last executing test programs: 3m5.789642183s ago: executing program 1 (id=123): r0 = syz_io_uring_setup(0x91f, &(0x7f0000000340)={0x0, 0xa531, 0x1000, 0xfffffffd}, &(0x7f00000002c0), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x10, r0, 0x8000000) waitid(0x1, 0x0, &(0x7f0000000080), 0x8, &(0x7f00000003c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x10000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)=ANY=[@ANYBLOB="340000003d0007010080000000000000027c0000"], 0x34}}, 0x4040040) mbind(&(0x7f0000d51000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0xffff, 0x4a, 0x8) 3m2.863084288s ago: executing program 4 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd3a, &(0x7f0000000100)={&(0x7f0000000840)=@newchain={0x24, 0x2e, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) rt_sigaction(0x40, &(0x7f0000000500)={0x0, 0x4000000, 0x0}, 0x0, 0x8, &(0x7f0000001540)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xfd, 0x15, 0x3, 0xfc, 0xfd, 0xfc, 0xe3, 0x0, 0x4, 0x81, 0x90, 0x8, 0x5}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x200040c4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r9) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000340)=0xfffffffc, 0x4) 3m1.648045854s ago: executing program 1 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(0x0, 0xffffffff, 0x200000) syz_open_dev$I2C(0x0, 0x7, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) fsopen(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2000000000000}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x33) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x2810) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x36) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x24045044) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0x0) 2m59.536474664s ago: executing program 4 (id=131): syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r10, r11, 0x4, r3}, 0x10) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) 2m55.07527324s ago: executing program 1 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7, 0x9, 0x0, 0xc, 0x8000, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}}, 0x4000) r9 = dup(r5) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x16, @remote, 0x4e24, 0x1, 'none\x00', 0x0, 0x32bb, 0x10000071}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESOCT], 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000006380), 0x1, 0x0) pwritev2(r11, &(0x7f0000000880)=[{&(0x7f0000000bc0)="1ddc26a5", 0x4}], 0x1, 0x40004, 0x80000001, 0x6) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000b000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(r1, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0xb01f, 0x5601}]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2m54.058052065s ago: executing program 4 (id=140): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8, 0x6, 0x81, 0x400}, 0x7fffffff, [0x9, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x9, 0xf59, 0x0, 0x0, 0x5, 0x6, 0xd666, 0x5, 0x7, 0x10000, 0x86c6, 0xfffffffa, 0x2b2, 0x31, 0x2, 0x4, 0x6, 0xf, 0x6, 0xfb8, 0x3, 0x8, 0x95, 0x2, 0x1, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x3, 0xfffffff8, 0x4, 0x800, 0x9, 0x7, 0x7, 0x8, 0x8, 0x5, 0x3, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x800, 0x30b8, 0x40, 0xa909, 0x1, 0x0, 0x45a, 0xffffffff, 0x2, 0x4, 0x3], [0x7, 0x10c, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x597, 0x4, 0x4, 0x6, 0xfffffffe, 0x101, 0xf, 0x6, 0x8000, 0x40, 0x8, 0x7, 0x8001, 0xb1, 0x7465, 0x0, 0x3, 0x1, 0x8e, 0x9, 0x27d9, 0xfffffffb, 0xa, 0xc7ca, 0x0, 0xe6, 0x1592, 0x2, 0x0, 0xc74, 0x5, 0xb, 0x80000000, 0xc0000000, 0x4, 0x3dce, 0x8, 0x80000001, 0x8000, 0xfff, 0xfffffffe, 0x8, 0x0, 0x6, 0x9023, 0x4, 0x8, 0x4, 0x7, 0x0, 0x5, 0x3], [0x0, 0x1ff, 0x37db8e9e, 0x6, 0xdc, 0x3, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x6d64caf8, 0x3c19b70c, 0x2, 0x6, 0x1, 0x3800, 0x100, 0x3, 0x2, 0x942, 0x9, 0x6, 0xe8, 0x2, 0x3, 0x51, 0x9, 0x5, 0x2, 0x6, 0x83, 0x1, 0x400, 0x2, 0x8, 0x2, 0x101, 0x7fffffff, 0x9, 0x800, 0x4, 0x7, 0x8001, 0x5, 0xbd, 0x6, 0x9, 0x81, 0x1ff, 0x9ace, 0x67c, 0x200, 0x7, 0x401, 0x7b1, 0x5, 0x10c9, 0x8, 0x7, 0xc], [0x9a4, 0x200, 0x1, 0xe997, 0x2, 0x8, 0x4, 0x2e, 0xb2, 0x3, 0xfff, 0x3, 0x7, 0x7, 0x10000, 0x8, 0x9, 0x200000, 0x1, 0x7fffffff, 0x7, 0x5, 0xfff, 0x5, 0x4, 0x2, 0x8, 0x2c2ce615, 0x3, 0x0, 0x7, 0x2, 0xaf3, 0x1, 0xe5, 0x4, 0x8, 0x5, 0x81, 0x7, 0xe, 0x8, 0x5, 0x4b1d1523, 0xa6, 0x2, 0xfff, 0x9, 0x1, 0x8001, 0x400, 0xfffffffc, 0x9, 0x101, 0x3, 0x9, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x401, 0x1ff, 0xa]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 2m50.730870413s ago: executing program 4 (id=145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x11ffffa, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x80000000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x9, 0x101, 0x3, 0xfe, 0x0, 0x0, 0xfffffffc, {0x4, 0x6, 0xfffffffd, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x40000c4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, 0x0, 0x0) readv(r9, &(0x7f0000000880)=[{&(0x7f0000000400)=""/50, 0x32}], 0x1) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x1}) r11 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 2m50.455853637s ago: executing program 1 (id=146): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500"], 0x24}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbff, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x8}}}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x3c}}, 0x90) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001480)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x90000015}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000600)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x40, r10, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x60}, {0x17, 0x1}, {0x18}, {0x6c, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xe0, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x31}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a733d904ea132e8312a776211ad78b5f214fc8a24d770a4d"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x810}, 0x20040004) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r12, 0x40505412, &(0x7f0000000440)={0x7, 0x8002}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) 2m47.149851604s ago: executing program 1 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, 0x0, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x330, 0x2e8, 0x2e8, 0x330, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xfd], 'batadv0\x00', 'geneve1\x00'}, 0x0, 0x188, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast1, [0xffffff00, 0xff, 0xff000000, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x42}, [0xff, 0xff, 0x0, 0xffffffff], @ipv4=@loopback, [0x0, 0xff, 0xffffffff, 0xff000000], 0x4, 0x6, 0x88, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x290, 0x80}, 0x80, 0x41}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5d}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0xb7a}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = epoll_create(0xba5f) epoll_wait(r6, &(0x7f0000000740), 0x0, 0xc0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2m42.864753167s ago: executing program 1 (id=155): r0 = creat(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000240)={0x7, 'macsec0\x00', {0xb3}, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x122, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f0000000100)="184c4d3a") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000200)=0x8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48040) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) 2m42.802979147s ago: executing program 4 (id=157): r0 = socket$inet6(0xa, 0x2, 0x9edd) sendmmsg$inet6(r0, &(0x7f00000037c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x6}, 0xccc8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000600)='O', 0x1}], 0x1}}], 0x1, 0x40) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000500)) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) epoll_create1(0x3012f84903b37587) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg(r4, &(0x7f0000000800)={&(0x7f0000000700)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000008c0)="d1b1fd1da4542302050f6abd8661fc78f89ebc4b4d327593a50bc087a5b8f343ba6295a6d7487108e4efd0d6cd04cdfee603c16eeab32412746d90359caf8690038c372ce1d3222d8af334b7511a45d7f7c145d1023b8850f138cf94bf4c0d7aea70434546267a9936e178af865f25ee25e8b164d7ab25b1773a91cc35804be1a965869b4546658c4edc8f025b8b5ba5b94490eee72a4e1c586283fad756d4befaeb19f6373342244e91dc1b125b2243541be46e63e41e1546d75456f45297bfb04878692f1ea84afb8a2c8966cf", 0xce}, {&(0x7f00000009c0)="3994e016f7a1eda42afd0ecebf2f59bd67115562016305f896d9e08a9b5cc10baf9dedd9f2322eed1299a70c614cde2e555ab6c08675bd49b9c97eef04992cf2a275b494dd1766a36563cae197d88abb0617db8eff098c3747a32883824a7b32c72a3fd763d668fd1b07a4244da544139e46d1299eb8258674f69bf5cbf576da73ed4a7d0b079cd6c61c9978fbf9c688ec10f556fce362ce5b55488ce1a247ea53af5323c7322741587f18359fa814d1a10b65163e0728d61470fbabe834a580add8ba5c66335fd05486093e1100dea50a51fc41be21a5ecb882ac", 0xdb}, {&(0x7f0000000ac0)="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", 0xfa}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="28b6485639b8146c1000000000000000000301000000010000debc4c41f998f3e40994089ec037580b668ec40000000000"], 0x28}, 0x20044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000b06010800000000000000000500000205000100070000000c00078008000940000000a50900020073797a31"], 0x34}}, 0x4800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x20000) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 2m38.498236516s ago: executing program 4 (id=165): tkill(0x0, 0x4000012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x240000) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x24, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x4048010) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) io_setup(0x6, &(0x7f0000000680)) 2m26.498691715s ago: executing program 32 (id=155): r0 = creat(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000240)={0x7, 'macsec0\x00', {0xb3}, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x122, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f0000000100)="184c4d3a") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000200)=0x8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48040) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) 2m22.778991268s ago: executing program 33 (id=165): tkill(0x0, 0x4000012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x240000) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x24, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x4048010) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) io_setup(0x6, &(0x7f0000000680)) 1m21.81981966s ago: executing program 0 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000280)={0x0, 0x1ffefe, 0x800, 0x7fffb}, &(0x7f0000000200), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002c00)=""/102400, 0x19000) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x3c48, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) socket$inet6_udp(0xa, 0x2, 0x0) ioperm(0x0, 0x7, 0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3d549a, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x19cc5, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1m19.863952597s ago: executing program 0 (id=268): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e1e, @private=0xa010100}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x6, 0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x8, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) write$nbd(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000240)={0x7c, [[0x2, 0x0, 0x3, 0x9, 0x1, 0x4, 0x1, 0x8], [0xc, 0x2, 0x9, 0x1000, 0x2, 0x9, 0x2, 0x9], [0x10000, 0x1, 0x7, 0x81, 0x9, 0xfff, 0x10000, 0x560]], '\x00', [{0x6, 0x6, 0x0, 0x1}, {0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb9, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x2}, {0x2, 0x3, 0x1, 0x1}, {0xa7, 0xcb64, 0x1, 0x0, 0x1, 0x1}, {0xff, 0x2, 0x0, 0x1, 0x1}, {0x40, 0x6c1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x7ff, 0x0, 0x0, 0x1}, {0x40, 0x8000, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x1}) 1m10.628167656s ago: executing program 0 (id=277): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000a80)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8], 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(0xffffffffffffffff, r1, 0x80000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, &(0x7f0000000400)) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x963f}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000400)={r9, 0x4}, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) 1m8.476936284s ago: executing program 0 (id=279): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0403052003ceac6a3f8f96117bd82ad32f40459d03e383036816e48e8e5a68e758c467ef62774e1faf7e68"], 0x7) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x10, 0x0}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, 0x0, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x3) semtimedop(0x0, 0x0, 0x0, 0x0) accept$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@default, @bcast, @default, @null, @rose, @netrom, @remote, @netrom]}, &(0x7f0000000080)=0x48) 1m7.299256137s ago: executing program 0 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x96e) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x704, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000002063f5c8336000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a3100000000050005000200000005000100060000006c13de1e83fdd329c86e16a7135b1ad20b7ca25cb8c7f54015f26d3782b49b6c"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000906010200000000000000d42521418ea74c8d0073797a31000000000500010007000000100007800c00018008000140ffffffff20f9691a0d8df815ac8b21f9164fba04f350ce591ab125fd517bfb48a98842170e9c994f857cd7f97b0bead7a9504daf0c45043e4bdf1f02522272c6b39b14147883adbc026123c39dd76a9afa043725c1424bf7799958aaec857c499b454a9d8674e901eace35f26e59c482b7868306b8562fcd4d33c4b59cd32723b851aa9d76b791739df03be2ea0d2a1d"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x400c840) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) mkdir(&(0x7f00000002c0)='./file0\x00', 