27246b47fbfe497ae5143abd86c3c06de2db24c7c3d27cfc8457e3de09ea1e020bbc3b622b0b72fd554cf4207ed0e1759f6d22634ca4834449c4ec166c0cafd44f976d6ab84e251b84a4e8174b0a95f9b58d8a83c6757847ec16d2b9a6a9c33b83e6a6ea56b9592ad75567cbb1704b0c7da3519cbe7424ab109d071456ed0f044140f4ae8d9063797154c6643562519d28c68f0a951f724cde608bcb7e570d07e5ea205639817b5c8185dec7e420080efd0e2c81abf01bb5dddeec32db0c25445b10ee5602d4422cbc12ab127ce051349abdbb6d200977043c74fe6e2271db8a8be6310a2cc69f0b05776af13556d0e699e5cd16f4c52451a448b326708a41fbd820a03f06bfce0b1aa2c709594a231beff5516c6d3fd98a9650844203ad6f7d3cb764548d32667f330046cfa1a4ef8f6e4ca519367a0b8bdb594c875589cdbacedf2f3573517e64c332e8a5c1427eaaf4aad0bafe0a5a9e987e764ab42b1ed9f5e705bf97ee6737ab28034c1155eaa93952dcc29bcca73de7d1e1e53163ba0c5ec814bb93cdf8cbea65513af785dce40227973d70bd5392058b0bb65d8898aa28e0b00944526f7066b2e0318fd32582c0f6ad51117094f5d9ce3e71d0b8e62fa976097c7b2e77dbc7c1c7b605188cc7f29a5d4112a8e98732c2da4c28d1fe37481e673fd4c70b1775d9917813109ba3b9a446d8a16aa69531237fa7a7c1c4ddea49df138c46166258c12ac9059bd435645e13f7e3c2246e6017b6b2008ae4749c25f7b75a08cdf92de013f70b4fa1c4fcd5a9c21aedc8ca33f23a7a926eb9d623a0966802ddd321298c37364c11e10b60d62e236ac4135d234f8e2ef68750a6cf5ff2ccb9478540b3d33cfd0e749900b51aaec89114eaeb8f8f070c363058f56674b508ce0dc9fd89dbf160b613d85a7a812b61601612428fd67cbd46a7592b7c6f924f8b96d8d836eda256c1f3814e37b364777ebc9a5c86386b87da520ea86966e1040b6b9b6b4a409aefe21bc464d3fa13c7f09fda8878ced61da4151cce08e749ebd175225adbf92710af796e26fed828fd5f4614e97801a50fcf2117818ed9fb805a1dc7271a10eb63c8afd0c1eb17cb8a04a7fbf44144f406d52adf2f4553b415cc25eee0810c29329252be7f31589217c0d20c0a6d2b4e3669e7d92caa2ddfd688b9f9ce429ee470d1625452bbf1b68b2d262f7869dcb3a8c08d0dba2b011534e339cf2dffea59e87819a3409c20cb600b93d11c9038153faa7df1d6b7196f3cfbf8931eecd65ea8b125bfc6420b8eeb82d999a556d66347ea83cda739a9b69fb3de7ad674777c3effc5524ed64d29905ae6347056ac385682dfcc77353c73fb65e5f4468489847cddc4fc47fb46287cd0b2a9823d2c26cc539c28232ce8b6a795e96ac4eeca09cda280fa1ef69f24b9a8250727e6e6b0859847239607afe16d50ceb67a9b593234e2f5a4d7783c2b0df1ee12a0f55981bb1cafdf7938f49346b97b83c3b608fbfa1e62f2d1caa294c7beb6ac21a35c5952039089079e999766dfccea81e3fea46146048b93d1f10681402f4f2af2c1458b3295403f9c9b0443d14489883a93a5b84395c271183ff9f9f708a83045b59c5a725d8d3f6593d72668d88cfffca42f218f4b41edab61db892ac4c2c6102750f0166afce267d87490c956fbc2318e0caf58cb8e2e7d67cd2163c63b9d2603a572c5506b21adc919e3d8df26e84493a946cb1be08192e405040f50d184d58c96bbac35ba63bcb04ef78a9aaf335d2f8cdce02bf6a2a4584916bda72bfa9b6a885075fcac768d88efaf5080fd3d15883d717819955b496b265f29ea2b3db307e00c87f19d0d3e594036788d5a5de1904963d7e113b2744bbc84e59304fc928c259f103b31fab8148d663de011881bcb6c08cc71b788dfc797f6acf3b66283890e74835e851a6ccc72609e07566a3add250e3b02572b56672608eacc39cacd2f9a7be222c508c4cd55c51fe6e82a3d6fe82eac30dcbf97f7ab98f974e2f92b4ada98096878ec1b8b37644323920464f59722536bbdb7d31d63a1b7f9cf659fe536cd3d6586ba30939cb05b33f43a877fec1e8c6890074279292476aafbb6215ad254c3bcf2989b012001fda36ebd5a343547e16bfcfc6f4b9cd1d124400609c176775faed22f4c5bf8fcf4387ea07217a88715c74a82c3b719499585f154ea4edfc0514591cb98bc678c451d30afc73883bed08339995467d611e92210978a075c9cffff04409a2af2516d5057f2c69b5ac8200a59279addce368b4408f76fcb500550f008be37c034e7c5636e51bbb5bdf1692736fe5698d9644fb1a84cc3bc9941bd1a7b8f20e9addf846e8ff0d3c829b8ded5f48faa5995137ccc078c8696c1ebbf36387a592f5d8a65e3f6c6f8cfac219d95fc49de210d7893924d84c6aa80cab893aa5953d86034e6408109f9459d7a6200d69efa298d93b8046339f024da5e7b1aa7f69b1a9f92fc02a9f75b507c629f05aa9efa778a4ac5c0697fe4aa254bb1dd4e63d5e3db6627cde671951670ce43eedc5097197d5bc22fd6a4a4178a6ed880e9f84cdc9af229bc6d36e79494aadb31c723af9dc176dd17a1063c5df330f38be6f649a25e60ab99556dc617e33cc7f6a2a999e341b0f9984af25c4eecd0c5cd81e7b0898c1eb688821d80ad3cc91fe64b522a5e205dd1f0a121589cc144e20735745796cf52f1a90e89dc0c1f7022d1cdf0dbdd6d9373886a217cf96839f30fcfada438bfd2f48d552257f39e8e5c77be1841f0250a7d1b46794f06442f7f23af68165182ab80eafc8862ebb8bccd0fbf00c179e14b011f0a4f3893c1809d28089b6c4fefac79a12ea1a8d853868f57da3fed46b29907dffcd44236e985cb18f2c62932dccd6d58c5ce747ccd78b76f9522813884935ff6328656cbe3ad33c9a90de333cad98fb66a5e23903616d669882b717601109c24738e90bae85867cdc96325cf9ebf194bd4fc3a71a5d49cf0875541e6733085eba05f2f3d8e43ea9a26ee0592e035e97739bc0a05d601981050449fcad222a3a8dd6c6b606d8d0fb0b1e30f91eb667b02a0685adc5a92c81ba089db2ea7b9750141999139a81f702712671ace2fdae3cb7b30bdd7c189444d37698a726e4a16fc84c4eea8f8ef7e6535f5d975d8eb6eec6c022f0df8ad57b5210501f0b5d15d2837bf44fb2d76d7489fe0ea6e5865b9900fde18624c9f5591b7b3f401626b78812eb5376ac313bcc7d2336e4bd0177cfda6f5a4ee57871ac761d1e837aa7060bbdd8b79f547850c62c8e8fae26d6bd3e1002ccbf44646ad0a68a33670c682ddf3f05a82fdeeb1317e5f23461108fd13451ccedf0c1d885e126cc3dbaf1a647f83cbb9a75fbd57b1ea545d381d4c9bfd6b5d35759f0bd131c7eabd0883eda365bf1bddd49573af8281089c2139bcfcde10dec500000b49bfd7d46181d107c87d1d08dcc64d0c4e1dae12ea2b3a8f5352ca6f07b07475701512d0ab4b5c7f28732ebed87fa9a78756c535e7f2179025d3991a05722b7217d5c9b75f54f9d3aadb0f0ec59ef051dab58c29799cd043a77a6cb213cc636c4f47a4397abe5702ccee23b28cd7819c3faf253e5bebb3d457f9cea486a9d6f8208a7be0132494564e32c377f5fce81ed7aac93078226ae32b5a5c443f7732b21494cc628961dc2d6e8bde3038bf8c75e36eb5a6d4f2261d40240c949933d5847e090bbe4d69f8aa0fdd0f1a5f04c991e8a050d995f5b77d88bc4452403574d774c6470dd595bdb0ac9130f2b400584d3f9adbd4cdf1d25c7d5acf1d3f6d0aab4a180aad7a12224a5920519f6e7fe9597317893af93120902114521a424d6b22a93ea50453d09f6a143ff2299e453eb75f0a3b01d63d2c9168a0acebc8dd56aa3f97a70ad4b2c53933ceb1058665dfb881c887adc6f03f604fac7c7868a2f98319f6551604a74489b8a9bb05434d7583dc76590c5349ed32e6976a546f63990ae08de68ec9ce5afeea537d92922ea1c57785c071b989fc7fc53a9fc5a602f495758ccccf3168d83b4053911c883ba4a8895d34ad4df8ba41e7fe9bbc499a0b2cca7426689ad6559296c152c2cb03f7e84145db3f2c993a10270d8305be4d5c50acaf0121c1cda027dd4499d0cc357cf9e4d68e2f08b70228848e915cbda9479efa49027e0b3eb8553a704a2aa03d5cbcddc9782df38b1a205e9f3d207f7b9d71b785834d15a94b8410a5df0bc1a10ac2d39493023d701d3a68809d279e3e5010e926f5f90a592bcff727bc8abf5d51052cc19f432c0e6ec11744ac760687702878589ce82e98f807de6db4583eb6af48a1c8083f423e3698dc8219c3b5b8c2e598ef470558b0c816a6155642d4180b2061a5c2ce81e05e80d2846e8304bda1b99b413d1fc5b35da65bd44865649754ce4b02b6456b02ab7fb6ac06a5e8eca7f3f02e96ae6ba5fb87300bb12793ca374bdcefb382544eaaac8b6465d96ba1fc1773bd25ef63c1f08843ea847901a66c33fb76df7a442bb0cb823a88d847fee8918eb1391891e4e571b462bfca1c4a1e2a0db0f0d771325bf87a4604e35e75c2dac5e887c697ec362afe6eb99c25490d8511085f1943cd26d34054f8204135797f881aa16898fb21cacc98725228f78b8faac5fbc2eadcb5a929c745fbf8ca099b1e376e1a554f58c8e269e41bf6efe0e33f019395194e281a1b3087f7a6aad8588746cd5c10e1a94ad7ceacb808f47022f0d4f11d43844130b653001f202ac34ab808b096804719914e8389f5e8e476228122ee04100513ad53d74db1085e1a6ec5a018bbedaf8b632972b14af35d6f846a4a3aeaf758d8e11f9b5f208b2dd417d9c37e7d50af4d950009f7f8080d67749d332edf786040b5c3e3b02b7cf53ce2c0c84611e21c67f01f14561014eca771eec25e86114c26cc6f4f1f08652877e99f33198aaec7c4f1bacd09d0e7555e0320a028b45fd1fd5e37817378ea8199b934132a20e6e3f50418da25c456be2f5e55174aa9209b24a5585ef530fc6f9686d9ad440601a232ef1974f2e5395486e765966562a5706fb667208a639793609869c34ea93e65d338bffb3c4899b16cabec1a490acd2e1b11cb75f64bf659045949e5cdfb766f53395872ddc07d7230f00b584cdca5ef0831d6fbf9907c580dee7b1d0a1d9c090cf21b07308b67b7a6bb36cee05afa234768e642356602b5430874b150929ac06e7ef675dd3439964d36bc9b91005dae2f1f1a6f8cfcb6a9c702b5db52f492d6079c8a0c4914c2d0c487e4760db1138d9c1e9d26ba3efcbce098a08471c92b0cd356d72176b3d29c7453d952b56ed9597350561fa67472e46dd1c0468f8c754f5a4148bbfb741f57b59530148d6e4c97af773ea0b36dc33e4fbd0f8f30dc8d050cd8071728127b1a9aa336c984b5385d9bac361e57505bfb2f", 0x2000, &(0x7f0000001180)={&(0x7f0000000080)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x1, 0x20001, 0x3, 0x7, 0xf, 0x6f72, 0x0, 0x0, 0x40, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000740)={0x50, 0x0, r1, {0x7, 0x2b, 0x2003, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x3, {0x2, 0xcd, 0x0, {0x0, 0x4, 0x4, 0x1000, 0xfffffffffffffff9, 0x4, 0xf79c000, 0x2, 0x4000005, 0x8000, 0x538, 0x0, r2, 0x7, 0x3ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.888081224s ago: executing program 7 (id=811): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)='{'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/220, 0xdc}], 0x2, &(0x7f0000000880)=[{&(0x7f0000000640)=""/217, 0xd9}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000740)=""/65, 0x41}, {&(0x7f00000007c0)=""/153, 0x99}], 0x4, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0xb0) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ff09000000ffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f0000000000000081000000000000010000000000008c90d4"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x2, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 4.665989477s ago: executing program 7 (id=812): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed2", 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x6b) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 4.491725136s ago: executing program 6 (id=813): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 4.178608163s ago: executing program 4 (id=814): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffeaf, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xd8, 0x30, 0x401, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x52, 0x6, "d8f195109eca43e24feb4a8813f9ac6d6d39c9ebe9a80bcd00b38ecc713449b747214140f06ce9a8c1cf27b01655777c76fbc86741641520d583a73c8aaf72e123f9741caf1e98eb581ba0afcaed"}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000004addc6bc05e79779dab343d74e35efb", @ANYRES32=r7, @ANYRESDEC, @ANYRES32=r8, @ANYBLOB="0000000000004000b70500000800008e850000672c94450095e764270446cf93dcb9d856fa3c1543a558b7354450fdf582d28fae4349fd5348d02a3a945c1a1de3163638516a08ab6bcd0e39045322e37e3508d5d583ca97657d0859790f3b6c4d873c0b381e4e7eff06f4b661b155fbf67aa3dfbd26dffc939644dfb66b78cc248918127188211eeae3a2f9ca4721841a6a039b52ce", @ANYRESOCT=r2, @ANYBLOB="5948156e8c2c0b71acb826b48e84fe8ce61e8b2bc46e5e43e215d75141e9c69a33c82ece8d8411f731bdf89510ce7240535c469b534097e9e7dbbaae7f2cc81e8dfbfebe5176d4cd1af4ee13136232080b500eeb6ce347b64d43b0dd9029e9f64dcbcf7d59a05ee4ff43ee252aed7967ddffb54e3accf3995453648c0c7cf960fb3cce42042595bad83d58e408beae56774a2fef7c165431", @ANYRESOCT=r1], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000a806569600b8d3193f6acd2defe1cd52c86d30aef7f93d27182c4b72cfc7ca7b0e038c35ce03c93911bc096a7fbd7ec5a82fe0111143f608ff924787da7caa8ca63ef0bedd1e3680d86bfb38657b7137da75a9d7c5c6d4e494"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 3.249342279s ago: executing program 6 (id=815): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x6b) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 2.084887202s ago: executing program 4 (id=816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) 1.627164488s ago: executing program 1 (id=817): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x10301) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) socket$pppl2tp(0x18, 0x1, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$inet_sctp(r1, 0x0, 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x2000284) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 0s ago: executing program 1 (id=818): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 89.125561][ T5809] cgroup: Unknown subsys name 'net' [ 89.336592][ T5809] cgroup: Unknown subsys name 'cpuset' [ 89.347389][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.826755][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.382121][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.389800][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.407153][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.414927][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.421534][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.430530][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.430542][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.432175][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.438679][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.458390][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.461706][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.466485][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.480393][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.481803][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.488783][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.496218][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.502733][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.508331][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.522780][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.523462][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.530694][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.540180][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.551490][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.551654][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.562323][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.582829][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.597959][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.605671][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.614345][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.627901][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.390689][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 94.470503][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 94.633917][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 94.734517][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 94.892253][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 94.993992][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.001141][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.012290][ T5821] bridge_slave_0: entered allmulticast mode [ 95.020432][ T5821] bridge_slave_0: entered promiscuous mode [ 95.067840][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 95.109977][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.117572][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.125077][ T5821] bridge_slave_1: entered allmulticast mode [ 95.132717][ T5821] bridge_slave_1: entered promiscuous mode [ 95.210819][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.217988][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.225672][ T5824] bridge_slave_0: entered allmulticast mode [ 95.233349][ T5824] bridge_slave_0: entered promiscuous mode [ 95.305635][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.312999][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.320123][ T5824] bridge_slave_1: entered allmulticast mode [ 95.328186][ T5824] bridge_slave_1: entered promiscuous mode [ 95.377654][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.386971][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.395596][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.403347][ T5820] bridge_slave_0: entered allmulticast mode [ 95.410695][ T5820] bridge_slave_0: entered promiscuous mode [ 95.450998][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.458341][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.465685][ T5822] bridge_slave_0: entered allmulticast mode [ 95.473329][ T5822] bridge_slave_0: entered promiscuous mode [ 95.483623][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.492882][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.499982][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.507981][ T5820] bridge_slave_1: entered allmulticast mode [ 95.515581][ T5820] bridge_slave_1: entered promiscuous mode [ 95.543327][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.550494][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.558412][ T5823] bridge_slave_0: entered allmulticast mode [ 95.566700][ T5823] bridge_slave_0: entered promiscuous mode [ 95.574154][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.581271][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.588816][ T5822] bridge_slave_1: entered allmulticast mode [ 95.596809][ T5822] bridge_slave_1: entered promiscuous mode [ 95.632747][ T5143] Bluetooth: hci2: command tx timeout [ 95.632884][ T5827] Bluetooth: hci1: command tx timeout [ 95.638413][ T52] Bluetooth: hci4: command tx timeout [ 95.643935][ T5829] Bluetooth: hci0: command tx timeout [ 95.650864][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.654547][ T5840] Bluetooth: hci3: command tx timeout [ 95.687497][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.695141][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.702544][ T5823] bridge_slave_1: entered allmulticast mode [ 95.709922][ T5823] bridge_slave_1: entered promiscuous mode [ 95.715839][ T5840] Bluetooth: hci5: command tx timeout [ 95.760990][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.813381][ T5821] team0: Port device team_slave_0 added [ 95.822766][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.877172][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.889039][ T5821] team0: Port device team_slave_1 added [ 95.897463][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.920178][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.927584][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.934907][ T5830] bridge_slave_0: entered allmulticast mode [ 95.942683][ T5830] bridge_slave_0: entered promiscuous mode [ 95.954481][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.966247][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.005052][ T5824] team0: Port device team_slave_0 added [ 96.010926][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.018823][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.026742][ T5830] bridge_slave_1: entered allmulticast mode [ 96.034314][ T5830] bridge_slave_1: entered promiscuous mode [ 96.044640][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.110160][ T5824] team0: Port device team_slave_1 added [ 96.157291][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.164362][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.190943][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.205227][ T5820] team0: Port device team_slave_0 added [ 96.240886][ T5823] team0: Port device team_slave_0 added [ 96.248785][ T5822] team0: Port device team_slave_0 added [ 96.255657][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.262999][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.289488][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.303021][ T5820] team0: Port device team_slave_1 added [ 96.332329][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.343741][ T5823] team0: Port device team_slave_1 added [ 96.351245][ T5822] team0: Port device team_slave_1 added [ 96.373757][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.380693][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.407574][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.421193][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.484372][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.491485][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.518500][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.572289][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.579238][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.605795][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.654438][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.661415][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.687948][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.700322][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.707905][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.734271][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.746259][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.753331][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.779685][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.842222][ T5830] team0: Port device team_slave_0 added [ 96.848648][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.859707][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.889600][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.902305][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.909246][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.935658][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.961397][ T5821] hsr_slave_0: entered promiscuous mode [ 96.967992][ T5821] hsr_slave_1: entered promiscuous mode [ 96.978662][ T5830] team0: Port device team_slave_1 added [ 97.116458][ T5824] hsr_slave_0: entered promiscuous mode [ 97.123314][ T5824] hsr_slave_1: entered promiscuous mode [ 97.129535][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 97.135902][ T5824] Cannot create hsr debugfs directory [ 97.150415][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.157485][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.183711][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.260957][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.268356][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.294315][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.315113][ T5820] hsr_slave_0: entered promiscuous mode [ 97.321733][ T5820] hsr_slave_1: entered promiscuous mode [ 97.328149][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 97.333937][ T5820] Cannot create hsr debugfs directory [ 97.345188][ T5823] hsr_slave_0: entered promiscuous mode [ 97.351880][ T5823] hsr_slave_1: entered promiscuous mode [ 97.358056][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 97.363843][ T5823] Cannot create hsr debugfs directory [ 97.375268][ T5822] hsr_slave_0: entered promiscuous mode [ 97.382180][ T5822] hsr_slave_1: entered promiscuous mode [ 97.388729][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 97.394714][ T5822] Cannot create hsr debugfs directory [ 97.681228][ T5830] hsr_slave_0: entered promiscuous mode [ 97.688291][ T5830] hsr_slave_1: entered promiscuous mode [ 97.696151][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 97.701947][ T5830] Cannot create hsr debugfs directory [ 97.712161][ T5829] Bluetooth: hci2: command tx timeout [ 97.717769][ T5840] Bluetooth: hci4: command tx timeout [ 97.723944][ T5827] Bluetooth: hci0: command tx timeout [ 97.723960][ T52] Bluetooth: hci1: command tx timeout [ 97.734975][ T5829] Bluetooth: hci3: command tx timeout [ 97.802122][ T5827] Bluetooth: hci5: command tx timeout [ 98.198474][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.212940][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.238578][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.249605][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.307096][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.340807][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.356591][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.368433][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.450659][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.468776][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.482630][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.510279][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.609598][ T5823] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.622635][ T5823] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.637804][ T5823] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.669253][ T5823] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.766611][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.787060][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.805775][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.844796][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.876956][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.962585][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.970109][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.996334][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.010837][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.025089][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.050649][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.064136][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.071334][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.102798][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.126339][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.133548][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.174158][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.192768][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.242343][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.249436][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.263554][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.278410][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.301015][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.308128][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.337968][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.345076][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.355386][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.362525][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.371445][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.378597][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.400761][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.407898][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.578800][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.607750][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.728585][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.769151][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.802611][ T5840] Bluetooth: hci4: command tx timeout [ 99.803183][ T5143] Bluetooth: hci1: command tx timeout [ 99.808095][ T5827] Bluetooth: hci0: command tx timeout [ 99.818129][ T52] Bluetooth: hci2: command tx timeout [ 99.819992][ T5829] Bluetooth: hci3: command tx timeout [ 99.826697][ T841] cfg80211: failed to load regulatory.db [ 99.874243][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.881399][ T4433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.888953][ T5829] Bluetooth: hci5: command tx timeout [ 99.953488][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.960673][ T4433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.034149][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.098613][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.143754][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.150895][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.161429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.168590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.249908][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.305866][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.348145][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.483639][ T5821] veth0_vlan: entered promiscuous mode [ 100.573537][ T5821] veth1_vlan: entered promiscuous mode [ 100.617857][ T5824] veth0_vlan: entered promiscuous mode [ 100.658687][ T5820] veth0_vlan: entered promiscuous mode [ 100.706218][ T5820] veth1_vlan: entered promiscuous mode [ 100.715264][ T5824] veth1_vlan: entered promiscuous mode [ 100.752765][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.809904][ T5821] veth0_macvtap: entered promiscuous mode [ 100.839787][ T5821] veth1_macvtap: entered promiscuous mode [ 100.963315][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.972499][ T5820] veth0_macvtap: entered promiscuous mode [ 101.029968][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.038998][ T5820] veth1_macvtap: entered promiscuous mode [ 101.064799][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.082867][ T5824] veth0_macvtap: entered promiscuous mode [ 101.095485][ T1308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.106290][ T1308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.133356][ T1308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.150110][ T1308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.166078][ T5823] veth0_vlan: entered promiscuous mode [ 101.175063][ T5824] veth1_macvtap: entered promiscuous mode [ 101.206039][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.236741][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.246738][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.266935][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.309349][ T5823] veth1_vlan: entered promiscuous mode [ 101.345748][ T1308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.355435][ T1308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.382280][ T1308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.412653][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.420534][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.433525][ T1308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.446560][ T1308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.474180][ T1308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.499890][ T1308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.509700][ T1308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.545897][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.558038][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.579827][ T5830] veth0_vlan: entered promiscuous mode [ 101.605296][ T5822] veth0_vlan: entered promiscuous mode [ 101.696812][ T5830] veth1_vlan: entered promiscuous mode [ 