0x181) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) 1m5.575347696s ago: executing program 0 (id=283): unshare(0x40020000) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="14"], &(0x7f0000002300), 0x1200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x80010, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6) ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 50.357471292s ago: executing program 34 (id=283): unshare(0x40020000) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="14"], &(0x7f0000002300), 0x1200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x80010, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6) ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 9.273960782s ago: executing program 3 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)={0x2, 0x0, @a}, 0x48, r4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, 0x2, 0x8a2}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}}, 0x8080) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="00000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r9}, 0x10) userfaultfd(0x80001) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x0, {0x0, 0xff}, 0x1}, 0x18) sendmsg$can_j1939(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 6.57833965s ago: executing program 3 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102376, 0x18fe8) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000480)={0x1, 0x3, 0x4}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r5, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0) 5.512594874s ago: executing program 3 (id=348): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r8, r6, r7, 0x0, 0x8, 0x20, 0x4, 0x0, 0x0, 0x0, 0x6}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 5.509275417s ago: executing program 2 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)=ANY=[@ANYBLOB="340000003d0007010080000000000000027c00001c0045801800"], 0x34}}, 0x4040040) mbind(&(0x7f0000d51000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0xffff, 0x4a, 0x8) socket$netlink(0x10, 0x3, 0x4) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) 3.878074778s ago: executing program 2 (id=350): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x7, 0x8002}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) 3.599975147s ago: executing program 2 (id=351): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500"], 0x24}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbff, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x8}}}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x3c}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x90000015}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000600)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000000640)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x40, r11, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x60}, {0x17, 0x1}, {0x18}, {0x6c, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0xe0, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x31}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a733d904ea132e8312a776211ad78b5f214fc8a24d770a4d"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x810}, 0x20040004) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r13, 0x40505412, &(0x7f0000000440)={0x7, 0x8002}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) 3.505322092s ago: executing program 3 (id=352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) memfd_secret(0x80000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2131, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r0, 0x409, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x1000000) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138) 2.443093457s ago: executing program 2 (id=353): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "1721d03759be36"}, 0x19) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020}, 0xfffffffa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @mss={0x2, 0x1}, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.363606784s ago: executing program 3 (id=354): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)="09d90ebe68a5d804ec592ea37895e710c97bed4d4625a15c329d0bf2cfd305cfd5aa974ca7e8d649dd2196130d2778367b", 0x31}, {&(0x7f0000000200)}], 0x3}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, 0x0, 0x2000c8cc) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000600)={0x2}) shutdown(r6, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.219899036s ago: executing program 2 (id=355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x2, 0x0, 0x3, 0x0, 0x2000000}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x3) io_setup(0x1fc, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000c8) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000340)="1e", 0x1, 0x6004081, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) setsockopt(r3, 0x84, 0x82, &(0x7f0000000040)="020000000d80ffff", 0x8) gettid() mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) r4 = syz_open_dev$vim2m(0x0, 0xa03, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/72, 0x64, 0x48, 0x1, 0x4f, 0x0, @void, @value}, 0x28) 54.904673ms ago: executing program 3 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xfe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000140)) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) listen(0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x8000, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x40000000000004, 0x2, 0x5, 0x3, 0x10008000000008, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) sendmmsg$inet(r1, &(0x7f0000002f00), 0x0, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) recvmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x80000000}], 0x1, 0x40008062, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 0s ago: executing program 2 (id=357): memfd_secret(0x80000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="6a8fdfd0da8f0e5b293217dc9cf4452e", 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r7, 0xae9d, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 82.052412][ T5816] cgroup: Unknown subsys name 'net' [ 82.210389][ T5816] cgroup: Unknown subsys name 'cpuset' [ 82.219989][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.787471][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.332091][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.346091][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.358676][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.367034][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.378116][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.385583][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.395594][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.404044][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.425595][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.446885][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.454711][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.462652][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.463372][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.470602][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.481638][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.487599][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.493399][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.499094][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.506278][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.512570][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.519727][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.528867][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.540060][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.575615][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.586706][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.163652][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.361533][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.514677][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.536157][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.708582][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.715910][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.723265][ T5826] bridge_slave_0: entered allmulticast mode [ 87.731089][ T5826] bridge_slave_0: entered promiscuous mode [ 87.758231][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.787379][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.794516][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.801792][ T5826] bridge_slave_1: entered allmulticast mode [ 87.809453][ T5826] bridge_slave_1: entered promiscuous mode [ 87.847650][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.854828][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.862196][ T5833] bridge_slave_0: entered allmulticast mode [ 87.870270][ T5833] bridge_slave_0: entered promiscuous mode [ 87.923196][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.930583][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.938346][ T5833] bridge_slave_1: entered allmulticast mode [ 87.945852][ T5833] bridge_slave_1: entered promiscuous mode [ 87.966600][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.973783][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.981357][ T5838] bridge_slave_0: entered allmulticast mode [ 87.988745][ T5838] bridge_slave_0: entered promiscuous mode [ 87.997573][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.004783][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.012525][ T5838] bridge_slave_1: entered allmulticast mode [ 88.020574][ T5838] bridge_slave_1: entered promiscuous mode [ 88.107731][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.120845][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.160606][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.203999][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.211296][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.218600][ T5828] bridge_slave_0: entered allmulticast mode [ 88.226481][ T5828] bridge_slave_0: entered promiscuous mode [ 88.236378][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.264028][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.288041][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.295854][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.303053][ T5828] bridge_slave_1: entered allmulticast mode [ 88.310550][ T5828] bridge_slave_1: entered promiscuous mode [ 88.344950][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.370581][ T5826] team0: Port device team_slave_0 added [ 88.379691][ T5826] team0: Port device team_slave_1 added [ 88.413401][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.421054][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.428623][ T5831] bridge_slave_0: entered allmulticast mode [ 88.436274][ T5831] bridge_slave_0: entered promiscuous mode [ 88.461774][ T5838] team0: Port device team_slave_0 added [ 88.502749][ T5833] team0: Port device team_slave_0 added [ 88.509396][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.517238][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.524443][ T5831] bridge_slave_1: entered allmulticast mode [ 88.531962][ T5831] bridge_slave_1: entered promiscuous mode [ 88.542179][ T5838] team0: Port device team_slave_1 added [ 88.564140][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.574049][ T5836] Bluetooth: hci1: command tx timeout [ 88.578196][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.579803][ T5841] Bluetooth: hci3: command tx timeout [ 88.591354][ T5833] team0: Port device team_slave_1 added [ 88.628113][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.635808][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.645905][ T5841] Bluetooth: hci2: command tx timeout [ 88.662057][ T5836] Bluetooth: hci4: command tx timeout [ 88.672269][ T5841] Bluetooth: hci0: command tx timeout [ 88.673185][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.743582][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.750776][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.777040][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.819959][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.832775][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.842895][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.850577][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.876687][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.897330][ T5828] team0: Port device team_slave_0 added [ 88.904647][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.911704][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.938352][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.964312][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.971460][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.997643][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.031472][ T5828] team0: Port device team_slave_1 added [ 89.053436][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.060464][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.086457][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.139478][ T5826] hsr_slave_0: entered promiscuous mode [ 89.146675][ T5826] hsr_slave_1: entered promiscuous mode [ 89.167443][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.174436][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.200408][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.218601][ T5831] team0: Port device team_slave_0 added [ 89.236064][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.243129][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.269213][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.318779][ T5831] team0: Port device team_slave_1 added [ 89.378834][ T5838] hsr_slave_0: entered promiscuous mode [ 89.385746][ T5838] hsr_slave_1: entered promiscuous mode [ 89.391900][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.400263][ T5838] Cannot create hsr debugfs directory [ 89.489411][ T5828] hsr_slave_0: entered promiscuous mode [ 89.496182][ T5828] hsr_slave_1: entered promiscuous mode [ 89.502253][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.509900][ T5828] Cannot create hsr debugfs directory [ 89.539374][ T5833] hsr_slave_0: entered promiscuous mode [ 89.545915][ T5833] hsr_slave_1: entered promiscuous mode [ 89.551955][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.560515][ T5833] Cannot create hsr debugfs directory [ 89.567643][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.574603][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.601025][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.646043][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.653036][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.682639][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.801232][ T5831] hsr_slave_0: entered promiscuous mode [ 89.807808][ T5831] hsr_slave_1: entered promiscuous mode [ 89.813913][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.821659][ T5831] Cannot create hsr debugfs directory [ 90.277741][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.292621][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.306157][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.329412][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.384155][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.410100][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.422360][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.433389][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.537365][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.550772][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.589897][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.600953][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.646656][ T55] Bluetooth: hci1: command tx timeout [ 90.652172][ T5841] Bluetooth: hci3: command tx timeout [ 90.679873][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.713417][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.725990][ T55] Bluetooth: hci2: command tx timeout [ 90.731503][ T5841] Bluetooth: hci4: command tx timeout [ 90.737557][ T55] Bluetooth: hci0: command tx timeout [ 90.750158][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.760918][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.857276][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.876411][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.888693][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.900549][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.917788][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.928543][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.984760][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.006993][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.014265][ T4166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.035710][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.060069][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.067361][ T4166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.117992][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.125375][ T4166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.189373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.196620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.231065][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.311030][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.383338][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.390679][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.408475][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.415713][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.447320][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.524053][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.578310][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.598104][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.605323][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.662345][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.678705][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.690330][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.717709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.724959][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.767127][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.774286][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.790775][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.797966][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.917016][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.928155][ T975] cfg80211: failed to load regulatory.db [ 91.969847][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.984626][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.177512][ T5838] veth0_vlan: entered promiscuous mode [ 92.228369][ T5838] veth1_vlan: entered promiscuous mode [ 92.350812][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.409842][ T5838] veth0_macvtap: entered promiscuous mode [ 92.442104][ T5838] veth1_macvtap: entered promiscuous mode [ 92.524439][ T5828] veth0_vlan: entered promiscuous mode [ 92.543483][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.560922][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.578050][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.603647][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.613870][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.623184][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.632910][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.664160][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.683482][ T5828] veth1_vlan: entered promiscuous mode [ 92.729217][ T5841] Bluetooth: hci3: command tx timeout [ 92.730149][ T5826] veth0_vlan: entered promiscuous mode [ 92.734661][ T5841] Bluetooth: hci1: command tx timeout [ 92.748315][ T5826] veth1_vlan: entered promiscuous mode [ 92.805609][ T55] Bluetooth: hci0: command tx timeout [ 92.811164][ T55] Bluetooth: hci2: command tx timeout [ 92.816694][ T5841] Bluetooth: hci4: command tx timeout [ 92.883432][ T5831] veth0_vlan: entered promiscuous mode [ 92.894475][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.912228][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.949422][ T5833] veth0_vlan: entered promiscuous mode [ 92.962449][ T5831] veth1_vlan: entered promiscuous mode [ 92.987035][ T5833] veth1_vlan: entered promiscuous mode [ 92.994103][ T5826] veth0_macvtap: entered promiscuous mode [ 93.019968][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.020610][ T5826] veth1_macvtap: entered promiscuous mode [ 93.034719][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.081835][ T5828] veth0_macvtap: entered promiscuous mode [ 93.118760][ T5831] veth0_macvtap: entered promiscuous mode [ 93.134616][ T5828] veth1_macvtap: entered promiscuous mode [ 93.158086][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.172554][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.186063][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.212583][ T5833] veth0_macvtap: entered promiscuous mode [ 93.214562][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.229577][ T5833] veth1_macvtap: entered promiscuous mode [ 93.253337][ T5831] veth1_macvtap: entered promiscuous mode [ 93.302506][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.323184][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.335614][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.358017][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.371441][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.382087][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.393073][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.406516][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.429230][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.438941][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.448828][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.457627][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.477321][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.488266][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.498479][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.509046][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.521183][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.538302][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.549685][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.560915][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.571474][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.581483][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.595566][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.607921][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.623183][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.633248][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.642155][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.651230][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682653][ T975] IPVS: starting estimator thread 0... [ 93.683037][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.700106][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.720029][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.738485][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.749595][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.764738][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.778766][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.791941][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.803213][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.817127][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.827895][ T5919] IPVS: using max 25 ests per chain, 60000 per kthread [ 93.842804][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.854785][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.871585][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.881478][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.896549][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.911156][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.964438][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.979013][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.989177][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.000582][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.011139][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.024447][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.040402][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.129308][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.181287][ T5922] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 94.488127][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.537835][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.550722][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.646948][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659990][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.733658][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.743467][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.752745][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.765245][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.815196][ T55] Bluetooth: hci1: command tx timeout [ 94.820674][ T55] Bluetooth: hci3: command tx timeout [ 94.885342][ T5841] Bluetooth: hci2: command tx timeout [ 94.890812][ T5841] Bluetooth: hci4: command tx timeout [ 94.896677][ T55] Bluetooth: hci0: command tx timeout [ 94.928121][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.942974][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.959531][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.976477][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.121412][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.136152][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.156432][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.262589][ T5931] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.427253][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.468747][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.485800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.575417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.757176][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.768399][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.804541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.955612][ T5937] evm: overlay not supported [ 96.287926][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.315435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 96.315906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 96.520498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.545277][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.869209][ T4508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.896761][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.904643][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.918028][ T4508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.929847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.939171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.574530][ T5948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.606349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.615392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 101.860555][ T5960] IPv6: Can't replace route, no match found [ 102.474555][ T5980] netlink: 'syz.4.10': attribute type 2 has an invalid length. [ 102.774443][ T5980] : entered promiscuous mode [ 102.777955][ T5977] sctp: failed to load transform for md5: -2 [ 103.709730][ T5989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.512961][ T5996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.827793][ T6006] Zero length message leads to an empty skb [ 106.081908][ T6011] xt_HMARK: proto mask must be zero with L3 mode [ 106.867923][ T6010] tty tty20: ldisc open failed (-12), clearing slot 19 [ 111.052389][ T6030] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.093323][ T5841] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 112.102757][ T5841] Bluetooth: Wrong link type (-22) [ 113.688156][ T6051] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [ 113.836869][ T6049] syz.3.26 (6049) used greatest stack depth: 18624 bytes left [ 116.056205][ T30] audit: type=1326 audit(1745337095.651:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 116.187859][ T30] audit: type=1326 audit(1745337095.651:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 116.245600][ T30] audit: type=1326 audit(1745337095.651:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 117.762307][ T30] audit: type=1326 audit(1745337095.