101.703787][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.709108][ T5822] veth1_vlan: entered promiscuous mode [ 101.736189][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.744612][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.755740][ T5823] veth0_macvtap: entered promiscuous mode [ 101.824394][ T5823] veth1_macvtap: entered promiscuous mode [ 101.871949][ T5829] Bluetooth: hci1: command tx timeout [ 101.872064][ T5143] Bluetooth: hci2: command tx timeout [ 101.881806][ T5829] Bluetooth: hci3: command tx timeout [ 101.883415][ T52] Bluetooth: hci0: command tx timeout [ 101.888079][ T5827] Bluetooth: hci4: command tx timeout [ 101.904277][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.913874][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.952234][ T5827] Bluetooth: hci5: command tx timeout [ 101.993465][ T5973] 9pnet_virtio: no channels available for device syz [ 102.451300][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.459255][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.498176][ T5822] veth0_macvtap: entered promiscuous mode [ 102.499263][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.515627][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.527771][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.574504][ T5822] veth1_macvtap: entered promiscuous mode [ 102.585650][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.607123][ T5830] veth0_macvtap: entered promiscuous mode [ 102.652324][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.661068][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.691281][ T5830] veth1_macvtap: entered promiscuous mode [ 102.716201][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.728186][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.764389][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.845868][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.997209][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.257811][ T5984] use of bytesused == 0 is deprecated and will be removed in the future, [ 103.266485][ T5984] use the actual size instead. [ 103.313625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.412566][ T5985] input: syz0 as /devices/virtual/input/input5 [ 103.518364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.620858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.881813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.902351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.910892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.974281][ T5990] Bluetooth: MGMT ver 1.23 [ 104.001861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.010604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.031719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 104.323747][ T5981] loop0: detected capacity change from 0 to 32768 [ 104.405174][ T5981] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 104.413484][ T5981] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 104.505159][ T5981] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 104.525222][ T841] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 104.636854][ T841] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 104.723104][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.783752][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.813608][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.846286][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.944877][ T841] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 307ms [ 105.028041][ T841] gfs2: fsid=syz:syz.0: jid=0: Done [ 105.065385][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.074354][ T5981] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 105.111654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 105.253448][ T5970] IPVS: starting estimator thread 0... [ 105.619756][ T6002] IPVS: using max 25 ests per chain, 60000 per kthread [ 105.627926][ T5994] IPVS: starting estimator thread 0... [ 105.823554][ T6005] IPVS: using max 24 ests per chain, 57600 per kthread [ 106.011517][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.019467][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.087304][ T1137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.241463][ T1137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.245132][ T6008] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 106.397258][ T6008] syz_tun: entered promiscuous mode [ 106.421358][ T6008] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 106.454700][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.485016][ T1137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.569589][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.611123][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.808668][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.865220][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.702579][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.710421][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.802180][ T6021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.817566][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.982281][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.346289][ T6025] Zero length message leads to an empty skb [ 108.423665][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.677969][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.703840][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.774931][ T6046] loop0: detected capacity change from 0 to 32768 [ 110.898472][ T6050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.356380][ T6050] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 111.566094][ T6046] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.583541][ T6046] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.631340][ T6046] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 111.640738][ T6056] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.712400][ T6056] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.993976][ T6068] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 112.181964][ T6073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.677865][ T6073] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 112.947992][ T6082] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 113.016255][ T6056] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1303ms [ 113.080238][ T6056] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.102979][ T6046] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.738224][ T6095] input: syz0 as /devices/virtual/input/input7 [ 114.778708][ T6068] team0: Port device netdevsim0 added [ 115.760331][ T6082] team0: Port device netdevsim0 removed [ 115.837395][ T6082] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 117.012834][ T6114] loop0: detected capacity change from 0 to 131072 [ 117.038915][ T6114] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 117.047268][ T6114] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 117.062181][ T6114] F2FS-fs (loop0): invalid crc value [ 117.131163][ T6114] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.157718][ T6114] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 117.164948][ T6114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 117.644744][ T6124] overlayfs: missing 'lowerdir' [ 119.087009][ T6126] loop0: detected capacity change from 0 to 512 [ 119.160293][ T6126] EXT4-fs: Ignoring removed i_version option [ 119.313852][ T6126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.636802][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.782212][ T6140] lo speed is unknown, defaulting to 1000 [ 121.788367][ T6140] lo speed is unknown, defaulting to 1000 [ 121.796470][ T6140] lo speed is unknown, defaulting to 1000 [ 121.806533][ T6140] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.820709][ T6140] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.863395][ T6140] lo speed is unknown, defaulting to 1000 [ 121.924536][ T6140] lo speed is unknown, defaulting to 1000 [ 121.940888][ T6140] lo speed is unknown, defaulting to 1000 [ 121.948222][ T6140] lo speed is unknown, defaulting to 1000 [ 121.957528][ T6140] lo speed is unknown, defaulting to 1000 [ 121.965360][ T6140] lo speed is unknown, defaulting to 1000 [ 122.631065][ T6155] input: syz0 as /devices/virtual/input/input8 [ 123.426251][ T6160] 9pnet_virtio: no channels available for device syz [ 123.843320][ T9] libceph: connect (1)[c::]:6789 error -101 [ 123.960781][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 124.036385][ T6150] ceph: No mds server is up or the cluster is laggy [ 124.304603][ T9] libceph: connect (1)[c::]:6789 error -101 [ 124.745722][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 125.686974][ T6172] loop2: detected capacity change from 0 to 131072 [ 125.705625][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 125.711657][ T6172] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 125.719735][ T6172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.729165][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 125.831026][ T6172] F2FS-fs (loop2): invalid crc value [ 126.211301][ T6172] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 126.237855][ T6172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.245047][ T6172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 127.802938][ T6188] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.916263][ T6188] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 128.001126][ T6187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.623888][ T6195] trusted_key: syz.3.47 sent an empty control message without MSG_MORE. [ 129.992552][ T6205] loop0: detected capacity change from 0 to 16 [ 130.080196][ T6205] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 130.143969][ T6205] erofs (device loop0): mounted with root inode @ nid 36. [ 130.929142][ T6213] syz.0.49: attempt to access beyond end of device [ 130.929142][ T6213] loop0: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 130.944285][ T6213] syz.0.49: attempt to access beyond end of device [ 130.944285][ T6213] loop0: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 130.960685][ T6213] erofs (device loop0): read error -5 @ 0 of nid 36 [ 131.022900][ T6213] syz.0.49: attempt to access beyond end of device [ 131.022900][ T6213] loop0: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 131.038025][ T6213] syz.0.49: attempt to access beyond end of device [ 131.038025][ T6213] loop0: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 131.054907][ T6213] erofs (device loop0): read error -5 @ 0 of nid 36 [ 131.102515][ T6213] syz.0.49: attempt to access beyond end of device [ 131.102515][ T6213] loop0: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 131.118071][ T6213] syz.0.49: attempt to access beyond end of device [ 131.118071][ T6213] loop0: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 131.133715][ T6213] erofs (device loop0): read error -5 @ 0 of nid 36 [ 132.686675][ T6225] siw: device registration error -23 [ 133.848382][ T6227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 133.981514][ T6230] overlayfs: failed to resolve './file1/file0': -2 [ 134.279873][ T6227] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 134.390039][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.56'. [ 134.858374][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.56'. [ 136.175215][ T6246] process 'syz.0.57' launched './file0' with NULL argv: empty string added [ 137.293501][ T6255] fuse: Unknown parameter 'grou00000000000000000000' [ 137.895610][ T6264] siw: device registration error -23 [ 139.528171][ T5925] IPVS: starting estimator thread 0... [ 139.819277][ T6281] siw: device registration error -23 [ 139.862005][ T6279] IPVS: using max 27 ests per chain, 64800 per kthread [ 140.119862][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 140.231327][ T6291] netlink: 'syz.5.68': attribute type 10 has an invalid length. [ 140.342163][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 140.483433][ T6295] netlink: 'syz.5.68': attribute type 10 has an invalid length. [ 140.852838][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.924817][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.077885][ T6291] team0: Port device netdevsim0 added [ 141.238873][ T6302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.841236][ T6295] team0: Port device netdevsim0 removed [ 141.944647][ T6295] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 143.683427][ T6310] loop4: detected capacity change from 0 to 131072 [ 143.703999][ T6310] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 143.712460][ T6310] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.722621][ T6310] F2FS-fs (loop4): invalid crc value [ 143.809934][ T6310] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 143.824931][ T6310] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 143.833193][ T6310] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 144.103534][ T6310] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 144.112389][ T6310] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.930336][ T6324] loop4: detected capacity change from 0 to 16 [ 144.980571][ T6324] erofs (device loop4): mounted with root inode @ nid 36. [ 145.017168][ T6327] binder: 6326:6327 ioctl c0306201 0 returned -14 [ 145.451780][ T6329] syz.4.78: attempt to access beyond end of device [ 145.451780][ T6329] loop4: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 145.466724][ T6329] syz.4.78: attempt to access beyond end of device [ 145.466724][ T6329] loop4: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 145.483154][ T6329] erofs (device loop4): read error -5 @ 0 of nid 36 [ 145.533465][ T6329] syz.4.78: attempt to access beyond end of device [ 145.533465][ T6329] loop4: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 145.548413][ T6329] syz.4.78: attempt to access beyond end of device [ 145.548413][ T6329] loop4: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 145.563795][ T6329] erofs (device loop4): read error -5 @ 0 of nid 36 [ 145.615223][ T6329] syz.4.78: attempt to access beyond end of device [ 145.615223][ T6329] loop4: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 145.630463][ T6329] syz.4.78: attempt to access beyond end of device [ 145.630463][ T6329] loop4: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 145.646902][ T6329] erofs (device loop4): read error -5 @ 0 of nid 36 [ 146.599724][ T6334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.80'. [ 147.841124][ T6339] siw: device registration error -23 [ 152.113708][ T6367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.278066][ T6367] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 153.939776][ T6384] block device autoloading is