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 117.837631][ T30] audit: type=1326 audit(1745337095.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 118.150489][ T30] audit: type=1326 audit(1745337095.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 118.414673][ T6077] Bluetooth: MGMT ver 1.23 [ 119.157603][ T30] audit: type=1326 audit(1745337095.651:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 119.185394][ T30] audit: type=1326 audit(1745337095.651:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 120.157409][ T30] audit: type=1326 audit(1745337095.651:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 120.178559][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.668019][ T30] audit: type=1326 audit(1745337095.651:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 121.497523][ T6067] Process accounting resumed [ 121.861901][ T52] IPVS: starting estimator thread 0... [ 123.762007][ T6101] IPVS: using max 27 ests per chain, 64800 per kthread [ 123.831891][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 127.569060][ T6138] netlink: 140 bytes leftover after parsing attributes in process `syz.3.45'. [ 127.583891][ T6138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.45'. [ 127.593732][ T6138] netlink: 'syz.3.45': attribute type 6 has an invalid length. [ 127.616340][ T6138] netlink: 'syz.3.45': attribute type 5 has an invalid length. [ 127.624969][ T6137] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.722772][ T6138] netlink: 'syz.3.45': attribute type 4 has an invalid length. [ 129.236725][ T6154] input: syz1 as /devices/virtual/input/input6 [ 130.266711][ T6154] input: failed to attach handler evdev to device input6, error: -4 [ 130.866595][ T6159] ======================================================= [ 130.866595][ T6159] WARNING: The mand mount option has been deprecated and [ 130.866595][ T6159] and is ignored by this kernel. Remove the mand [ 130.866595][ T6159] option from the mount to silence this warning. [ 130.866595][ T6159] ======================================================= [ 130.901480][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.908545][ T6159] new mount options do not match the existing superblock, will be ignored [ 130.951956][ T6159] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 132.892295][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.898861][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.316116][ T6174] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 133.325440][ T6174] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 133.402611][ T6175] mmap: syz.3.53 (6175) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.560781][ T6184] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 136.375119][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 136.375139][ T30] audit: type=1326 audit(1745337116.011:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 136.507916][ T30] audit: type=1326 audit(1745337116.011:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 136.784585][ T30] audit: type=1326 audit(1745337116.011:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 137.463650][ T5841] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 137.501226][ T30] audit: type=1326 audit(1745337116.011:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 137.528924][ T6188] sp0: Synchronizing with TNC [ 137.827551][ T30] audit: type=1326 audit(1745337116.011:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 137.885102][ T30] audit: type=1326 audit(1745337116.011:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 138.275162][ T30] audit: type=1326 audit(1745337116.011:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 138.420164][ T6209] process 'syz.1.62' launched './file0' with NULL argv: empty string added [ 138.639921][ T30] audit: type=1326 audit(1745337116.011:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 138.663505][ T30] audit: type=1326 audit(1745337116.011:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 138.688106][ T30] audit: type=1326 audit(1745337116.011:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6176 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 138.851271][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 138.945914][ T6216] NILFS (nullb0): couldn't find nilfs on the device [ 139.397426][ T6215] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 139.398461][ T6215] block (null): Could not allocate knbd recv work queue. [ 139.415468][ T6215] nbd: failed to add new device [ 139.550678][ T6209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.107725][ T6222] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.965608][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'. [ 145.059083][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 145.388375][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 145.388394][ T30] audit: type=1326 audit(1745337125.701:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 145.731807][ T30] audit: type=1326 audit(1745337125.701:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 145.753481][ T30] audit: type=1326 audit(1745337125.731:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 145.792317][ T30] audit: type=1326 audit(1745337125.731:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 146.061159][ T30] audit: type=1326 audit(1745337125.731:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 146.098586][ T30] audit: type=1326 audit(1745337125.741:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 146.143500][ T30] audit: type=1326 audit(1745337125.741:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 146.235272][ T6257] macsec0: entered promiscuous mode [ 146.241720][ T6257] macsec0: entered allmulticast mode [ 146.247122][ T6257] veth1_macvtap: entered allmulticast mode [ 146.885350][ T30] audit: type=1326 audit(1745337125.741:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 147.041452][ T30] audit: type=1326 audit(1745337125.741:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 147.565104][ T30] audit: type=1326 audit(1745337125.741:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda15f8e169 code=0x7ffc0000 [ 147.796620][ T6263] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.774484][ T6265] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.258324][ T6275] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 151.155079][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 151.155101][ T30] audit: type=1326 audit(1745337131.371:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6278 comm="syz.3.78" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda15f8e169 code=0x0 [ 152.101858][ T6288] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.933842][ T6296] delete_channel: no stack [ 153.008863][ T6295] delete_channel: no stack [ 156.033463][ T6319] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 157.940309][ T30] audit: type=1326 audit(1745337137.861:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 158.051055][ T30] audit: type=1326 audit(1745337137.861:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 158.118372][ T30] audit: type=1326 audit(1745337137.861:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 158.139427][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.149858][ T30] audit: type=1326 audit(1745337137.861:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 158.178004][ T30] audit: type=1326 audit(1745337137.861:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 158.284806][ T30] audit: type=1326 audit(1745337137.861:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 158.305925][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.215030][ T6333] netlink: 56 bytes leftover after parsing attributes in process `syz.1.88'. [ 160.079132][ T30] audit: type=1326 audit(1745337137.861:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 160.262961][ T30] audit: type=1326 audit(1745337137.861:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 160.284823][ T30] audit: type=1326 audit(1745337137.871:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 161.215478][ T30] audit: type=1326 audit(1745337137.871:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325818e169 code=0x50000 [ 161.255444][ T6340] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.588245][ T6359] dccp_xmit_packet: Payload too large (65456) for featneg. [ 164.655140][ T6366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.935684][ T6381] veth0_vlan: entered allmulticast mode [ 166.000899][ T6381] veth0_vlan: left promiscuous mode [ 166.011325][ T6381] veth0_vlan: entered promiscuous mode [ 166.057364][ T6381] netlink: 248 bytes leftover after parsing attributes in process `syz.4.102'. [ 167.033595][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 167.432931][ T6383] tipc: Started in network mode [ 167.468499][ T6383] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 167.541221][ T978] IPVS: starting estimator thread 0... [ 168.765322][ T6392] IPVS: using max 32 ests per chain, 76800 per kthread [ 168.851125][ T6383] tipc: Enabled bearer , priority 10 [ 169.187975][ T978] libceph: connect (1)[c::]:6789 error -101 [ 169.208350][ T6399] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 169.216145][ T6399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.105'. [ 169.247911][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 169.327809][ T6401] ceph: No mds server is up or the cluster is laggy [ 169.341145][ T6398] lo speed is unknown, defaulting to 1000 [ 169.350262][ T6398] lo speed is unknown, defaulting to 1000 [ 169.358201][ T6398] lo speed is unknown, defaulting to 1000 [ 169.543788][ T6398] infiniband syz0: set active [ 169.548834][ T6398] infiniband syz0: added lo [ 169.555382][ T6398] syz0: rxe_create_cq: returned err = -12 [ 169.561412][ T6398] infiniband syz0: Couldn't create ib_mad CQ [ 169.568065][ T6398] infiniband syz0: Couldn't open port 1 [ 169.581847][ T6398] RDS/IB: syz0: added [ 169.586174][ T6398] smc: adding ib device syz0 with port count 1 [ 169.592531][ T6398] smc: ib device syz0 port 1 has pnetid [ 169.600487][ T6398] lo speed is unknown, defaulting to 1000 [ 169.753199][ T6398] lo speed is unknown, defaulting to 1000 [ 169.902241][ T6398] lo speed is unknown, defaulting to 1000 [ 169.914310][ T9] lo speed is unknown, defaulting to 1000 [ 169.922528][ T9] libceph: connect (1)[c::]:6789 error -101 [ 169.928908][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 170.068026][ T5884] tipc: Node number set to 1 [ 170.200246][ T9] lo speed is unknown, defaulting to 1000 [ 170.232938][ T6398] lo speed is unknown, defaulting to 1000 [ 170.388490][ T6398] lo speed is unknown, defaulting to 1000 [ 172.075300][ T6421] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 172.083100][ T6421] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.108'. [ 176.520002][ T6441] input: syz1 as /devices/virtual/input/input10 [ 177.023414][ T6444] veth0_to_team: entered promiscuous mode [ 177.029290][ T6444] veth0_to_team: entered allmulticast mode [ 178.415340][ T6429] IPVS: Scheduler module ip_vs_sip not found [ 178.426136][ T6439] IPVS: length: 24 != 16106127384 [ 178.619311][ T6463] netlink: 'syz.4.116': attribute type 8 has an invalid length. [ 178.750628][ T6470] netlink: 'syz.2.117': attribute type 11 has an invalid length. [ 178.758736][ T6470] netlink: 224 bytes leftover after parsing attributes in process `syz.2.117'. [ 179.924602][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 179.924664][ T30] audit: type=1326 audit(1745337159.351:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 180.302243][ T6475] ALSA: seq fatal error: cannot create timer (-16) [ 180.331738][ T30] audit: type=1326 audit(1745337159.351:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 180.415122][ T30] audit: type=1326 audit(1745337159.351:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 180.704797][ T30] audit: type=1326 audit(1745337159.351:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 180.945706][ T30] audit: type=1326 audit(1745337159.351:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 180.970355][ T30] audit: type=1326 audit(1745337159.361:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 180.994902][ T30] audit: type=1326 audit(1745337159.361:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 181.128289][ T30] audit: type=1326 audit(1745337159.361:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 181.155499][ T30] audit: type=1326 audit(1745337159.361:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 181.226230][ T30] audit: type=1326 audit(1745337159.361:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ff8e169 code=0x7ffc0000 [ 183.391490][ T6501] MTD: Couldn't look up 'Ÿë': -2 [ 184.755519][ T6501] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 186.475528][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 187.084116][ T6523] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.279334][ T5841] Bluetooth: hci2: unexpected event for opcode 0x041c [ 187.298416][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 188.527847][ T6522] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 188.922637][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 188.922656][ T30] audit: type=1326 audit(1745337169.211:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 188.950253][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.595457][ T30] audit: type=1326 audit(1745337169.211:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 189.616865][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.775866][ T6550] netlink: 'syz.0.132': attribute type 8 has an invalid length. [ 189.809372][ T30] audit: type=1326 audit(1745337169.211:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 189.970889][ T30] audit: type=1326 audit(1745337169.211:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 190.014338][ T30] audit: type=1326 audit(1745337169.211:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 190.055837][ T6550] ALSA: seq fatal error: cannot create timer (-16) [ 190.704696][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.287011][ T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 191.295743][ T55] Bluetooth: hci2: Injecting HCI hardware error event [ 191.304195][ T5841] Bluetooth: hci2: hardware error 0x00 [ 191.695949][ T30] audit: type=1326 audit(1745337169.221:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 191.813932][ T30] audit: type=1326 audit(1745337169.221:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 192.005150][ T30] audit: type=1326 audit(1745337169.221:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 192.026695][ T30] audit: type=1326 audit(1745337169.221:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 192.049048][ T30] audit: type=1326 audit(1745337169.221:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7ffc0000 [ 194.085767][ T5841] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 194.378778][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.628121][ T5884] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 194.843009][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 194.870425][ T5884] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 194.906440][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.016272][ T5884] usb 2-1: config 0 descriptor?? [ 196.115337][ T5884] ath6kl: Failed to submit usb control message: -71 [ 196.172196][ T5884] ath6kl: unable to send the bmi data to the device: -71 [ 196.357586][ T5884] ath6kl: Unable to send get target info: -71 [ 196.507927][ T5884] ath6kl: Failed to init ath6kl core: -71 [ 196.557247][ T5884] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 196.785799][ T5884] usb 2-1: USB disconnect, device number 2 [ 197.716944][ T6613] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 197.724702][ T6613] netlink: 244 bytes leftover after parsing attributes in process `syz.0.144'. [ 198.762733][ T6619] netlink: 'syz.1.146': attribute type 8 has an invalid length. [ 198.942971][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 198.943014][ T30] audit: type=1326 audit(1745337179.251:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 199.941600][ T30] audit: type=1326 audit(1745337179.251:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 199.970505][ T6626] ALSA: seq fatal error: cannot create timer (-16) [ 199.979663][ T30] audit: type=1326 audit(1745337179.251:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 200.001071][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.087950][ T30] audit: type=1326 audit(1745337179.251:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 200.110209][ T30] audit: type=1326 audit(1745337179.251:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 200.205636][ T30] audit: type=1326 audit(1745337179.251:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 200.279287][ T30] audit: type=1326 audit(1745337179.251:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 200.300857][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.997388][ T30] audit: type=1326 audit(1745337179.251:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8f78e169 code=0x7ffc0000 [ 201.609339][ T6643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.298377][ T6653] xt_socket: unknown flags 0x58 [ 205.495676][ T6665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.143798][ T6673] netlink: 'syz.2.154': attribute type 11 has an invalid length. [ 206.645125][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.298698][ T6665] xt_socket: unknown flags 0x8 [ 211.931966][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.938169][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 211.945596][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 212.296450][ T6709] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 212.304161][ T6709] netlink: 'syz.0.164': attribute type 3 has an invalid length. [ 212.311964][ T6709] netlink: 224 bytes leftover after parsing attributes in process `syz.0.164'. [ 212.465895][ T30] audit: type=1326 audit(1745337192.781:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6706 comm="syz.4.165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f325818e169 code=0x0 [ 213.824627][ T6734] Bluetooth: MGMT ver 1.23 [ 213.955570][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 214.393245][ T6745] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.619594][ T6786] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 222.931803][ T6786] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 223.753393][ T6797] program syz.3.179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.522002][ T6809] netlink: 'syz.3.183': attribute type 8 has an invalid length. [ 225.634571][ T6809] ALSA: seq fatal error: cannot create timer (-16) [ 225.874283][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 229.031678][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.091097][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.100600][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.115360][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.132191][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.485942][ T6826] warning: `syz.0.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 230.305720][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.330499][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.341716][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.351220][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.360941][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.444646][ T5981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.207016][ T6859] netlink: 'syz.2.191': attribute type 9 has an invalid length. [ 231.216055][ T5836] Bluetooth: hci1: command tx timeout [ 232.415907][ T5836] Bluetooth: hci5: command tx timeout [ 232.619797][ T5981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.828905][ T5981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.936460][ T6878] netlink: 'syz.3.194': attribute type 8 has an invalid length. [ 233.758959][ T6883] SET target dimension over the limit! [ 233.776495][ T5981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.808623][ T5836] Bluetooth: hci1: command tx timeout [ 234.027545][ T6833] lo speed is unknown, defaulting to 1000 [ 234.067226][ T6874] ALSA: seq fatal error: cannot create timer (-16) [ 234.213350][ T6886] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.305957][ T6877] sctp: [Deprecated]: syz.2.193 (pid 6877) Use of int in max_burst socket option. [ 234.305957][ T6877] Use struct sctp_assoc_value instead [ 234.502155][ T5836] Bluetooth: hci5: command tx timeout [ 234.792400][ T5981] bridge_slave_1: left allmulticast mode [ 234.801031][ T5981] bridge_slave_1: left promiscuous mode [ 235.542725][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.796239][ T5981] bridge_slave_0: left allmulticast mode [ 235.827603][ T5981] bridge_slave_0: left promiscuous mode [ 235.845789][ T5836] Bluetooth: hci1: command tx timeout [ 236.015235][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.326305][ T6904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.617156][ T5836] Bluetooth: hci5: command tx timeout [ 237.317180][ T5836] Bluetooth: hci3: connection err: -111 [ 237.927920][ T5836] Bluetooth: hci1: command tx timeout [ 238.648195][ T5836] Bluetooth: hci5: command tx timeout [ 239.406818][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.419787][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.437697][ T5981] bond0 (unregistering): Released all slaves [ 239.465285][ T6838] lo speed is unknown, defaulting to 1000 [ 239.472489][ T6901] netlink: 'syz.2.199': attribute type 8 has an invalid length. [ 240.539229][ T6940] netlink: 'syz.2.205': attribute type 8 has an invalid length. [ 240.641423][ T6938] ALSA: seq fatal error: cannot create timer (-16) [ 242.079342][ T6948] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.788593][ T6987] ALSA: seq fatal error: cannot create timer (-16) [ 245.072601][ T5981] hsr_slave_0: left promiscuous mode [ 245.081748][ T5981] hsr_slave_1: left promiscuous mode [ 245.087911][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.099186][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.140102][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.213704][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.330244][ T7005] overlayfs: missing 'lowerdir' [ 245.868477][ T5981] veth1_macvtap: left promiscuous mode [ 245.878394][ T5981] veth0_macvtap: left promiscuous mode [ 245.886289][ T7011] ALSA: seq fatal error: cannot create timer (-16) [ 245.893441][ T5981] veth1_vlan: left promiscuous mode [ 245.902333][ T5981] veth0_vlan: left promiscuous mode [ 247.214212][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 247.254089][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 247.729597][ T7003] netlink: 'syz.0.215': attribute type 8 has an invalid length. [ 247.814807][ T6838] chnl_net:caif_netlink_parms(): no params data found [ 247.891781][ T6833] chnl_net:caif_netlink_parms(): no params data found [ 249.092863][ T7032] netlink: 248 bytes leftover after parsing attributes in process `syz.2.220'. [ 249.160825][ T7030] veth0_vlan: entered allmulticast mode [ 249.182740][ T7031] veth0_vlan: left promiscuous mode [ 249.192862][ T7031] veth0_vlan: entered promiscuous mode [ 250.650856][ T7043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.278415][ T30] audit: type=1400 audit(1745337231.581:256): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7044 comm="syz.2.222" path="socket:[11851]" dev="sockfs" ino=11851 [ 253.574244][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.653439][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.691321][ T6838] bridge_slave_0: entered allmulticast mode [ 254.337220][ T6838] bridge_slave_0: entered promiscuous mode [ 254.565359][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.626980][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.634326][ T6838] bridge_slave_1: entered allmulticast mode [ 254.659028][ T6838] bridge_slave_1: entered promiscuous mode [ 254.694237][ T7064] nvme_fabrics: missing parameter 'transport=%s' [ 254.702123][ T7064] nvme_fabrics: missing parameter 'nqn=%s' [ 254.720988][ T5981] IPVS: stop unused estimator thread 0... [ 254.751927][ T7086] netlink: 'syz.0.227': attribute type 8 has an invalid length. [ 254.925966][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.934200][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.970659][ T6833] bridge_slave_0: entered allmulticast mode [ 254.997504][ T6833] bridge_slave_0: entered promiscuous mode [ 255.055831][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.071062][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.823827][ T7103] xt_TCPMSS: Only works on TCP SYN packets [ 256.089482][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.468193][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.574158][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.601458][ T6833] bridge_slave_1: entered allmulticast mode [ 256.643532][ T6833] bridge_slave_1: entered promiscuous mode [ 257.170693][ T7125] netlink: 788 bytes leftover after parsing attributes in process `syz.2.233'. [ 257.850991][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.203889][ T6261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.938665][ T6838] team0: Port device team_slave_0 added [ 259.239263][ T6261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.250371][ T7143] capability: warning: `syz.2.237' uses 32-bit capabilities (legacy support in use) [ 259.267819][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.583063][ T6838] team0: Port device team_slave_1 added [ 261.444597][ T6261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.541313][ T6833] team0: Port device team_slave_0 added [ 261.611320][ T6833] team0: Port device team_slave_1 added [ 263.204185][ T6261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.414708][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.439092][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.185303][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.432258][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.451717][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.488613][ T6833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.504908][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.512229][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.538265][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.586624][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.764049][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.800324][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.055775][ T6833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.067052][ T6833] hsr_slave_0: entered promiscuous mode [ 268.073783][ T6833] hsr_slave_1: entered promiscuous mode [ 268.126319][ T6833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.151232][ T6833] Cannot create hsr debugfs directory [ 268.239542][ T6838] hsr_slave_0: entered promiscuous mode [ 268.268879][ T6838] hsr_slave_1: entered promiscuous mode [ 268.287515][ T6838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.297188][ T6838] Cannot create hsr debugfs directory [ 268.356420][ T7206] kvm: pic: single mode not supported [ 268.357068][ T7206] kvm: pic: level sensitive irq not supported [ 268.363580][ T7206] kvm: pic: level sensitive irq not supported [ 268.385449][ T7206] kvm: pic: level sensitive irq not supported [ 268.424235][ T7206] kvm: pic: non byte write [ 268.573028][ T7206] kvm: pic: non byte write [ 269.383057][ T7206] kvm: pic: non byte write [ 269.404431][ T7206] kvm: pic: non byte write [ 269.587726][ T7206] kvm: pic: non byte write [ 269.592707][ T7206] kvm: pic: non byte write [ 269.624703][ T7206] kvm: pic: non byte write [ 270.607016][ T7206] kvm: pic: non byte write [ 271.375490][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 271.575152][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 271.599140][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.678689][ T7240] netlink: 248 bytes leftover after parsing attributes in process `syz.0.251'. [ 271.967460][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 272.170986][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.219666][ T7237] veth0_vlan: entered allmulticast mode [ 272.245230][ T7238] veth0_vlan: left promiscuous mode [ 272.253596][ T7238] veth0_vlan: entered promiscuous mode [ 272.300741][ T24] usb 3-1: Product: syz [ 272.480209][ T7244] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.614436][ T24] usb 3-1: Manufacturer: syz [ 273.511823][ T24] usb 3-1: SerialNumber: syz [ 276.733960][ T24] usb 3-1: config 0 descriptor?? [ 276.936398][ T24] usb 3-1: can't set config #0, error -71 [ 277.016666][ T24] usb 3-1: USB disconnect, device number 2 [ 279.080823][ T6261] bridge_slave_1: left allmulticast mode [ 279.086663][ T6261] bridge_slave_1: left promiscuous mode [ 279.092477][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.156159][ T6261] bridge_slave_0: left allmulticast mode [ 280.161959][ T6261] bridge_slave_0: left promiscuous mode [ 280.314400][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.380214][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.394685][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.406735][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.416543][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.424487][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.489582][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.509980][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.527630][ T6261] bond0 (unregistering): Released all slaves [ 284.254997][ T6261] : left promiscuous mode [ 285.733122][ T55] Bluetooth: hci0: command tx timeout [ 285.761245][ T7310] NILFS (nullb0): couldn't find nilfs on the device [ 286.346138][ T7291] lo speed is unknown, defaulting to 1000 [ 286.698160][ T7321] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.062655][ T7324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.845959][ T55] Bluetooth: hci0: command tx timeout [ 289.203596][ T7340] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 289.501034][ T7336] veth1_macvtap: left promiscuous mode [ 291.655233][ T30] audit: type=1800 audit(1745337270.231:257): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.269" name="bus" dev="overlay" ino=416 res=0 errno=0 [ 291.675010][ T5836] Bluetooth: hci0: command tx timeout [ 291.680468][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 291.755548][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.846279][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.959610][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.970607][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.978645][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.005147][ T5839] Bluetooth: hci0: command tx timeout [ 294.185265][ T5839] Bluetooth: hci1: command tx timeout [ 295.229512][ T7378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.821322][ T7383] Invalid ELF header magic: != ELF [ 296.255457][ T5839] Bluetooth: hci1: command tx timeout [ 296.262114][ T7346] lo speed is unknown, defaulting to 1000 [ 296.643756][ T7390] netlink: 248 bytes leftover after parsing attributes in process `syz.3.275'. [ 297.272532][ T7388] veth0_vlan: entered allmulticast mode [ 297.287555][ T7389] veth0_vlan: left promiscuous mode [ 297.294654][ T7389] veth0_vlan: entered promiscuous mode [ 298.642759][ T5839] Bluetooth: hci1: command tx timeout [ 299.440009][ T7405] kAFS: Can only specify source 'none' with -o dyn [ 299.615237][ T5839] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 300.699684][ T6261] hsr_slave_0: left promiscuous mode [ 300.733869][ T5839] Bluetooth: hci1: command tx timeout [ 300.806791][ T6261] hsr_slave_1: left promiscuous mode [ 300.861915][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.872236][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.013398][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.025017][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.267730][ T6261] veth1_macvtap: left allmulticast mode [ 301.356266][ T6261] veth1_macvtap: left promiscuous mode [ 301.375207][ T6261] veth0_macvtap: left promiscuous mode [ 301.381025][ T6261] veth1_vlan: left promiscuous mode [ 301.386492][ T6261] veth0_vlan: left promiscuous mode [ 301.413199][ T7418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.281'. [ 301.436890][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 302.809766][ T5827] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 302.957248][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 302.999009][ T5827] usb 1-1: config 0 has no interfaces? [ 303.007547][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 303.013603][ T5827] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 303.029219][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.038708][ T5827] usb 1-1: Product: syz [ 303.043059][ T5827] usb 1-1: Manufacturer: syz [ 303.048120][ T5827] usb 1-1: SerialNumber: syz [ 303.064031][ T5827] usb 1-1: config 0 descriptor?? [ 304.613426][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 304.816853][ T7426] lo speed is unknown, defaulting to 1000 [ 305.187437][ T7442] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.196731][ T7442] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.205810][ T7442] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.215809][ T7442] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.413430][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.446441][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.470906][ T7291] bridge_slave_0: entered allmulticast mode [ 305.489007][ T7291] bridge_slave_0: entered promiscuous mode [ 305.511269][ T7346] chnl_net:caif_netlink_parms(): no params data found [ 305.702040][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.722637][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.782447][ T7291] bridge_slave_1: entered allmulticast mode [ 305.809339][ T7291] bridge_slave_1: entered promiscuous mode [ 306.793380][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.881547][ T6261] IPVS: stop unused estimator thread 0... [ 306.923992][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.206891][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.226380][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.233614][ T7346] bridge_slave_0: entered allmulticast mode [ 307.866830][ T7346] bridge_slave_0: entered promiscuous mode [ 307.877406][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.884627][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.891983][ T7346] bridge_slave_1: entered allmulticast mode [ 307.899904][ T7346] bridge_slave_1: entered promiscuous mode [ 308.743922][ T7291] team0: Port device team_slave_0 added [ 308.785082][ T6261] bridge_slave_1: left allmulticast mode [ 308.804176][ T6261] bridge_slave_1: left promiscuous mode [ 308.829003][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.878940][ T6261] bridge_slave_0: left allmulticast mode [ 308.895406][ T6261] bridge_slave_0: left promiscuous mode [ 308.938757][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.087948][ T6261] bridge_slave_1: left allmulticast mode [ 309.128228][ T6261] bridge_slave_1: left promiscuous mode [ 309.133952][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.152606][ T6261] bridge_slave_0: left allmulticast mode [ 309.158485][ T6261] bridge_slave_0: left promiscuous mode [ 309.164356][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.215109][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 309.401160][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.413905][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.424610][ T6261] bond0 (unregistering): Released all slaves [ 309.443050][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.455498][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.466618][ T6261] bond0 (unregistering): Released all slaves [ 309.621507][ T7482] netlink: 'syz.3.289': attribute type 30 has an invalid length. [ 309.817518][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.088335][ T7291] team0: Port device team_slave_1 added [ 310.302952][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.569823][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.577090][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.604016][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.605859][ T7489] netlink: 'syz.3.291': attribute type 39 has an invalid length. [ 311.711898][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.732514][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.851165][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.036140][ T7346] team0: Port device team_slave_0 added [ 313.056668][ T7346] team0: Port device team_slave_1 added [ 314.236519][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.243525][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.331502][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.629165][ T7291] hsr_slave_0: entered promiscuous mode [ 314.643236][ T7291] hsr_slave_1: entered promiscuous mode [ 315.360956][ T6261] hsr_slave_0: left promiscuous mode [ 315.371667][ T5827] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 315.576992][ T5827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.611353][ T5827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.652269][ T5827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.718175][ T5827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.744302][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.794660][ T5827] usb 3-1: Product: syz [ 315.811630][ T5827] usb 3-1: Manufacturer: syz [ 315.829983][ T5827] usb 3-1: SerialNumber: syz [ 315.929624][ T5827] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 315.942284][ T5827] cdc_mbim 3-1:1.0: bind() failure [ 316.372174][ T6261] hsr_slave_1: left promiscuous mode [ 316.414203][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.437639][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.462306][ T6261] hsr_slave_0: left promiscuous mode [ 316.491746][ T6261] hsr_slave_1: left promiscuous mode [ 316.498173][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.506889][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.240566][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.518142][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 317.641591][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 317.700884][ T5827] usb 3-1: USB disconnect, device number 3 [ 319.001975][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.018212][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.026192][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.048218][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.057196][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.139864][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 319.184042][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 319.360242][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.372234][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.398987][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.465580][ T7533] bond0: (slave dummy0): Releasing backup interface [ 319.498028][ T7533] batman_adv: batadv0: Adding interface: dummy0 [ 319.519961][ T7533] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.563602][ T7533] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 321.125137][ T5839] Bluetooth: hci5: command tx timeout [ 321.334364][ T7346] hsr_slave_0: entered promiscuous mode [ 321.407917][ T7346] hsr_slave_1: entered promiscuous mode [ 321.450844][ T7346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.499534][ T7346] Cannot create hsr debugfs directory [ 322.071354][ T7540] lo speed is unknown, defaulting to 1000 [ 322.275288][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 322.683037][ T24] usb 3-1: device descriptor read/64, error -71 [ 323.205107][ T5839] Bluetooth: hci5: command tx timeout [ 325.285044][ T5839] Bluetooth: hci5: command tx timeout [ 325.746379][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 325.915364][ T24] usb 3-1: device descriptor read/64, error -71 [ 326.039839][ T24] usb usb3-port1: attempt power cycle [ 327.447523][ T5839] Bluetooth: hci5: command tx timeout [ 327.538436][ T30] audit: type=1326 audit(1745337307.751:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 327.719749][ T9] usb 1-1: USB disconnect, device number 2 [ 327.737275][ T30] audit: type=1326 audit(1745337307.751:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 327.789234][ T7291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.803152][ T30] audit: type=1326 audit(1745337307.751:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 327.860920][ T7291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.870863][ T30] audit: type=1326 audit(1745337307.871:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 327.930703][ T30] audit: type=1326 audit(1745337307.871:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 327.970640][ T5882] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 328.028124][ T30] audit: type=1326 audit(1745337307.871:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 328.050984][ T7291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 328.069557][ T7291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.101562][ T30] audit: type=1326 audit(1745337307.911:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 328.158145][ T5882] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 