deprecated and will be removed. [ 154.211916][ T6392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.896832][ T5827] Bluetooth: min 12 > max 0 [ 155.099880][ T6397] 9pnet_virtio: no channels available for device syz [ 156.941742][ T5827] Bluetooth: hci2: command tx timeout [ 160.089781][ T6436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.750248][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 160.759227][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 164.231392][ T6464] IPVS: sh: FWM 3 0x00000003 - no destination available [ 164.239302][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 171.518541][ T6521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.917988][ T6534] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.529474][ T6534] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 174.255382][ T6549] loop4: detected capacity change from 0 to 131072 [ 174.295662][ T6549] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 174.303842][ T6549] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.329713][ T6549] F2FS-fs (loop4): invalid crc value [ 174.394180][ T6549] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.404826][ T6549] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 174.411927][ T6549] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 174.452570][ T5970] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 176.147030][ T6564] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 176.536787][ T5970] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.671745][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.142'. [ 176.680628][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.142'. [ 177.259026][ T5970] usb 2-1: config 0 has no interface number 0 [ 177.266828][ T5970] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 177.279030][ T5970] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 177.298772][ T5970] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.470069][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.528641][ T5970] usb 2-1: config 0 descriptor?? [ 177.612145][ T6544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.880632][ T5970] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 177.933163][ T5970] usb 2-1: USB disconnect, device number 2 [ 178.035537][ T24] IPVS: starting estimator thread 0... [ 178.172176][ T6582] IPVS: using max 33 ests per chain, 79200 per kthread [ 185.101891][ T6625] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.320552][ T6624] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 186.026088][ T6620] loop0: detected capacity change from 0 to 131072 [ 186.071697][ T6620] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 186.079795][ T6620] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 186.112279][ T6620] F2FS-fs (loop0): invalid crc value [ 186.202728][ T6620] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 186.220462][ T6620] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 186.228348][ T6620] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 188.302352][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.159'. [ 188.320267][ T6629] netlink: 48 bytes leftover after parsing attributes in process `syz.5.159'. [ 188.939460][ T6629] geneve2: entered promiscuous mode [ 188.952519][ T6629] geneve2: entered allmulticast mode [ 194.713432][ T6697] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 195.176525][ T6693] loop1: detected capacity change from 0 to 131072 [ 195.231315][ T6693] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 195.239491][ T6693] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.249399][ T6693] F2FS-fs (loop1): invalid crc value [ 195.339304][ T6693] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 195.363594][ T6693] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 195.370655][ T6693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 196.591360][ T6716] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.201847][ T6716] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 199.702139][ T6738] input: syz0 as /devices/virtual/input/input11 [ 200.073705][ T6735] syz.3.180 (6735) used greatest stack depth: 15616 bytes left [ 202.137239][ T24] IPVS: starting estimator thread 0... [ 202.234154][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.255044][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.362645][ T6757] IPVS: using max 24 ests per chain, 57600 per kthread [ 204.411877][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.194'. [ 204.452158][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.194'. [ 204.479078][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.194'. [ 204.730642][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.194'. [ 204.762783][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.194'. [ 204.798476][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.194'. [ 207.081990][ T6803] fuse: Bad value for 'fd' [ 209.589923][ T6828] input: syz0 as /devices/virtual/input/input12 [ 212.240451][ T6840] netlink: 3 bytes leftover after parsing attributes in process `syz.3.211'. [ 212.356919][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 212.460216][ T6840] batadv1: entered allmulticast mode [ 213.657180][ T6862] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 214.256123][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.221'. [ 214.274704][ T6872] netlink: 108 bytes leftover after parsing attributes in process `syz.1.221'. [ 214.290831][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.221'. [ 214.302934][ T6872] netlink: 108 bytes leftover after parsing attributes in process `syz.1.221'. [ 214.312267][ T6872] netlink: 84 bytes leftover after parsing attributes in process `syz.1.221'. [ 214.972589][ T6871] fuse: Bad value for 'fd' [ 214.999016][ T6874] binder: 6873:6874 ioctl c0306201 0 returned -14 [ 216.319132][ T6887] input: syz0 as /devices/virtual/input/input13 [ 216.864918][ T6890] loop2: detected capacity change from 0 to 16 [ 216.962487][ T6890] erofs (device loop2): mounted with root inode @ nid 36. [ 217.579001][ T6892] syz.2.225: attempt to access beyond end of device [ 217.579001][ T6892] loop2: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 217.595181][ T6892] syz.2.225: attempt to access beyond end of device [ 217.595181][ T6892] loop2: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 217.611436][ T6892] erofs (device loop2): read error -5 @ 0 of nid 36 [ 217.676678][ T6892] syz.2.225: attempt to access beyond end of device [ 217.676678][ T6892] loop2: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 217.692239][ T6892] syz.2.225: attempt to access beyond end of device [ 217.692239][ T6892] loop2: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 217.708870][ T6892] erofs (device loop2): read error -5 @ 0 of nid 36 [ 217.769884][ T6892] syz.2.225: attempt to access beyond end of device [ 217.769884][ T6892] loop2: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 217.785491][ T6892] syz.2.225: attempt to access beyond end of device [ 217.785491][ T6892] loop2: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 217.802549][ T6892] erofs (device loop2): read error -5 @ 0 of nid 36 [ 219.956110][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 219.962426][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 219.962446][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 219.976738][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 219.982783][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 219.988830][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 221.702511][ T6926] binder: 6925:6926 ioctl c0306201 0 returned -14 [ 222.788902][ T6942] fuse: Bad value for 'fd' [ 227.502741][ T6986] input: syz0 as /devices/virtual/input/input15 [ 228.412487][ T6989] binder: 6987:6989 ioctl c0306201 0 returned -14 [ 229.564376][ T7000] loop0: detected capacity change from 0 to 1024 [ 229.586975][ T7000] ======================================================= [ 229.586975][ T7000] WARNING: The mand mount option has been deprecated and [ 229.586975][ T7000] and is ignored by this kernel. Remove the mand [ 229.586975][ T7000] option from the mount to silence this warning. [ 229.586975][ T7000] ======================================================= [ 229.622180][ T7000] EXT4-fs: Ignoring removed nobh option [ 229.631873][ T7000] EXT4-fs: Ignoring removed bh option [ 229.706255][ T7000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.013993][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 230.146689][ T7009] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.257: Allocating blocks 385-513 which overlap fs metadata [ 230.425117][ T6999] EXT4-fs (loop0): pa ffff888030d9f1d0: logic 16, phys. 129, len 24 [ 230.433938][ T6999] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 230.591143][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.182647][ T7022] faux_driver vgem: [drm] Unknown color mode 511; guessing buffer size. [ 233.610867][ T7028] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 235.721652][ T5994] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 236.256959][ T5994] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 236.266152][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.276296][ T5994] usb 4-1: Product: syz [ 236.280467][ T5994] usb 4-1: Manufacturer: syz [ 236.289271][ T5994] usb 4-1: SerialNumber: syz [ 236.299123][ T5994] usb 4-1: config 0 descriptor?? [ 238.438104][ T5994] int51x1 4-1:0.0: probe with driver int51x1 failed with error -71 [ 238.453042][ T5994] usb 4-1: USB disconnect, device number 2 [ 238.815160][ T7071] loop3: detected capacity change from 0 to 16 [ 239.263890][ T7071] erofs (device loop3): mounted with root inode @ nid 36. [ 240.982838][ T7078] syz.3.276: attempt to access beyond end of device [ 240.982838][ T7078] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 240.998442][ T7078] syz.3.276: attempt to access beyond end of device [ 240.998442][ T7078] loop3: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 241.013886][ T7078] erofs (device loop3): read error -5 @ 0 of nid 36 [ 241.026976][ T7078] syz.3.276: attempt to access beyond end of device [ 241.026976][ T7078] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 241.040812][ T7078] syz.3.276: attempt to access beyond end of device [ 241.040812][ T7078] loop3: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 241.055780][ T7078] erofs (device loop3): read error -5 @ 0 of nid 36 [ 241.719586][ T7084] netlink: 3 bytes leftover after parsing attributes in process `syz.0.280'. [ 241.734050][ T7084] batadv1: entered allmulticast mode [ 244.573923][ T7111] syz.0.287 uses obsolete (PF_INET,SOCK_PACKET) [ 244.585889][ T7111] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 244.596272][ T7111] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 245.496105][ T6168] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 245.687713][ T6168] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 245.796620][ T6168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.870152][ T6168] usb 2-1: Product: syz [ 245.892107][ T6168] usb 2-1: Manufacturer: syz [ 245.914263][ T6168] usb 2-1: SerialNumber: syz [ 245.949075][ T6168] usb 2-1: config 0 descriptor?? [ 246.691190][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 246.700415][ T7127] netlink: 108 bytes leftover after parsing attributes in process `syz.2.292'. [ 246.713020][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 246.723324][ T7127] netlink: 108 bytes leftover after parsing attributes in process `syz.2.292'. [ 246.732391][ T7127] netlink: 84 bytes leftover after parsing attributes in process `syz.2.292'. [ 247.249527][ T6168] int51x1 2-1:0.0: probe with driver int51x1 failed with error -71 [ 247.435584][ T6168] usb 2-1: USB disconnect, device number 3 [ 248.614486][ T6168] lo speed is unknown, defaulting to 1000 [ 248.623982][ T7135] ceph: No mds server is up or the cluster is laggy [ 248.641838][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 248.649105][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 249.738554][ T7148] input: syz0 as /devices/virtual/input/input16 [ 250.782571][ T7153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.054858][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.5.305'. [ 255.063960][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.5.305'. [ 255.075586][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.5.305'. [ 255.512110][ T7189] input: syz0 as /devices/virtual/input/input17 [ 260.116964][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.315'. [ 260.126019][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.315'. [ 260.135762][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.315'. [ 261.987111][ T7238] loop4: detected capacity change from 0 to 256 [ 262.978359][ T7238] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 263.636214][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.648513][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.574597][ T7249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.927780][ T7265] input: syz0 as /devices/virtual/input/input18 [ 267.732733][ T7278] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.360326][ T7278] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 269.452953][ T6066] IPVS: starting estimator thread 0... [ 270.784528][ T7292] IPVS: using max 33 ests per chain, 79200 per kthread [ 276.247441][ T7350] loop4: detected capacity change from 0 to 131072 [ 276.277223][ T7350] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 276.285412][ T7350] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 276.297220][ T7350] F2FS-fs (loop4): invalid crc value [ 276.596115][ T7350] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 276.641033][ T7350] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 276.648248][ T7350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 280.233336][ T7377] fuse: Unknown parameter 'group_id00000000000000000000' [ 280.494133][ T7384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.058241][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 281.067345][ T7386] netlink: 108 bytes leftover after parsing attributes in process `syz.4.356'. [ 281.078503][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 281.089627][ T7386] netlink: 108 bytes leftover after parsing attributes in process `syz.4.356'. [ 281.098858][ T7386] netlink: 84 bytes leftover after parsing attributes in process `syz.4.356'. [ 281.842563][ T7394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.342283][ T7407] loop4: detected capacity change from 0 to 1024 [ 284.062892][ T7407] EXT4-fs: Ignoring removed nobh option [ 284.871062][ T7407] EXT4-fs: Ignoring removed bh option [ 285.167963][ T7407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.958770][ T7422] ceph: No mds server is up or the cluster is laggy [ 285.989568][ T31] audit: type=1800 audit(1767073752.350:2): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.361" name="bus" dev="ramfs" ino=13081 res=0 errno=0 [ 286.050150][ T5887] libceph: connect (1)[c::]:6789 error -97 [ 286.313617][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 286.321450][ T7428] fuse: Unknown parameter 'user_i00000000000000000000' [ 286.470750][ T7431] siw: device registration error -23 [ 286.713889][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.557699][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.373'. [ 287.635316][ T7446] netlink: 'syz.5.373': attribute type 10 has an invalid length. [ 287.692547][ T7446] syz_tun: entered promiscuous mode [ 287.965864][ T7446] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 288.802182][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.822128][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.832495][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.844241][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.854243][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 288.999331][ T7455] lo speed is unknown, defaulting to 1000 [ 289.030201][ T31] audit: type=1800 audit(1767073755.390:3): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.376" name="bus" dev="ramfs" ino=13436 res=0 errno=0 [ 290.516049][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.542477][ T7474] binder: 7473:7474 ioctl c0306201 0 returned -14 [ 290.911723][ T52] Bluetooth: hci6: command tx timeout [ 292.294041][ T7486] loop2: detected capacity change from 0 to 1024 [ 292.725769][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.756593][ T7486] EXT4-fs: Ignoring removed nobh option [ 292.802183][ T7455] chnl_net:caif_netlink_parms(): no params data found [ 292.810313][ T7486] EXT4-fs: Ignoring removed bh option [ 292.854779][ T7482] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 292.866028][ T7482] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 293.002451][ T52] Bluetooth: hci6: command tx timeout [ 293.082687][ T7486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.188899][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.041375][ T7494] loop1: detected capacity change from 0 to 131072 [ 294.051028][ T7494] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 294.059226][ T7494] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 294.068599][ T7494] F2FS-fs (loop1): invalid crc value [ 294.168851][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 294.453697][ T7494] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 294.485691][ T7494] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 294.492827][ T7494] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 294.554160][ T7502] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.382: Allocating blocks 385-513 which overlap fs metadata [ 294.822780][ T7502] EXT4-fs (loop2): pa ffff888030d9f0e8: logic 16, phys. 129, len 24 [ 294.830877][ T7502] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 294.931990][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.079720][ T52] Bluetooth: hci6: command tx timeout [ 295.308348][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.783655][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.853141][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.860405][ T7455] bridge_slave_0: entered allmulticast mode [ 295.938230][ T7455] bridge_slave_0: entered promiscuous mode [ 295.989106][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.032386][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.074347][ T7455] bridge_slave_1: entered allmulticast mode [ 296.116169][ T7455] bridge_slave_1: entered promiscuous mode [ 296.897628][ T7455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.912102][ T31] audit: type=1800 audit(1767073763.280:4): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.390" name="bus" dev="ramfs" ino=13578 res=0 errno=0 [ 297.191667][ T52] Bluetooth: hci6: command tx timeout [ 297.923194][ T7455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.973889][ T7529] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 297.984715][ T7529] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 297.994345][ T7529] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 298.219535][ T13] bridge_slave_1: left allmulticast mode [ 298.246413][ T13] bridge_slave_1: left promiscuous mode [ 298.273692][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.325423][ T13] bridge_slave_0: left allmulticast mode [ 298.339028][ T7532] afs: Bad value for 'flock' [ 298.341389][ T13] bridge_slave_0: left promiscuous mode [ 298.417309][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.825066][ T7552] 9pnet_virtio: no channels available for device syz [ 302.887286][ T7555] loop4: detected capacity change from 0 to 131072 [ 302.905896][ T7555] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 302.914078][ T7555] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 302.926058][ T7555] F2FS-fs (loop4): invalid crc value [ 303.104478][ T7555] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 303.125262][ T7555] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 303.132899][ T7555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 303.192706][ T7560] netlink: 96 bytes leftover after parsing attributes in process `syz.5.404'. [ 304.658741][ T7577] siw: device registration error -23 [ 306.144118][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.256608][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.303277][ T13] bond0 (unregistering): Released all slaves [ 306.545827][ T7455] team0: Port device team_slave_0 added [ 306.629986][ T7574] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2 [ 306.640224][ T7574] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter [ 306.663544][ T7455] team0: Port device team_slave_1 added [ 308.109169][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.179775][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.209547][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.536761][ T7608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.501874][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.508869][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.565255][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.816903][ T13] hsr_slave_0: left promiscuous mode [ 309.845888][ T7620] loop2: detected capacity change from 0 to 1024 [ 309.853738][ T13] hsr_slave_1: left promiscuous mode [ 310.062799][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.071253][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.906740][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.939483][ T7620] netlink: 96 bytes leftover after parsing attributes in process `syz.2.417'. [ 310.968615][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.119934][ T13] veth1_macvtap: left promiscuous mode [ 311.133952][ T13] veth0_macvtap: left promiscuous mode [ 311.141280][ T13] veth1_vlan: left promiscuous mode [ 311.147415][ T13] veth0_vlan: left promiscuous mode [ 311.929688][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 311.992997][ T7644] netlink: 'syz.4.422': attribute type 5 has an invalid length. [ 312.066526][ T7644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.422'. [ 312.128672][ T6018] hfsplus: b-tree write err: -5, ino 4 [ 312.175183][ T7637] loop1: detected capacity change from 0 to 131072 [ 312.183525][ T7637] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 312.192193][ T7637] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 312.201330][ T7637] F2FS-fs (loop1): invalid crc value [ 312.837383][ T7637] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 312.853164][ T7637] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 312.860280][ T7637] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 313.339498][ T7658] fuse: Bad value for 'fd' [ 314.509670][ T7670] siw: device registration error -23 [ 316.036229][ T13] team0 (unregistering): Port device team_slave_1 removed [ 316.116560][ T13] team0 (unregistering): Port device team_slave_0 removed [ 317.282004][ T7677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.978565][ T7683] 9pnet_virtio: no channels available for device syz [ 318.456885][ T7644] geneve2: entered promiscuous mode [ 318.485966][ T7644] geneve2: entered allmulticast mode [ 318.512656][ T985] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.541605][ T985] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.607013][ T985] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.632610][ T985] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.667931][ T985] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 318.678488][ T7686] netlink: 96 bytes leftover after parsing attributes in process `syz.5.432'. [ 318.688523][ T985] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 318.959759][ T985] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 319.055667][ T985] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 319.110014][ T7455] hsr_slave_0: entered promiscuous mode [ 319.824172][ T7455] hsr_slave_1: entered promiscuous mode [ 319.832623][ T7455] debugfs: 'hsr0' already exists in 'hsr' [ 319.838635][ T7455] Cannot create hsr debugfs directory [ 320.338458][ T13] IPVS: stop unused estimator thread 0... [ 320.662842][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 321.984242][ T7455] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.198480][ T7455] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.265254][ T7455] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 322.280960][ T7722] siw: device registration error -23 [ 322.324680][ T7455] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.773814][ T7064] libceph: connect (1)[c::]:6789 error -101 [ 324.779880][ T7064] libceph: mon0 (1)[c::]:6789 connect error [ 324.786959][ T7737] ceph: No mds server is up or the cluster is laggy [ 325.075978][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.085932][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.158588][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.334554][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.460609][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.467863][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.690006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.697199][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.707130][ T7754] loop4: detected capacity change from 0 to 1024 [ 326.640913][ T7754] netlink: 96 bytes leftover after parsing attributes in process `syz.4.446'. [ 327.025757][ T12] hfsplus: b-tree write err: -5, ino 4 [ 327.323781][ T7770] netdevsim netdevsim1: Direct firmware load for lookup_extent_enter failed with error -2 [ 327.334118][ T7770] netdevsim netdevsim1: Falling back to sysfs fallback for: lookup_extent_enter [ 329.031873][ T7788] ceph: No mds server is up or the cluster is laggy [ 329.241355][ T7064] libceph: connect (1)[c::]:6789 error -101 [ 329.738262][ T7064] libceph: mon0 (1)[c::]:6789 connect error [ 329.785476][ T7796] fuse: Bad value for 'fd' [ 331.678458][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.376882][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 334.417457][ T7840] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 335.235979][ T7851] loop4: detected capacity change from 0 to 1024 [ 335.236162][ T7455] veth0_vlan: entered promiscuous mode [ 335.368583][ T7851] netlink: 96 bytes leftover after parsing attributes in process `syz.4.462'. [ 335.491927][ T7455] veth1_vlan: entered promiscuous mode [ 335.736659][ T7455] veth0_macvtap: entered promiscuous mode [ 335.807181][ T7455] veth1_macvtap: entered promiscuous mode [ 335.861112][ T6062] hfsplus: b-tree write err: -5, ino 4 [ 335.977346][ T7865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.381307][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.418846][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.539698][ T2924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.613202][ T6092] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.667765][ T6092] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.802223][ T6092] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.555357][ T7879] loop1: detected capacity change from 0 to 512 [ 338.058503][ T7879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.071700][ T7879] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.958463][ T6199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.003991][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.221587][ T6199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.332763][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.340640][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.343467][ T7884] netlink: 3 bytes leftover after parsing attributes in process `syz.0.466'. [ 341.505908][ T31] audit: type=1800 audit(1767073807.870:5): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.472" name="bus" dev="ramfs" ino=15320 res=0 errno=0 [ 341.859158][ T7884] batadv1: entered allmulticast mode [ 342.304076][ T7923] loop4: detected capacity change from 0 to 1024 [ 342.366685][ T7923] netlink: 96 bytes leftover after parsing attributes in process `syz.4.480'. [ 343.390610][ T7937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.723799][ T6199] hfsplus: b-tree write err: -5, ino 4 [ 343.853407][ T31] audit: type=1800 audit(1767073810.210:6): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.375" name="bus" dev="ramfs" ino=15407 res=0 errno=0 [ 344.092972][ T7946] netlink: 'syz.1.485': attribute type 10 has an invalid length. [ 344.153712][ T7946] team0: Device ipvlan1 failed to register rx_handler [ 348.099216][ T7983] ceph: No mds server is up or the cluster is laggy [ 348.113458][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 348.144262][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 348.683973][ T7981] netlink: 96 bytes leftover after parsing attributes in process `syz.5.496'. [ 349.661772][ T8001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.814222][ T8035] binder: 8033:8035 ioctl c0306201 0 returned -14 [ 353.380323][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 353.389373][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 355.742069][ T8051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.728172][ T8062] loop1: detected capacity change from 0 to 1024 [ 356.781855][ T8062] netlink: 96 bytes leftover after parsing attributes in process `syz.1.514'. [ 357.105352][ T6117] hfsplus: b-tree write err: -5, ino 4 [ 357.364304][ T8071] loop6: detected capacity change from 0 to 1024 [ 357.423885][ T8071] EXT4-fs: Ignoring removed nobh option [ 357.447516][ T8073] netlink: 'syz.1.517': attribute type 10 has an invalid length. [ 357.488817][ T8071] EXT4-fs: Ignoring removed bh option [ 357.932942][ T8078] ceph: No mds server is up or the cluster is laggy [ 358.274667][ T8073] team0: Device ipvlan1 failed to register rx_handler [ 358.282891][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 358.299278][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 358.818495][ T8071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.926980][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.518'. [ 359.946283][ T8092] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.518: Allocating blocks 385-513 which overlap fs metadata [ 360.104141][ T6080] libceph: connect (1)[c::]:6789 error -101 [ 360.111135][ T6080] libceph: mon0 (1)[c::]:6789 connect error [ 360.215565][ T8068] EXT4-fs (loop6): pa ffff888030d9f000: logic 16, phys. 129, len 24 [ 360.223727][ T8068] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 360.546796][ T7455] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.734131][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.526'. [ 362.743423][ T8125] netlink: 108 bytes leftover after parsing attributes in process `syz.5.526'. [ 362.755025][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.526'. [ 362.765036][ T8125] netlink: 108 bytes leftover after parsing attributes in process `syz.5.526'. [ 362.774115][ T8125] netlink: 84 bytes leftover after parsing attributes in process `syz.5.526'. [ 364.255006][ T8139] loop4: detected capacity change from 0 to 1024 [ 364.332742][ T8139] netlink: 96 bytes leftover after parsing attributes in process `syz.4.529'. [ 364.609576][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.637833][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.668235][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.677096][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.687145][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.880516][ T8143] lo speed is unknown, defaulting to 1000 [ 364.949681][ T37] hfsplus: b-tree write err: -5, ino 4 [ 366.566149][ T8166] fuse: Unknown parameter 'group_i00000000000000000000' [ 366.763990][ T52] Bluetooth: hci5: command tx timeout [ 368.833422][ T52] Bluetooth: hci5: command tx timeout [ 370.314862][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 370.911614][ T52] Bluetooth: hci5: command tx timeout [ 371.046998][ T8190] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 371.056519][ T8190] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 371.066297][ T8190] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 371.775586][ T8198] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 371.785000][ T8198] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 371.794936][ T8198] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 372.158169][ T8204] loop6: detected capacity change from 0 to 1024 [ 372.176171][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.270446][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.6.542'. [ 372.605438][ T6018] hfsplus: b-tree write err: -5, ino 4 [ 372.608415][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.991603][ T52] Bluetooth: hci5: command tx timeout [ 373.239001][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.312031][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.329516][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.371244][ T8143] bridge_slave_0: entered allmulticast mode [ 373.417103][ T8143] bridge_slave_0: entered promiscuous mode [ 373.455792][ T8226] siw: device registration error -23 [ 373.898014][ T37] bond0: (slave netdevsim0): Releasing backup interface [ 374.732893][ T8233] ceph: No mds server is up or the cluster is laggy [ 374.740416][ T5910] libceph: connect (1)[c::]:6789 error -97 [ 374.771011][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 374.794482][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.072720][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.204369][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.487085][ T8143] bridge_slave_1: entered allmulticast mode [ 375.738506][ T8143] bridge_slave_1: entered promiscuous mode [ 375.898735][ T8243] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 375.909106][ T8243] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 375.919021][ T8243] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 377.124727][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.140183][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.153272][ T8268] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 378.163417][ T8268] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 378.173030][ T8268] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 379.209645][ T8279] loop4: detected capacity change from 0 to 1024 [ 379.279388][ T8279] netlink: 96 bytes leftover after parsing attributes in process `syz.4.555'. [ 380.222250][ T8283] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 380.530572][ T8143] team0: Port device team_slave_0 added [ 380.639444][ T8143] team0: Port device team_slave_1 added [ 380.686492][ T8291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.721936][ T37] bridge_slave_1: left allmulticast mode [ 380.727625][ T37] bridge_slave_1: left promiscuous mode [ 380.754905][ T6280] hfsplus: b-tree write err: -5, ino 4 [ 380.779024][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.101219][ T37] bridge_slave_0: left allmulticast mode [ 381.132512][ T37] bridge_slave_0: left promiscuous mode [ 381.139830][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.389368][ T8304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 383.968938][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.982181][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.000728][ T37] bond0 (unregistering): Released all slaves [ 384.159079][ T8305] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 384.168636][ T8305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 384.178288][ T8305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 386.093230][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.100245][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.376568][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.393802][ T8334] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 386.403265][ T8334] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 386.412880][ T8334] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 387.170322][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.181512][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.209561][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.271625][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.355436][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.629901][ T8143] hsr_slave_0: entered promiscuous mode [ 388.672826][ T8143] hsr_slave_1: entered promiscuous mode [ 388.698421][ T8354] loop4: detected capacity change from 0 to 1024 [ 388.699503][ T8143] debugfs: 'hsr0' already exists in 'hsr' [ 388.767886][ T8143] Cannot create hsr debugfs directory [ 388.811859][ T8354] netlink: 96 bytes leftover after parsing attributes in process `syz.4.571'. [ 388.925700][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.572'. [ 389.307614][ T3463] hfsplus: b-tree write err: -5, ino 4 [ 389.795282][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 389.824712][ T8376] netlink: 'syz.5.574': attribute type 5 has an invalid length. [ 389.880289][ T8373] binder: Unknown parameter 'statüñÿÿÿÿÿÿ' [ 389.911750][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.574'. [ 391.123290][ T8389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 391.243358][ T8376] geneve3: entered promiscuous mode [ 391.313751][ T8376] geneve3: entered allmulticast mode [ 391.963137][ T5989] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 391.991641][ T5989] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 392.087346][ T5989] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 392.141683][ T5989] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 392.812236][ T37] hsr_slave_0: left promiscuous mode [ 393.499784][ T37] hsr_slave_1: left promiscuous mode [ 393.506254][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.516597][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.537362][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.556840][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.604753][ T37] veth1_macvtap: left promiscuous mode [ 393.628702][ T37] veth0_macvtap: left promiscuous mode [ 393.634703][ T37] veth1_vlan: left promiscuous mode [ 393.653671][ T37] veth0_vlan: left promiscuous mode [ 396.030724][ T37] team0 (unregistering): Port device team_slave_1 removed [ 396.069118][ T37] team0 (unregistering): Port device team_slave_0 removed [ 396.519621][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 396.528975][ T8403] netlink: 108 bytes leftover after parsing attributes in process `syz.1.580'. [ 396.540456][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 396.549555][ T8403] netlink: 108 bytes leftover after parsing attributes in process `syz.1.580'. [ 396.558625][ T8403] netlink: 84 bytes leftover after parsing attributes in process `syz.1.580'. [ 396.609599][ T8411] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 396.619066][ T8411] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 396.628793][ T8411] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 396.741690][ T7064] lo speed is unknown, defaulting to 1000 [ 396.747499][ T7064] infiniband syz0: ib_query_port failed (-19) [ 398.093053][ T8426] fuse: Bad value for 'fd' [ 398.335654][ T8421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.971054][ T8143] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.033059][ T8143] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.401934][ T8143] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.684297][ T37] IPVS: stop unused estimator thread 0... [ 399.767434][ T8143] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.748730][ T8474] netlink: 3 bytes leftover after parsing attributes in process `syz.0.595'. [ 403.352685][ T8474] batadv1: entered allmulticast mode [ 404.407092][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.469743][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.512065][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.519242][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.730116][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.737297][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.349476][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 405.358484][ T8493] netlink: 108 bytes leftover after parsing attributes in process `syz.4.598'. [ 405.367882][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 405.377097][ T8493] netlink: 108 bytes leftover after parsing attributes in process `syz.4.598'. [ 405.386176][ T8493] netlink: 84 bytes leftover after parsing attributes in process `syz.4.598'. [ 405.665163][ T8495] No source specified [ 408.874252][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.130864][ T8523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.350540][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 412.668709][ T8143] veth0_vlan: entered promiscuous mode [ 412.756609][ T8143] veth1_vlan: entered promiscuous mode [ 413.010101][ T8143] veth0_macvtap: entered promiscuous mode [ 413.774628][ T8143] veth1_macvtap: entered promiscuous mode [ 414.197847][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 414.784981][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.844673][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.947509][ T2965] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.004232][ T2965] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.158637][ T2965] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.175140][ T2965] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.994718][ T6199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.019954][ T6199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.611699][ T8602] lo speed is unknown, defaulting to 1000 [ 416.618515][ T8602] lo speed is unknown, defaulting to 1000 [ 416.642512][ T8602] lo speed is unknown, defaulting to 1000 [ 416.888170][ T8602] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 417.202313][ T8602] lo speed is unknown, defaulting to 1000 [ 417.209625][ T8602] lo speed is unknown, defaulting to 1000 [ 417.216908][ T8602] lo speed is unknown, defaulting to 1000 [ 417.224223][ T8602] lo speed is unknown, defaulting to 1000 [ 417.231376][ T8602] lo speed is unknown, defaulting to 1000 [ 417.239910][ T8602] lo speed is unknown, defaulting to 1000 [ 417.322029][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.361822][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.034768][ T8595] netlink: 3 bytes leftover after parsing attributes in process `syz.6.619'. [ 418.049254][ T8595] batadv1: entered allmulticast mode [ 418.551581][ T6117] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 421.522638][ T8639] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 421.780183][ T8658] fuse: Bad value for 'fd' [ 422.616660][ T8667] netdevsim netdevsim7: Direct firmware load for lookup_extent_enter failed with error -2 [ 422.626968][ T8667] netdevsim netdevsim7: Falling back to sysfs fallback for: lookup_extent_enter [ 423.761771][ T8678] No source specified [ 425.044545][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 425.051269][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 425.231606][ T8686] ceph: No mds server is up or the cluster is laggy [ 425.831043][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 426.502545][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 427.119299][ T8684] ALSA: mixer_oss: invalid OSS volume '' [ 428.072095][ T5970] libceph: connect (1)[c::]:6789 error -101 [ 428.082584][ T5970] libceph: mon0 (1)[c::]:6789 connect error [ 431.430807][ T8735] 9pnet_virtio: no channels available for device syz [ 432.702592][ T8741] fuse: Bad value for 'fd' [ 436.632485][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.127513][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.158263][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.167658][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.189311][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.300170][ T8771] lo speed is unknown, defaulting to 1000 [ 437.584178][ T8757] netlink: 3 bytes leftover after parsing attributes in process `syz.7.646'. [ 437.760675][ T8757] batadv1: entered allmulticast mode [ 438.322748][ T5823] bond0: (slave syz_tun): Releasing backup interface [ 439.312914][ T52] Bluetooth: hci1: command tx timeout [ 439.629293][ T4433] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.744862][ T4433] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.758771][ T4433] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 440.246977][ T4433] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.281655][ T4433] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.333023][ T4433] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 441.392368][ T52] Bluetooth: hci1: command tx timeout [ 442.970746][ T4433] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.319214][ T4433] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.362240][ T4433] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 443.474752][ T52] Bluetooth: hci1: command tx timeout [ 444.658818][ T8817] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 444.668998][ T8817] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 445.894122][ T4433] bond0: (slave netdevsim0): Releasing backup interface [ 445.904539][ T4433] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.914875][ T4433] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.926957][ T4433] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.015331][ T52] Bluetooth: hci1: command tx timeout [ 446.648189][ T8851] siw: device registration error -23 [ 447.534847][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 447.852687][ T4433] bridge_slave_1: left allmulticast mode [ 447.881467][ T4433] bridge_slave_1: left promiscuous mode [ 447.887228][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.968515][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.974934][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.125722][ T4433] bridge_slave_0: left allmulticast mode [ 448.170034][ T4433] bridge_slave_0: left promiscuous mode [ 448.198856][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.012533][ T8866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.414741][ T6096] IPVS: starting estimator thread 0... [ 451.511658][ T8890] IPVS: using max 28 ests per chain, 67200 per kthread [ 451.900905][ T8894] fuse: Invalid rootmode [ 454.845138][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.898377][ T8909] atomic_op ffff8880285b1198 conn xmit_atomic 0000000000000000 [ 454.947582][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.997509][ T4433] bond0 (unregistering): Released all slaves [ 455.697582][ T8919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.698055][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.957984][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.972472][ T8771] bridge_slave_0: entered allmulticast mode [ 455.986639][ T8771] bridge_slave_0: entered promiscuous mode [ 456.282682][ T8920] fuse: Bad value for 'rootmode' [ 457.414233][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.441640][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.468121][ T8771] bridge_slave_1: entered allmulticast mode [ 457.544253][ T8771] bridge_slave_1: entered promiscuous mode [ 457.838123][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.686'. [ 459.115252][ T8944] No source specified [ 460.458846][ T4433] hsr_slave_0: left promiscuous mode [ 460.469183][ T4433] hsr_slave_1: left promiscuous mode [ 460.495284][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.527431][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.560170][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.571111][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.665010][ T4433] veth1_macvtap: left promiscuous mode [ 460.710910][ T4433] veth0_macvtap: left promiscuous mode [ 460.760436][ T4433] veth1_vlan: left promiscuous mode [ 460.779138][ T4433] veth0_vlan: left promiscuous mode [ 461.889325][ T52] Bluetooth: Wrong link type (-57) [ 461.896720][ T8959] 9pnet_virtio: no channels available for device syz [ 464.591949][ T8981] fuse: Bad value for 'fd' [ 465.450386][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 465.569382][ T8991] atomic_op ffff888053fcd198 conn xmit_atomic 0000000000000000 [ 465.618583][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 467.450463][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.504039][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.521351][ T5873] lo speed is unknown, defaulting to 1000 [ 467.741546][ T5873] infiniband syz0: ib_query_port failed (-19) [ 469.064950][ T9007] lo speed is unknown, defaulting to 1000 [ 469.071347][ T9007] lo speed is unknown, defaulting to 1000 [ 469.081917][ T9007] lo speed is unknown, defaulting to 1000 [ 469.180666][ T9007] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 469.210184][ T9007] lo speed is unknown, defaulting to 1000 [ 470.107051][ T9006] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 470.117320][ T9006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 470.127001][ T9006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 470.222978][ T9007] lo speed is unknown, defaulting to 1000 [ 470.230652][ T9007] lo speed is unknown, defaulting to 1000 [ 470.241151][ T9007] lo speed is unknown, defaulting to 1000 [ 470.248498][ T9007] lo speed is unknown, defaulting to 1000 [ 470.255661][ T9007] lo speed is unknown, defaulting to 1000 [ 470.425104][ T8771] team0: Port device team_slave_0 added [ 470.443323][ T8771] team0: Port device team_slave_1 added [ 471.067193][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 471.077877][ T9033] netlink: 108 bytes leftover after parsing attributes in process `syz.4.707'. [ 471.087752][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 471.096976][ T9033] netlink: 108 bytes leftover after parsing attributes in process `syz.4.707'. [ 471.106142][ T9033] netlink: 84 bytes leftover after parsing attributes in process `syz.4.707'. [ 471.140570][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.204325][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.472584][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.372110][ T9041] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 472.505405][ T4433] IPVS: stop unused estimator thread 0... [ 472.533560][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.540552][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.513955][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.673660][ T8771] hsr_slave_0: entered promiscuous mode [ 474.727626][ T8771] hsr_slave_1: entered promiscuous mode [ 478.130070][ T9107] No source specified [ 479.894910][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 479.904004][ T9116] netlink: 108 bytes leftover after parsing attributes in process `syz.1.723'. [ 479.913252][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 479.922293][ T9116] netlink: 108 bytes leftover after parsing attributes in process `syz.1.723'. [ 479.931347][ T9116] netlink: 84 bytes leftover after parsing attributes in process `syz.1.723'. [ 480.080681][ T8771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 480.199609][ T8771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 480.259203][ T8771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 480.299079][ T8771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 480.677345][ T9130] atomic_op ffff88807a896998 conn xmit_atomic 0000000000000000 [ 481.867807][ T9143] siw: device registration error -23 [ 483.959180][ T9159] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 484.170683][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.499205][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.503228][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.510415][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.693183][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.700432][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.992228][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 491.108790][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.658990][ T9230] netdevsim netdevsim7: Direct firmware load for lookup_extent_enter failed with error -2 [ 491.669132][ T9230] netdevsim netdevsim7: Falling back to sysfs fallback for: lookup_extent_enter [ 493.057067][ T9240] 9pnet_virtio: no channels available for device syz [ 493.308722][ T9251] netlink: 3 bytes leftover after parsing attributes in process `syz.4.741'. [ 493.340503][ T9251] batadv1: entered allmulticast mode [ 493.944000][ T6168] libceph: connect (1)[c::]:6789 error -97 [ 493.949989][ T6168] libceph: mon0 (1)[c::]:6789 connect error [ 494.003886][ T8771] veth0_vlan: entered promiscuous mode [ 494.117166][ T8771] veth1_vlan: entered promiscuous mode [ 494.204189][ T9259] ceph: No mds server is up or the cluster is laggy [ 494.464803][ T6168] libceph: connect (1)[c::]:6789 error -97 [ 494.470961][ T6168] libceph: mon0 (1)[c::]:6789 connect error [ 495.145480][ T8771] veth0_macvtap: entered promiscuous mode [ 495.286314][ T8771] veth1_macvtap: entered promiscuous mode [ 495.358376][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.399362][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.517577][ T3463] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.647671][ T3463] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.667586][ T3463] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.734116][ T3463] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.061952][ T6168] libceph: connect (1)[c::]:6789 error -97 [ 496.143786][ T6168] libceph: mon0 (1)[c::]:6789 connect error [ 497.109576][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.136829][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.148558][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.158180][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.210059][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.266256][ T9279] lo speed is unknown, defaulting to 1000 [ 498.598643][ T9293] netlink: 40 bytes leftover after parsing attributes in process `syz.7.751'. [ 499.246791][ T5840] Bluetooth: hci2: command tx timeout [ 499.454776][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.752'. [ 499.463725][ T9300] netlink: 108 bytes leftover after parsing attributes in process `syz.6.752'. [ 499.473830][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.752'. [ 499.482901][ T9300] netlink: 108 bytes leftover after parsing attributes in process `syz.6.752'. [ 499.491883][ T9300] netlink: 84 bytes leftover after parsing attributes in process `syz.6.752'. [ 499.522278][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 500.149463][ T9315] fuse: Unknown parameter 'user_id00000000000000000000' [ 501.094676][ T9319] binder: 9318:9319 ioctl c0306201 0 returned -14 [ 501.396371][ T5840] Bluetooth: hci2: command tx timeout [ 503.474929][ T5840] Bluetooth: hci2: command tx timeout [ 503.649552][ T6092] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.792917][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.757'. [ 503.954017][ T9331] netdevsim netdevsim4: Direct firmware load for lookup_extent_enter failed with error -2 [ 503.964337][ T9331] netdevsim netdevsim4: Falling back to sysfs fallback for: lookup_extent_enter [ 505.194539][ T6092] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.277547][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.321753][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.362004][ T9279] bridge_slave_0: entered allmulticast mode [ 505.409880][ T9279] bridge_slave_0: entered promiscuous mode [ 505.451192][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.469058][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.499713][ T9279] bridge_slave_1: entered allmulticast mode [ 505.552292][ T5840] Bluetooth: hci2: command tx timeout [ 505.571721][ T9279] bridge_slave_1: entered promiscuous mode [ 506.943294][ T9361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.764'. [ 506.998931][ T6092] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.534186][ T6092] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.808581][ T9381] loop4: detected capacity change from 0 to 1024 [ 508.910413][ T9381] EXT4-fs: Ignoring removed nobh option [ 508.935169][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.767'. [ 508.948182][ T9375] netlink: 108 bytes leftover after parsing attributes in process `syz.6.767'. [ 508.960905][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.767'. [ 508.970165][ T9375] netlink: 108 bytes leftover after parsing attributes in process `syz.6.767'. [ 508.979197][ T9375] netlink: 84 bytes leftover after parsing attributes in process `syz.6.767'. [ 509.115101][ T9381] EXT4-fs: Ignoring removed bh option [ 509.157604][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.427340][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.427462][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.529527][ T9381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.089067][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.233906][ T9399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.361424][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 511.614172][ T9396] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.770: Allocating blocks 385-513 which overlap fs metadata [ 511.944353][ T9377] EXT4-fs (loop4): pa ffff888030d9fbc8: logic 16, phys. 129, len 24 [ 511.952673][ T9377] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 512.249281][ T9279] team0: Port device team_slave_0 added [ 512.313012][ T9279] team0: Port device team_slave_1 added [ 512.367581][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.423822][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.080292][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.227065][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.353815][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.427355][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.535177][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.566194][ T9428] siw: device registration error -23 [ 516.186253][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 516.498909][ T6092] bridge_slave_1: left allmulticast mode [ 516.514811][ T6092] bridge_slave_1: left promiscuous mode [ 516.520714][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.960546][ T6092] bridge_slave_0: left allmulticast mode [ 517.284432][ T9450] netlink: 40 bytes leftover after parsing attributes in process `syz.6.781'. [ 518.027469][ T6092] bridge_slave_0: left promiscuous mode [ 518.063843][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.470048][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 521.237112][ T6092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.255868][ T6092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.275559][ T6092] bond0 (unregistering): Released all slaves [ 521.325355][ T9279] hsr_slave_0: entered promiscuous mode [ 521.363316][ T9279] hsr_slave_1: entered promiscuous mode [ 521.369869][ T9279] debugfs: 'hsr0' already exists in 'hsr' [ 521.387941][ T9279] Cannot create hsr debugfs directory [ 521.479693][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.7.783'. [ 521.488947][ T9454] netlink: 108 bytes leftover after parsing attributes in process `syz.7.783'. [ 521.498372][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.7.783'. [ 521.507546][ T9454] netlink: 108 bytes leftover after parsing attributes in process `syz.7.783'. [ 521.518142][ T9454] netlink: 84 bytes leftover after parsing attributes in process `syz.7.783'. [ 521.844027][ T9472] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 521.853509][ T9472] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 521.863149][ T9472] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 523.002884][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 523.009025][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 523.022948][ T9488] ceph: No mds server is up or the cluster is laggy [ 523.125158][ T6092] hsr_slave_0: left promiscuous mode [ 523.173294][ T6092] hsr_slave_1: left promiscuous mode [ 523.272206][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.279638][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.788938][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.880905][ T9507] siw: device registration error -23 [ 524.435587][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.051547][ T6092] veth1_macvtap: left promiscuous mode [ 525.066183][ T6092] veth0_macvtap: left promiscuous mode [ 525.257085][ T6092] veth1_vlan: left promiscuous mode [ 525.262785][ T6092] veth0_vlan: left promiscuous mode [ 526.809635][ T9527] loop6: detected capacity change from 0 to 131072 [ 526.844372][ T9527] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 526.852562][ T9527] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 526.871663][ T9527] F2FS-fs (loop6): invalid crc value [ 526.934793][ T9527] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 526.953035][ T9527] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 526.960107][ T9527] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 527.388774][ T9534] overlayfs: missing 'lowerdir' [ 528.207647][ T9536] No source specified [ 531.181181][ T9539] ALSA: mixer_oss: invalid OSS volume '' [ 533.643501][ T6092] team0 (unregistering): Port device team_slave_1 removed [ 533.735555][ T6092] team0 (unregistering): Port device team_slave_0 removed [ 534.218022][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.799'. [ 534.227486][ T9553] netlink: 108 bytes leftover after parsing attributes in process `syz.6.799'. [ 534.236833][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.799'. [ 534.245877][ T9553] netlink: 108 bytes leftover after parsing attributes in process `syz.6.799'. [ 534.255090][ T9553] netlink: 84 bytes leftover after parsing attributes in process `syz.6.799'. [ 535.694532][ T6066] IPVS: starting estimator thread 0... [ 535.760581][ T9564] IPVS: sh: FWM 3 0x00000003 - no destination available [ 535.772184][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 536.331526][ T9565] IPVS: using max 28 ests per chain, 67200 per kthread [ 536.547083][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 538.313620][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 538.588046][ T9602] loop7: detected capacity change from 0 to 1024 [ 539.762727][ T6596] hfsplus: b-tree write err: -5, ino 4 [ 540.159006][ T9279] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 540.173712][ T9279] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 540.226216][ T9279] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 540.443501][ T9279] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 540.869302][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.6.813'. [ 540.878343][ T9616] netlink: 108 bytes leftover after parsing attributes in process `syz.6.813'. [ 540.887666][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.6.813'. [ 540.896766][ T9616] netlink: 108 bytes leftover after parsing attributes in process `syz.6.813'. [ 540.905793][ T9616] netlink: 84 bytes leftover after parsing attributes in process `syz.6.813'. [ 543.154534][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.420910][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.039400][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.046621][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.175263][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.182498][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.234351][ C0] ------------[ cut here ]------------ [ 545.240162][ C0] ODEBUG: free active (active state 0) object: ffff888052f4b490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 545.253116][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 545.263434][ C0] Modules linked in: [ 545.267490][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.278018][ C0] Tainted: [L]=SOFTLOCKUP [ 545.282351][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.292437][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 545.298797][ C0] Code: 89 44 24 20 e8 e7 34 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 8a c0 8b 48 c7 c2 40 8f c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 545.318429][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246 [ 545.324534][ C0] RAX: ffffffff8a4a75d0 RBX: ffffffff99b75430 RCX: 0000000000000000 [ 545.332534][ C0] RDX: ffffffff8bc08f40 RSI: ffffffff8bc08a20 RDI: ffffffff8f8c8240 [ 545.340507][ C0] RBP: ffffffff8b6d2500 R08: ffff888052f4b490 R09: ffffffff8b6d3660 [ 545.348495][ C0] R10: dffffc0000000000 R11: ffffffff81ae0a10 R12: ffff888052f4b600 [ 545.356489][ C0] R13: ffffffff8f8c8240 R14: ffff888052f4b000 R15: ffff888052f4b490 [ 545.364482][ C0] FS: 0000000000000000(0000) GS:ffff888125e21000(0000) knlGS:0000000000000000 [ 545.373440][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.380090][ C0] CR2: 0000001b3091cff8 CR3: 0000000024a37000 CR4: 0000000000350ef0 [ 545.388090][ C0] Call Trace: [ 545.391394][ C0] [ 545.394238][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 545.399874][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 545.404994][ C0] kfree+0x13b/0x660 [ 545.408912][ C0] rose_timer_expiry+0x4cb/0x600 [ 545.413854][ C0] ? call_timer_fn+0x159/0x590 [ 545.418628][ C0] call_timer_fn+0x16e/0x590 [ 545.423292][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 545.428740][ C0] ? call_timer_fn+0xbe/0x590 [ 545.433421][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 545.438525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 545.444186][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.449403][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 545.454867][ C0] __run_timer_base+0x61a/0x860 [ 545.459718][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 545.465089][ C0] ? clockevents_program_event+0x247/0x350 [ 545.470898][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 545.476580][ C0] ? sched_clock_cpu+0x74/0x430 [ 545.481524][ C0] run_timer_softirq+0xb7/0x180 [ 545.486368][ C0] handle_softirqs+0x22b/0x7c0 [ 545.491131][ C0] ? __irq_exit_rcu+0x60/0x150 [ 545.495906][ C0] __irq_exit_rcu+0x60/0x150 [ 545.500483][ C0] irq_exit_rcu+0x9/0x30 [ 545.504728][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 545.510359][ C0] [ 545.513288][ C0] [ 545.516206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.522189][ C0] RIP: 0010:finish_task_switch+0x242/0x940 [ 545.527994][ C0] Code: 0f 84 c2 01 00 00 48 85 db 0f 85 e9 01 00 00 e9 6b 05 00 00 4c 8b 75 d0 4c 89 e7 e8 c8 78 ca 09 e8 b3 10 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 545.547597][ C0] RSP: 0018:ffffffff8dc07b58 EFLAGS: 00000206 [ 545.553671][ C0] RAX: 0000000000ef2e35 RBX: 0000000000000000 RCX: 0000000080000001 [ 545.561645][ C0] RDX: 0000000000000000 RSI: ffffffff8d791f69 RDI: ffffffff8bc083e0 [ 545.569613][ C0] RBP: ffffffff8dc07bb0 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 545.577588][ C0] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: ffffffff8dc95340 [ 545.585563][ C0] R13: dffffc0000000000 R14: ffff88802df2db80 R15: ffff8880b863b498 [ 545.593554][ C0] ? finish_task_switch+0x23d/0x940 [ 545.598757][ C0] __schedule+0x14a3/0x4fd0 [ 545.603292][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 545.608914][ C0] ? __pfx___schedule+0x10/0x10 [ 545.613778][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 545.619397][ C0] ? tick_nohz_stop_idle+0x285/0x370 [ 545.624686][ C0] ? tick_nohz_idle_exit+0x2e1/0x3b0 [ 545.629953][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 545.635616][ C0] schedule_idle+0x52/0x90 [ 545.640021][ C0] do_idle+0x472/0x4d0 [ 545.644100][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 545.649720][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 545.654930][ C0] ? __pfx_do_idle+0x10/0x10 [ 545.659518][ C0] cpu_startup_entry+0x44/0x60 [ 545.664284][ C0] rest_init+0x2de/0x300 [ 545.668522][ C0] start_kernel+0x381/0x3d0 [ 545.673065][ C0] x86_64_start_reservations+0x24/0x30 [ 545.678528][ C0] x86_64_start_kernel+0x143/0x1c0 [ 545.683650][ C0] common_startup_64+0x13e/0x147 [ 545.688612][ C0] [ 545.691640][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 545.698924][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.709410][ C0] Tainted: [L]=SOFTLOCKUP [ 545.713716][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.723762][ C0] Call Trace: [ 545.727032][ C0] [ 545.729860][ C0] vpanic+0x1e0/0x670 [ 545.733867][ C0] panic+0xb9/0xc0 [ 545.737580][ C0] ? __pfx_panic+0x10/0x10 [ 545.741995][ C0] ? common_startup_64+0x13e/0x147 [ 545.747105][ C0] __warn+0x317/0x4b0 [ 545.751081][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 545.756798][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 545.762517][ C0] __report_bug+0x288/0x500 [ 545.767028][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 545.772661][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 545.777846][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 545.783570][ C0] ? __pfx___report_bug+0x10/0x10 [ 545.788613][ C0] ? call_timer_fn+0x16e/0x590 [ 545.793365][ C0] ? __run_timer_base+0x61a/0x860 [ 545.798376][ C0] ? run_timer_softirq+0xb7/0x180 [ 545.803391][ C0] ? handle_softirqs+0x22b/0x7c0 [ 545.808313][ C0] ? __irq_exit_rcu+0x60/0x150 [ 545.813073][ C0] ? irq_exit_rcu+0x9/0x30 [ 545.817477][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 545.823271][ C0] ? finish_task_switch+0x242/0x940 [ 545.828464][ C0] ? __schedule+0x14a3/0x4fd0 [ 545.833137][ C0] ? schedule_idle+0x52/0x90 [ 545.837723][ C0] report_bug_entry+0x19a/0x290 [ 545.842569][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 545.848286][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 545.854002][ C0] handle_bug+0xca/0x200 [ 545.858250][ C0] exc_invalid_op+0x1a/0x50 [ 545.862745][ C0] asm_exc_invalid_op+0x1a/0x20 [ 545.867588][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 545.873917][ C0] Code: 89 44 24 20 e8 e7 34 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 8a c0 8b 48 c7 c2 40 8f c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 545.893517][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246 [ 545.899583][ C0] RAX: ffffffff8a4a75d0 RBX: ffffffff99b75430 RCX: 0000000000000000 [ 545.907543][ C0] RDX: ffffffff8bc08f40 RSI: ffffffff8bc08a20 RDI: ffffffff8f8c8240 [ 545.915504][ C0] RBP: ffffffff8b6d2500 R08: ffff888052f4b490 R09: ffffffff8b6d3660 [ 545.923466][ C0] R10: dffffc0000000000 R11: ffffffff81ae0a10 R12: ffff888052f4b600 [ 545.931427][ C0] R13: ffffffff8f8c8240 R14: ffff888052f4b000 R15: ffff888052f4b490 [ 545.939400][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 545.944771][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 545.950398][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 545.956022][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 545.961122][ C0] kfree+0x13b/0x660 [ 545.965018][ C0] rose_timer_expiry+0x4cb/0x600 [ 545.969945][ C0] ? call_timer_fn+0x159/0x590 [ 545.974700][ C0] call_timer_fn+0x16e/0x590 [ 545.979279][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 545.984724][ C0] ? call_timer_fn+0xbe/0x590 [ 545.989402][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 545.994509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.000136][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.005330][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 546.010778][ C0] __run_timer_base+0x61a/0x860 [ 546.015628][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 546.020982][ C0] ? clockevents_program_event+0x247/0x350 [ 546.026781][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.032403][ C0] ? sched_clock_cpu+0x74/0x430 [ 546.037250][ C0] run_timer_softirq+0xb7/0x180 [ 546.042109][ C0] handle_softirqs+0x22b/0x7c0 [ 546.046895][ C0] ? __irq_exit_rcu+0x60/0x150 [ 546.051678][ C0] __irq_exit_rcu+0x60/0x150 [ 546.056271][ C0] irq_exit_rcu+0x9/0x30 [ 546.060511][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 546.066147][ C0] [ 546.069069][ C0] [ 546.071991][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.077982][ C0] RIP: 0010:finish_task_switch+0x242/0x940 [ 546.083795][ C0] Code: 0f 84 c2 01 00 00 48 85 db 0f 85 e9 01 00 00 e9 6b 05 00 00 4c 8b 75 d0 4c 89 e7 e8 c8 78 ca 09 e8 b3 10 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 546.103396][ C0] RSP: 0018:ffffffff8dc07b58 EFLAGS: 00000206 [ 546.109462][ C0] RAX: 0000000000ef2e35 RBX: 0000000000000000 RCX: 0000000080000001 [ 546.117428][ C0] RDX: 0000000000000000 RSI: ffffffff8d791f69 RDI: ffffffff8bc083e0 [ 546.125389][ C0] RBP: ffffffff8dc07bb0 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 546.133349][ C0] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: ffffffff8dc95340 [ 546.141310][ C0] R13: dffffc0000000000 R14: ffff88802df2db80 R15: ffff8880b863b498 [ 546.149300][ C0] ? finish_task_switch+0x23d/0x940 [ 546.154524][ C0] __schedule+0x14a3/0x4fd0 [ 546.159057][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.164691][ C0] ? __pfx___schedule+0x10/0x10 [ 546.169553][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.175206][ C0] ? tick_nohz_stop_idle+0x285/0x370 [ 546.180524][ C0] ? tick_nohz_idle_exit+0x2e1/0x3b0 [ 546.185807][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.191443][ C0] schedule_idle+0x52/0x90 [ 546.195875][ C0] do_idle+0x472/0x4d0 [ 546.199939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.205577][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 546.210768][ C0] ? __pfx_do_idle+0x10/0x10 [ 546.215356][ C0] cpu_startup_entry+0x44/0x60 [ 546.220116][ C0] rest_init+0x2de/0x300 [ 546.224360][ C0] start_kernel+0x381/0x3d0 [ 546.228869][ C0] x86_64_start_reservations+0x24/0x30 [ 546.234327][ C0] x86_64_start_kernel+0x143/0x1c0 [ 546.239435][ C0] common_startup_64+0x13e/0x147 [ 546.244381][ C0] [ 546.247941][ C0] Kernel Offset: disabled [ 546.252260][ C0] Rebooting in 86400 seconds..