328.175033][ T5882] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 328.213067][ T5882] usb 4-1: config 0 has no interface number 0 [ 328.275165][ T5882] usb 4-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 328.321968][ T7346] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.339148][ T30] audit: type=1326 audit(1745337307.911:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 328.354253][ T5882] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.363378][ T30] audit: type=1326 audit(1745337307.941:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 328.452003][ T30] audit: type=1326 audit(1745337307.941:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3378e169 code=0x7fc00000 [ 328.473434][ T5882] usb 4-1: config 0 interface 52 has no altsetting 0 [ 328.477264][ T5882] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 329.170073][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 329.178983][ T5882] usb 4-1: Product: syz [ 329.183173][ T5882] usb 4-1: SerialNumber: syz [ 329.234293][ T5882] usb 4-1: config 0 descriptor?? [ 329.381111][ T6261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.428778][ T7346] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.472963][ T7346] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.514180][ T7604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 329.521011][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 329.546116][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 329.571316][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 329.585869][ T7604] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 329.592539][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 329.620830][ T7609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.638574][ T6261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.645141][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 329.658701][ T7346] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.720207][ T7604] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 329.726920][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 329.736578][ T5927] vhci_hcd: vhci_device speed not set [ 329.738028][ T6261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.754656][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 329.762876][ T7609] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 329.769518][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 329.778861][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 329.805957][ T5927] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 329.829519][ T7604] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(19) [ 329.836193][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 329.876083][ T7609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.891446][ T7609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.897834][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 329.901730][ T7609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.921081][ T6261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.977448][ T7614] vhci_hcd: connection closed [ 329.978333][ T7612] vhci_hcd: connection closed [ 329.983881][ T7607] vhci_hcd: connection closed [ 329.990959][ T3487] vhci_hcd: stop threads [ 329.991530][ T7610] vhci_hcd: connection closed [ 330.000900][ T7605] vhci_hcd: connection reset by peer [ 330.005785][ T3487] vhci_hcd: release socket [ 330.021279][ T3487] vhci_hcd: disconnect device [ 330.027861][ T3487] vhci_hcd: stop threads [ 330.032176][ T3487] vhci_hcd: release socket [ 330.039343][ T3487] vhci_hcd: disconnect device [ 330.044499][ T3487] vhci_hcd: stop threads [ 330.049904][ T3487] vhci_hcd: release socket [ 330.054457][ T3487] vhci_hcd: disconnect device [ 330.059924][ T3487] vhci_hcd: stop threads [ 330.064605][ T3487] vhci_hcd: release socket [ 330.069948][ T3487] vhci_hcd: disconnect device [ 330.075504][ T3487] vhci_hcd: stop threads [ 330.079786][ T3487] vhci_hcd: release socket [ 330.084388][ T3487] vhci_hcd: disconnect device [ 330.131522][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.139203][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.147091][ T7540] bridge_slave_0: entered allmulticast mode [ 330.154471][ T7540] bridge_slave_0: entered promiscuous mode [ 330.164221][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.176590][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.183847][ T7540] bridge_slave_1: entered allmulticast mode [ 330.191661][ T7540] bridge_slave_1: entered promiscuous mode [ 330.283498][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.296713][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.312447][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.366333][ T7540] team0: Port device team_slave_0 added [ 330.463019][ T7540] team0: Port device team_slave_1 added [ 330.828641][ T978] usb 4-1: USB disconnect, device number 2 [ 331.080641][ T7630] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 331.091770][ T7630] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 331.539700][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.565891][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.650159][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.669823][ T6261] bridge_slave_1: left allmulticast mode [ 331.685276][ T6261] bridge_slave_1: left promiscuous mode [ 331.691157][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.753112][ T6261] bridge_slave_0: left allmulticast mode [ 331.783080][ T6261] bridge_slave_0: left promiscuous mode [ 331.793453][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.264561][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.278543][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.289642][ T6261] bond0 (unregistering): Released all slaves [ 333.031189][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.044856][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.070940][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.115242][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.157132][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.881632][ T6261] tipc: Disabling bearer [ 333.890844][ T6261] tipc: Left network mode [ 333.898430][ T7648] netlink: 'syz.2.313': attribute type 2 has an invalid length. [ 333.919537][ T7540] hsr_slave_0: entered promiscuous mode [ 333.936387][ T7540] hsr_slave_1: entered promiscuous mode [ 333.942890][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.148970][ T7540] Cannot create hsr debugfs directory [ 334.966201][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.973455][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.044586][ T7648] : entered promiscuous mode [ 335.069493][ T5927] vhci_hcd: vhci_device speed not set [ 335.079364][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.086619][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.665403][ T7669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.262950][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.762108][ T975] libceph: connect (1)[c::]:6789 error -101 [ 337.097794][ T7671] ceph: No mds server is up or the cluster is laggy [ 337.113244][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 337.356177][ T7680] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 338.298841][ T7686] new mount options do not match the existing superblock, will be ignored [ 338.320026][ T7686] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 338.671392][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.579038][ T6261] hsr_slave_0: left promiscuous mode [ 339.597570][ T6261] hsr_slave_1: left promiscuous mode [ 339.626137][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.634797][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.729360][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.184010][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.243991][ T6261] veth1_macvtap: left promiscuous mode [ 340.264683][ T6261] veth0_macvtap: left promiscuous mode [ 340.270525][ T6261] veth1_vlan: left promiscuous mode [ 340.276420][ T6261] veth0_vlan: left promiscuous mode [ 341.225357][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 341.438285][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 342.515890][ T7710] ceph: No mds server is up or the cluster is laggy [ 342.605682][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.612876][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.667830][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.675082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.900672][ T975] IPVS: starting estimator thread 0... [ 346.063310][ T7540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 346.071132][ T7735] IPVS: using max 26 ests per chain, 62400 per kthread [ 346.739208][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.761090][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.804279][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.889816][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.957842][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.609214][ T7540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 347.761501][ T7540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.860629][ T7540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 348.027960][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 348.069988][ T7734] lo speed is unknown, defaulting to 1000 [ 348.260030][ T10] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 348.286138][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 348.305040][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.356140][ T10] usb 4-1: config 0 descriptor?? [ 348.364110][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.381157][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 348.753324][ T10] gp8psk: usb in 128 operation failed. [ 348.764740][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.768808][ T10] gp8psk: usb in 137 operation failed. [ 348.783046][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.784154][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.809158][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.818345][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 348.830022][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.838345][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.843607][ T10] usb 4-1: media controller created [ 348.889376][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.889869][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.931208][ T10] gp8psk_fe: Frontend attached [ 348.949151][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 349.010702][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 349.023060][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.030286][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.125821][ T5839] Bluetooth: hci3: command tx timeout [ 349.142594][ T10] gp8psk: usb in 138 operation failed. [ 349.149324][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 349.159278][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 349.202661][ T10] usb 4-1: USB disconnect, device number 3 [ 349.429954][ T7766] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 349.565672][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 349.565713][ T30] audit: type=1800 audit(1745337329.831:325): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.329" name="file0" dev="overlay" ino=539 res=0 errno=0 [ 350.001157][ T7761] lo speed is unknown, defaulting to 1000 [ 350.131132][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 350.896303][ T5839] Bluetooth: hci0: command tx timeout [ 351.230741][ T5839] Bluetooth: hci3: command tx timeout [ 351.300807][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.308138][ T4166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.377789][ T7770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.851714][ T7734] chnl_net:caif_netlink_parms(): no params data found [ 352.995078][ T5839] Bluetooth: hci0: command tx timeout [ 353.285202][ T5839] Bluetooth: hci3: command tx timeout [ 353.813131][ T6261] bridge_slave_1: left allmulticast mode [ 353.813355][ T7804] netlink: 'syz.3.335': attribute type 1 has an invalid length. [ 353.853152][ T6261] bridge_slave_1: left promiscuous mode [ 353.893581][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.041816][ T6261] bridge_slave_0: left allmulticast mode [ 354.059840][ T6261] bridge_slave_0: left promiscuous mode [ 354.071663][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.803395][ T7812] kAFS: unparsable volume name [ 355.055262][ T5839] Bluetooth: hci0: command tx timeout [ 355.366265][ T5839] Bluetooth: hci3: command tx timeout [ 355.752155][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.764811][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.782169][ T6261] bond0 (unregistering): Released all slaves [ 357.126577][ T5839] Bluetooth: hci0: command tx timeout [ 357.521651][ T7831] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 357.613776][ T6261] hsr_slave_0: left promiscuous mode [ 357.629689][ T6261] hsr_slave_1: left promiscuous mode [ 357.653629][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.415695][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.482322][ T7838] ALSA: seq fatal error: cannot create timer (-16) [ 358.822624][ T7842] syz.2.343: attempt to access beyond end of device [ 358.822624][ T7842] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 358.835997][ T7842] (syz.2.343,7842,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 358.843600][ T7842] (syz.2.343,7842,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 358.850959][ T7842] (syz.2.343,7842,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 358.859621][ T7842] (syz.2.343,7842,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 360.256016][ T7850] 9pnet_fd: Insufficient options for proto=fd [ 360.377337][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 360.910746][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 360.952510][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 362.364787][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.385448][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.392842][ T7734] bridge_slave_0: entered allmulticast mode [ 362.400994][ T7734] bridge_slave_0: entered promiscuous mode [ 362.440727][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.472453][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.490049][ T7734] bridge_slave_1: entered allmulticast mode [ 362.507644][ T7734] bridge_slave_1: entered promiscuous mode [ 362.893358][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.114367][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 364.507978][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.728128][ T7892] ALSA: seq fatal error: cannot create timer (-16) [ 364.851034][ T7886] netlink: 'syz.2.351': attribute type 8 has an invalid length. [ 364.949636][ T7898] syz.3.352: attempt to access beyond end of device [ 364.949636][ T7898] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 364.962741][ T7898] (syz.3.352,7898,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 364.970363][ T7898] (syz.3.352,7898,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 364.977727][ T7898] (syz.3.352,7898,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 364.986539][ T7898] (syz.3.352,7898,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 365.763156][ T7734] team0: Port device team_slave_0 added [ 366.834570][ T7761] chnl_net:caif_netlink_parms(): no params data found [ 367.225773][ T7734] team0: Port device team_slave_1 added [ 367.633447][ T7914] ntfs3(nullb0): Primary boot signature is not NTFS. [ 367.642018][ T7914] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 367.979185][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.007531][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.057825][ T7734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.365616][ T7917] sched: DL replenish lagged too much [ 473.304892][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 473.312088][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4508/1:b..l P5200/1:b..l [ 473.321639][ C0] rcu: (detected by 0, t=10506 jiffies, g=22521, q=129 ncpus=2) [ 473.329375][ C0] task:udevd state:R running task stack:22600 pid:5200 tgid:5200 ppid:1 task_flags:0x400140 flags:0x00004002 [ 473.343662][ C0] Call Trace: [ 473.346964][ C0] [ 473.349915][ C0] __schedule+0x1b33/0x51f0 [ 473.354480][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 473.359797][ C0] ? __pfx___schedule+0x10/0x10 [ 473.364678][ C0] ? rcu_is_watching+0x15/0xb0 [ 473.369462][ C0] ? trace_sched_exit_tp+0x3c/0x120 [ 473.374690][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 473.380004][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 473.385153][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 473.390898][ C0] ? preempt_schedule_irq+0x145/0x1c0 [ 473.396310][ C0] irqentry_exit+0x5e/0x90 [ 473.400739][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 473.406219][ C0] RIP: 0010:unix_write_space+0x1e0/0x470 [ 473.411870][ C0] Code: 74 5a e8 23 06 0b f7 eb 05 e8 1c 06 0b f7 4d 85 e4 74 42 f0 83 44 24 fc 00 49 8d 5c 24 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 d6 ae 72 f7 48 8b 03 48 39 d8 74 4c e8 e9 05 0b [ 473.431487][ C0] RSP: 0018:ffffc90002fe7788 EFLAGS: 00000246 [ 473.437574][ C0] RAX: 1ffff110047479d0 RBX: ffff888023a3ce80 RCX: ffff88807fe79e00 [ 473.445562][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 473.453543][ C0] RBP: 0000000000000008 R08: ffffffff8ab7b634 R09: 1ffff110068a9683 [ 473.461528][ C0] R10: dffffc0000000000 R11: ffffed10068a9684 R12: ffff888023a3ce40 [ 473.469518][ C0] R13: ffff88803454b180 R14: ffffffff8ab7b4a6 R15: dffffc0000000000 [ 473.477508][ C0] ? unix_write_space+0x26/0x470 [ 473.482473][ C0] ? unix_write_space+0x1b4/0x470 [ 473.487525][ C0] ? unix_write_space+0x1bd/0x470 [ 473.492572][ C0] sock_wfree+0x1dd/0x7b0 [ 473.496934][ C0] unix_destruct_scm+0x1d5/0x220 [ 473.501896][ C0] ? __pfx_unix_destruct_scm+0x10/0x10 [ 473.507388][ C0] skb_release_head_state+0x100/0x250 [ 473.512795][ C0] consume_skb+0x60/0xf0 [ 473.517062][ C0] __unix_dgram_recvmsg+0xced/0x12e0 [ 473.522390][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 473.528128][ C0] ? __lock_acquire+0xad5/0xd80 [ 473.533012][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 473.538053][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 473.543618][ C0] sock_recvmsg+0x22f/0x280 [ 473.548154][ C0] ____sys_recvmsg+0x1c8/0x480 [ 473.552943][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 473.558253][ C0] ? __lock_acquire+0xad5/0xd80 [ 473.563132][ C0] __sys_recvmsg+0x2a5/0x3a0 [ 473.567742][ C0] ? __pfx___sys_recvmsg+0x10/0x10 [ 473.572912][ C0] ? do_syscall_64+0xb6/0x210 [ 473.577607][ C0] do_syscall_64+0xf3/0x210 [ 473.582126][ C0] ? clear_bhb_loop+0x45/0xa0 [ 473.586820][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.592727][ C0] RIP: 0033:0x7f880f72491e [ 473.597164][ C0] RSP: 002b:00007ffd82ee6e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 473.605616][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f880f72491e [ 473.613604][ C0] RDX: 0000000000000040 RSI: 00007ffd82ee6ef0 RDI: 0000000000000009 [ 473.621584][ C0] RBP: 00007ffd82ee6ef0 R08: 0000000015f27dd1 R09: 7fffffffffffffff [ 473.629571][ C0] R10: 00007f880fb82038 R11: 0000000000000246 R12: 0000000000000000 [ 473.637555][ C0] R13: 0000000200000001 R14: 0000000000000000 R15: 0000000000000000 [ 473.645557][ C0] [ 473.648593][ C0] task:kworker/u8:8 state:R running task stack:22536 pid:4508 tgid:4508 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 473.662190][ C0] Workqueue: bat_events batadv_nc_worker [ 473.667850][ C0] Call Trace: [ 473.671144][ C0] [ 473.674090][ C0] __schedule+0x1b33/0x51f0 [ 473.678640][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 473.683956][ C0] ? __pfx___schedule+0x10/0x10 [ 473.688857][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 473.695476][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 473.700790][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 473.705926][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 473.711688][ C0] irqentry_exit+0x5e/0x90 [ 473.716119][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 473.721594][ C0] RIP: 0010:lock_release+0x244/0x3e0 [ 473.726899][ C0] Code: 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 0f 85 c3 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 03 <48> 3b 44 24 28 0f 85 82 01 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 473.746514][ C0] RSP: 0018:ffffc9000d677a50 EFLAGS: 00000206 [ 473.752596][ C0] RAX: 7aa9e075c520bb00 RBX: ffffffff93651020 RCX: 0000000000000002 [ 473.760578][ C0] RDX: 0000000000000000 RSI: ffffffff8e4c80af RDI: ffffffff8ca0e280 [ 473.768561][ C0] RBP: ffff888033bb0b40 R08: ffffffff8bf1b94e R09: 0000000000000000 [ 473.776546][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 473.784529][ C0] R13: ffff888033bb0000 R14: 0000000000000206 R15: ffffffff8ed3df20 [ 473.792527][ C0] ? batadv_nc_worker+0x1fe/0x610 [ 473.797590][ C0] ? batadv_nc_worker+0xcb/0x610 [ 473.802546][ C0] ? batadv_nc_worker+0xcb/0x610 [ 473.807502][ C0] batadv_nc_worker+0x28b/0x610 [ 473.812375][ C0] ? batadv_nc_worker+0xcb/0x610 [ 473.817384][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 473.823208][ C0] process_scheduled_works+0xac3/0x18e0 [ 473.828801][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.834832][ C0] ? assign_work+0x367/0x3d0 [ 473.839452][ C0] worker_thread+0x870/0xd50 [ 473.844083][ C0] ? __kthread_parkme+0x1a8/0x200 [ 473.849140][ C0] ? __pfx_worker_thread+0x10/0x10 [ 473.854282][ C0] kthread+0x7b7/0x940 [ 473.858372][ C0] ? __pfx_worker_thread+0x10/0x10 [ 473.863512][ C0] ? __pfx_kthread+0x10/0x10 [ 473.868120][ C0] ? __pfx_kthread+0x10/0x10 [ 473.872725][ C0] ? __pfx_kthread+0x10/0x10 [ 473.877325][ C0] ? __pfx_kthread+0x10/0x10 [ 473.881933][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.887154][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 473.892376][ C0] ? __pfx_kthread+0x10/0x10 [ 473.897001][ C0] ret_from_fork+0x4b/0x80 [ 473.901430][ C0] ? __pfx_kthread+0x10/0x10 [ 473.906038][ C0] ret_from_fork_asm+0x1a/0x30 [ 473.910841][ C0] [ 473.913881][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g22521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 473.926213][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=24586 [ 473.934101][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g22521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 473.945479][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 473.955456][ C0] rcu: RCU grace-period kthread stack dump: [ 473.961347][ C0] task:rcu_preempt state:I stack:26688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 473.973381][ C0] Call Trace: [ 473.976673][ C0] [ 473.979621][ C0] __schedule+0x1b33/0x51f0 [ 473.984153][ C0] ? rcu_is_watching+0x15/0xb0 [ 473.988956][ C0] ? schedule+0x163/0x360 [ 473.993314][ C0] ? __pfx___schedule+0x10/0x10 [ 473.998221][ C0] ? schedule+0x90/0x360 [ 474.002487][ C0] ? schedule+0x90/0x360 [ 474.006768][ C0] schedule+0x163/0x360 [ 474.010950][ C0] schedule_timeout+0x15b/0x2b0 [ 474.015824][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 474.021215][ C0] ? __pfx_process_timeout+0x10/0x10 [ 474.026517][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 474.032074][ C0] ? prepare_to_swait_event+0x308/0x340 [ 474.037656][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 474.042880][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 474.047757][ C0] ? rcu_gp_init+0x1279/0x1690 [ 474.052546][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 474.057501][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 474.063419][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 474.068721][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 474.074681][ C0] ? finish_swait+0xdb/0x200 [ 474.079290][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 474.084512][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 474.089137][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 474.094368][ C0] ? __kthread_parkme+0x1a8/0x200 [ 474.099426][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 474.104647][ C0] kthread+0x7b7/0x940 [ 474.108754][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 474.113973][ C0] ? __pfx_kthread+0x10/0x10 [ 474.118575][ C0] ? __pfx_kthread+0x10/0x10 [ 474.123180][ C0] ? __pfx_kthread+0x10/0x10 [ 474.127789][ C0] ? __pfx_kthread+0x10/0x10 [ 474.132395][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.137620][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 474.142855][ C0] ? __pfx_kthread+0x10/0x10 [ 474.147474][ C0] ret_from_fork+0x4b/0x80 [ 474.151922][ C0] ? __pfx_kthread+0x10/0x10 [ 474.156536][ C0] ret_from_fork_asm+0x1a/0x30 [ 474.161339][ C0] [ 474.164376][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 474.170720][ C0] Sending NMI from CPU 0 to CPUs 1: [ 474.175940][ C1] NMI backtrace for cpu 1 [ 474.175965][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 474.175990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.176004][ C1] RIP: 0010:lock_acquire+0x152/0x2f0 [ 474.176027][ C1] Code: ff ff ff 65 0f c1 05 9d e4 c6 11 83 f8 01 0f 85 f9 00 00 00 48 c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 <0f> 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 48 [ 474.176039][ C1] RSP: 0018:ffffc90000a08c20 EFLAGS: 00000046 [ 474.176054][ C1] RAX: 0000000000000001 RBX: ffff8880b87276d8 RCX: 265670e0e110a000 [ 474.176064][ C1] RDX: 0000000000000001 RSI: ffffffff8e4c80af RDI: ffffffff8ca0e280 [ 474.176075][ C1] RBP: ffffffff93651020 R08: 0000000000000001 R09: 0000000000000001 [ 474.176084][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 474.176092][ C1] R13: 0000000000000000 R14: 0000000000000046 R15: 0000000000000000 [ 474.176101][ C1] FS: 0000000000000000(0000) GS:ffff8881250cf000(0000) knlGS:0000000000000000 [ 474.176113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.176123][ C1] CR2: 0000200000021000 CR3: 000000005cb0c000 CR4: 00000000003526f0 [ 474.176136][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.176145][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.176154][ C1] Call Trace: [ 474.176161][ C1] [ 474.176168][ C1] ? advance_sched+0xa02/0xca0 [ 474.176202][ C1] _raw_spin_lock_irq+0xd3/0x120 [ 474.176243][ C1] ? __hrtimer_run_queues+0x67b/0xd40 [ 474.176267][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 474.176296][ C1] __hrtimer_run_queues+0x67b/0xd40 [ 474.176319][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 474.176348][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 474.176376][ C1] ? sched_clock_cpu+0x77/0x4d0 [ 474.176399][ C1] ? read_tsc+0x9/0x20 [ 474.176420][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 474.176443][ C1] hrtimer_interrupt+0x403/0xa40 [ 474.176479][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 474.176500][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 474.176526][ C1] [ 474.176531][ C1] [ 474.176537][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 474.176554][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 474.176579][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 6e 20 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 474.176591][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c6 [ 474.176605][ C1] RAX: 265670e0e110a000 RBX: ffffffff8197267e RCX: ffffffff8c27c89c [ 474.176619][ C1] RDX: 0000000000000001 RSI: ffffffff8e635648 RDI: ffffffff8ca0e280 [ 474.176630][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b [ 474.176641][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2 [ 474.176653][ C1] R13: 1ffff11003ad8b40 R14: 0000000000000001 R15: dffffc0000000000 [ 474.176666][ C1] ? do_idle+0x22e/0x5d0 [ 474.176690][ C1] ? ct_kernel_exit+0x12c/0x1a0 [ 474.176710][ C1] default_idle+0x13/0x20 [ 474.176727][ C1] default_idle_call+0x74/0xb0 [ 474.176744][ C1] do_idle+0x22e/0x5d0 [ 474.176772][ C1] ? __pfx_do_idle+0x10/0x10 [ 474.176801][ C1] ? do_idle+0xa/0x5d0 [ 474.176825][ C1] cpu_startup_entry+0x42/0x60 [ 474.176848][ C1] start_secondary+0xfe/0x100 [ 474.176871][ C1] common_startup_64+0x13e/0x147 [ 474.176900][ C1]