last executing test programs: 27m45.945696858s ago: executing program 32 (id=485): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654c", 0x4b}], 0x1) 27m17.73748618s ago: executing program 33 (id=528): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xc, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x27) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x5, 0x8, 0x8000000000005) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 25m12.733841387s ago: executing program 34 (id=722): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 21m35.845886723s ago: executing program 35 (id=1108): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@loopback, 0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) readahead(r2, 0x7, 0x4000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mknod$loop(0x0, 0x400, 0x0) 20m58.420479308s ago: executing program 36 (id=1168): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x80001) open(0x0, 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), 0x0}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 19m15.436019782s ago: executing program 37 (id=1301): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) socket(0x1, 0x803, 0x0) 16m54.810544729s ago: executing program 38 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007911b00000000000851000000200000007000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 15m46.790719851s ago: executing program 39 (id=1664): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) msgsnd(0x0, 0x0, 0xff, 0x0) dup(0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15m25.521158379s ago: executing program 40 (id=1703): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x4}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 12m22.932414679s ago: executing program 41 (id=1970): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) sendfile(r0, r0, 0x0, 0x40008) 12m14.030532483s ago: executing program 42 (id=1978): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x61be, &(0x7f00000003c0)={0x0, 0x408b, 0x3180, 0xf7fffffd, 0x39a}, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, 0x0) shutdown(r1, 0x0) openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) listen(r3, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 12m12.292442675s ago: executing program 43 (id=1979): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000100)={0x10, 0x1, r1}) 9m55.479471778s ago: executing program 44 (id=2206): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b2e0c65377}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b0000000000000000070000", @ANYBLOB="000017000000000008000a00"], 0x2c}}, 0x0) close(0x4) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d) unshare(0x40000000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$pppl2tp(r2, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e27, 0x4, @mcast2, 0x1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2f6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) 8m29.724561303s ago: executing program 3 (id=2406): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000012000501000000000040000028001a00ac1414100000000000000000000000000af5ffffffff000000000070dfbc608b8ae3f2"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x300088d0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x5e}], 0x1, 0x10, 0xf5) 8m28.057855587s ago: executing program 3 (id=2407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000102010400000000000000000a0000003c0001802c00018014000300ff010000000000000000000000000001140004"], 0x50}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) 8m27.777795919s ago: executing program 3 (id=2408): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r3, 0x4b6a, &(0x7f0000000000)={0x1, 0x40000000, 0x0, 0xfeff200d, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) 8m26.744667425s ago: executing program 3 (id=2410): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0xb21e0000, 0x0, 0x1e, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 8m24.980333435s ago: executing program 3 (id=2414): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) read(r4, 0x0, 0x0) 8m19.414807475s ago: executing program 3 (id=2420): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000040), 0x0, &(0x7f00000007c0)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x7fff}, &(0x7f0000000080)=0x4, &(0x7f0000000180)=0x26, 0x8a, 0x9, 0x400, 0x8, 0x40, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x2}, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x7fff, 0xb, 0x2, 0x9, 0xd3, 0x0, 0xff}}, @cswp={0x58, 0x114, 0x7, {{0x7fffffff, 0x4}, &(0x7f00000002c0)=0x7ffe, &(0x7f0000000400), 0xa, 0xffffffffffffffff, 0x10000, 0x7f, 0xa}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000480)=""/150, 0x96}, &(0x7f0000000580), 0x1a}}, @rdma_dest={0x18, 0x114, 0x2, {0x6ad, 0xbe}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f0000000680), 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0x5}, &(0x7f00000006c0)=0x8000000000000000, &(0x7f0000000700)=0x6, 0x9, 0x9, 0x1, 0xce, 0x22, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000000c0)=""/23, 0x17}, 0x0, 0x18}}], 0x208}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000000100000001000009"], 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ptrace$poke(0x1, 0x0, &(0x7f0000000a80), 0x7fff) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 8m3.040891845s ago: executing program 45 (id=2420): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000040), 0x0, &(0x7f00000007c0)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x7fff}, &(0x7f0000000080)=0x4, &(0x7f0000000180)=0x26, 0x8a, 0x9, 0x400, 0x8, 0x40, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x2}, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x7fff, 0xb, 0x2, 0x9, 0xd3, 0x0, 0xff}}, @cswp={0x58, 0x114, 0x7, {{0x7fffffff, 0x4}, &(0x7f00000002c0)=0x7ffe, &(0x7f0000000400), 0xa, 0xffffffffffffffff, 0x10000, 0x7f, 0xa}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000480)=""/150, 0x96}, &(0x7f0000000580), 0x1a}}, @rdma_dest={0x18, 0x114, 0x2, {0x6ad, 0xbe}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f0000000680), 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0x5}, &(0x7f00000006c0)=0x8000000000000000, &(0x7f0000000700)=0x6, 0x9, 0x9, 0x1, 0xce, 0x22, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000000c0)=""/23, 0x17}, 0x0, 0x18}}], 0x208}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000000100000001000009"], 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ptrace$poke(0x1, 0x0, &(0x7f0000000a80), 0x7fff) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 4m30.33711661s ago: executing program 2 (id=3215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 4m30.043563008s ago: executing program 2 (id=3217): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) close_range(r0, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x10000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, 0x140c, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) 4m29.785864385s ago: executing program 2 (id=3219): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000000, 0xd, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95b", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) 4m29.503271713s ago: executing program 2 (id=3222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) 4m29.197539002s ago: executing program 2 (id=3225): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 4m28.673645724s ago: executing program 2 (id=3228): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x78}, {@empty, 0x4e24, 0x10000, 0xc, 0x100002}}, 0x44) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0x1054}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) 4m13.506882272s ago: executing program 46 (id=3228): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x78}, {@empty, 0x4e24, 0x10000, 0xc, 0x100002}}, 0x44) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0x1054}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) 4m10.623555794s ago: executing program 5 (id=3271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, 0x0, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0xca, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x7936c000) 4m9.25422693s ago: executing program 5 (id=3272): socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000012000501000000000040000028001a00ac1414100000000000000000000000000af5ffffffff000000000070dfbc608b8ae3f2"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x300088d0) 4m7.793144438s ago: executing program 5 (id=3274): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) timerfd_create(0x7, 0x0) 4m4.469946614s ago: executing program 5 (id=3282): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) 4m3.972054189s ago: executing program 5 (id=3286): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) read(r4, 0x0, 0x0) 4m1.921371535s ago: executing program 5 (id=3287): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000012000501000000000040000028001a00ac1414100000000000000000000000000af5ffffffff000000000070dfbc608b8ae3f2"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x300088d0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x5e}], 0x1, 0x10, 0xf5) 3m45.362897927s ago: executing program 47 (id=3287): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000012000501000000000040000028001a00ac1414100000000000000000000000000af5ffffffff000000000070dfbc608b8ae3f2"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x300088d0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x5e}], 0x1, 0x10, 0xf5) 3m19.965384347s ago: executing program 9 (id=3371): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x2, 0x862b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r6) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000240)) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) 3m17.864600209s ago: executing program 9 (id=3373): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) unshare(0x24020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x604400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000040)=0x27, 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "b33cebd1698137d9", "3efbbd6af57252a1a0421f38c06f32c6", "f7049e4e", "3227ca6b6d1363d6"}, 0x28) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0x40000fb, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x16, 0x4, 0x8, 0xffffffff}]}, 0x10) 3m11.34687162s ago: executing program 9 (id=3402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) 3m10.789717167s ago: executing program 9 (id=3406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) 3m5.397153477s ago: executing program 9 (id=3411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m4.869968268s ago: executing program 9 (id=3412): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$alg(r0, &(0x7f0000005ec0)=[{0x0, 0x0, &(0x7f0000000100)=[{0x0, 0xfff4}, {&(0x7f0000000000)="1bf1b44bbfa5f7b21c", 0x9}], 0x2, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 2m49.704372683s ago: executing program 48 (id=3412): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$alg(r0, &(0x7f0000005ec0)=[{0x0, 0x0, &(0x7f0000000100)=[{0x0, 0xfff4}, {&(0x7f0000000000)="1bf1b44bbfa5f7b21c", 0x9}], 0x2, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 15.946603479s ago: executing program 1 (id=4229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 9.27028286s ago: executing program 1 (id=4249): mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xe02) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x205b9a) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) 7.288004304s ago: executing program 8 (id=4250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6.491492206s ago: executing program 1 (id=4254): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb00000000000000", 0x24) 6.300562235s ago: executing program 7 (id=4256): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.180251814s ago: executing program 4 (id=4258): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000d80)={[{@noauto_da_alloc}, {@nobh}, {@nombcache}, {@nolazytime}, {@noquota}, {@debug_want_extra_isize}, {@abort}, {@noauto_da_alloc}, {@norecovery}], [{@audit}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x33}}, {@fowner_gt}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x1, 0x479, &(0x7f0000000480)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x8500e, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf7fffffffffffffd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x9, 0x9}) preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000e80)=ANY=[@ANYRESHEX, @ANYBLOB="7c7b0338bf6e6ee73ad964aaabae210bc3c1ef073e69ea94aa5d77b477f37ccdbd46b026f92528a1d7598dd9c07dac9413678ab046ebb3c428024643582811d2a7c0814f0d046ecdbb3d53a151ddf274b1fd5a6a97e5c012e96b3f8639e1aa943898982091005a40edb1c4aaecb774314b5faac5b200ca"], 0xfe, 0x1aa, &(0x7f00000003c0)="$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") ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r6 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r6, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES16=0x0], 0x1, 0x5e7, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000000)={[{@minixdf}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@grpjquota}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 6.140956764s ago: executing program 8 (id=4259): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0) 6.138512996s ago: executing program 1 (id=4260): socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x19) close_range(r6, 0xffffffffffffffff, 0x0) 6.020801738s ago: executing program 7 (id=4261): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 5.949105209s ago: executing program 6 (id=4262): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.601268534s ago: executing program 4 (id=4264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x300, 0x0, 0x1c}}}}}, 0x36) 4.559931713s ago: executing program 7 (id=4265): setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3\x89f\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 4.452035301s ago: executing program 1 (id=4266): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d8, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, 0x0, 0x40490c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="287300cb80e02bfbd2d2cb00", @ANYRES16=r3, @ANYBLOB="00022dbd7000fcdbdf250600000008000300", @ANYRES32=r4, @ANYBLOB="050053000000000005005300010000000a0018000303030303030000280017800400010004000200040006000400010004000600040003000400020004000600040001001c00e7009f8ffb04387ba9f72e1585a108a231cab2799cc0edcbe1510a00e800ffffffffffff0000100017800400060004000300040001001c00e70027c763c9c7cb522c8837f66ec11fcb21c35f6e5036162c2a0c001780040005000400010005005300000000000a0018000303030303030000"], 0xd4}, 0x1, 0x0, 0x0, 0x20040041}, 0x4004004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x24000040) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.402494719s ago: executing program 0 (id=4267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb371}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) 4.353558357s ago: executing program 8 (id=4268): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x200003ae, 0x7f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x0, 0x1c8}}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x240) 3.820937792s ago: executing program 0 (id=4269): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x2001) 3.81612241s ago: executing program 6 (id=4270): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003180)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @mcast1, 0xe7}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="024468f75872dc275c4a865167ce141180f86d6d2d2b667592a3c33936462143e78071d6c161acbb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86985e3ae7dbd8b6bc88af3374be083ced9a2b1f3b847103a9ad492dabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25", 0x7e}, {&(0x7f0000000340)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d84173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) 3.73420581s ago: executing program 8 (id=4271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.686476771s ago: executing program 4 (id=4272): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb00000000000000", 0x24) 3.50166444s ago: executing program 7 (id=4273): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000), 0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x200) rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDADDIO(r3, 0x4b34, 0x3) 3.335385594s ago: executing program 6 (id=4274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB='&'], 0x10) 3.30301731s ago: executing program 0 (id=4275): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.197642864s ago: executing program 8 (id=4276): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000180100002020692500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.138216463s ago: executing program 4 (id=4277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x8000) 3.009526278s ago: executing program 6 (id=4278): socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x19) close_range(r6, 0xffffffffffffffff, 0x0) 2.923927305s ago: executing program 0 (id=4279): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x1, 0x3}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) 2.710083919s ago: executing program 4 (id=4280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0xf}}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0xffff}, 0x57, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4000, 0x24, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x407, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0xfffffffd, 0xffffffff, 0x3, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0x0, 0x0) getitimer(0x2, &(0x7f0000000180)) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = fanotify_init(0x40, 0x101000) r7 = open$dir(&(0x7f00000000c0)='.\x00', 0x2100, 0x84) fanotify_mark(r6, 0x641, 0x1020, r7, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) timerfd_gettime(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r9, 0x0, 0x40040) 2.706816931s ago: executing program 8 (id=4281): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r3}) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0xffffffff) syz_open_dev$midi(0x0, 0x500, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.178147093s ago: executing program 7 (id=4282): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 909.581048ms ago: executing program 4 (id=4283): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a8", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 817.134722ms ago: executing program 6 (id=4284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x300, 0x0, 0x1c}}}}}, 0x36) 688.836141ms ago: executing program 0 (id=4285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) 426.155359ms ago: executing program 1 (id=4286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}}], {0x14}}, 0x88}}, 0x0) 73.378645ms ago: executing program 7 (id=4287): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x200000c1) 4.537709ms ago: executing program 0 (id=4288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 6 (id=4289): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x32100, 0x0) write$rfkill(r4, &(0x7f00000003c0)={0xb, 0x3, 0x2, 0x1}, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x64, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x74b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008853) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="1c306f2500"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x28, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="18e687b98b0a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044891}, 0x4040000) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) r7 = socket(0x8, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r9, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IMGETCOUNT(r7, 0x400261f3, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r0, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 5512] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2185'. [ 1329.287020][T15072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.360339][T15072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.445835][ T990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.513203][ T990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.553504][ T990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.624855][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9f7800: rx timeout, send abort [ 1329.646253][ T990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.125003][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9f5800: rx timeout, send abort [ 1330.134848][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9f7800: abort rx timeout. Force session deactivation [ 1330.633399][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9f5800: abort rx timeout. Force session deactivation [ 1332.705860][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1332.715027][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1332.723015][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1332.732447][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1332.745777][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1334.649590][T15053] veth0_vlan: entered promiscuous mode [ 1334.713225][T11367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.721259][T11367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.761001][T15053] veth1_vlan: entered promiscuous mode [ 1334.837451][T13146] Bluetooth: hci2: command tx timeout [ 1334.962404][T12892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.973505][T15558] virt_wifi0 speed is unknown, defaulting to 1000 [ 1334.980735][T12892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.220138][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2192'. [ 1335.256876][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2192'. [ 1336.645941][T15053] veth0_macvtap: entered promiscuous mode [ 1336.923112][T13146] Bluetooth: hci2: command tx timeout [ 1338.995123][T13146] Bluetooth: hci2: command tx timeout [ 1339.169459][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1339.191946][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1339.200104][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1339.209517][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1339.220743][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1341.040988][T15645] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2206'. [ 1341.166241][ T52] Bluetooth: hci2: command tx timeout [ 1341.332451][T15651] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2208'. [ 1341.346284][ T52] Bluetooth: hci4: command tx timeout [ 1342.189646][T15648] virt_wifi0 speed is unknown, defaulting to 1000 [ 1343.457804][ T52] Bluetooth: hci4: command tx timeout [ 1343.466137][T15558] chnl_net:caif_netlink_parms(): no params data found [ 1343.740158][T15620] virt_wifi0 speed is unknown, defaulting to 1000 [ 1346.466679][ T52] Bluetooth: hci4: command tx timeout [ 1346.500560][T12892] bridge_slave_1: left allmulticast mode [ 1346.506581][T12892] bridge_slave_1: left promiscuous mode [ 1346.512398][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.652908][T12892] bridge_slave_0: left allmulticast mode [ 1346.658597][T12892] bridge_slave_0: left promiscuous mode [ 1346.673920][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.512880][ T52] Bluetooth: hci4: command tx timeout [ 1349.986364][T12892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.046814][T12892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.094153][T12892] bond0 (unregistering): Released all slaves [ 1350.358125][T15768] virt_wifi0 speed is unknown, defaulting to 1000 [ 1350.377678][T15558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.405762][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.428713][T15558] bridge_slave_0: entered allmulticast mode [ 1350.450860][T15558] bridge_slave_0: entered promiscuous mode [ 1350.739547][T15558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.807912][T15786] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2225'. [ 1351.522845][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.530160][T15558] bridge_slave_1: entered allmulticast mode [ 1351.564780][T15558] bridge_slave_1: entered promiscuous mode [ 1353.114544][T12892] hsr_slave_0: left promiscuous mode [ 1353.137319][T12892] hsr_slave_1: left promiscuous mode [ 1353.154428][T12892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.213495][T12892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.413581][T12892] team0 (unregistering): Port device team_slave_1 removed [ 1354.703510][T12892] team0 (unregistering): Port device team_slave_0 removed [ 1355.265776][T15823] SQUASHFS error: Failed to read block 0x0: -5 [ 1355.738718][T13146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1355.749963][T13146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1355.758597][T13146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1355.767526][T13146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1355.793132][T13146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1355.906823][T15837] netlink: 368 bytes leftover after parsing attributes in process `syz.9.2232'. [ 1356.636128][T15833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.656064][T15833] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1356.737420][T15558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.798604][T15558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.385317][T15558] team0: Port device team_slave_0 added [ 1357.430888][T15831] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.442030][T15558] team0: Port device team_slave_1 added [ 1357.532134][T15620] chnl_net:caif_netlink_parms(): no params data found [ 1357.885472][T13146] Bluetooth: hci5: command tx timeout [ 1358.428301][T15558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.447662][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.507476][T15558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.875366][T15558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.007409][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.084334][T15558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.523393][T13146] Bluetooth: hci5: command tx timeout [ 1360.684570][T15851] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.072461][T15558] hsr_slave_0: entered promiscuous mode [ 1361.083265][T15558] hsr_slave_1: entered promiscuous mode [ 1361.092320][T15558] debugfs: 'hsr0' already exists in 'hsr' [ 1361.098842][T15558] Cannot create hsr debugfs directory [ 1361.164210][T15620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.171663][T15620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.189079][T15620] bridge_slave_0: entered allmulticast mode [ 1361.202934][T15620] bridge_slave_0: entered promiscuous mode [ 1361.272964][T15620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.290829][T15620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.319851][T15620] bridge_slave_1: entered allmulticast mode [ 1361.345913][T15620] bridge_slave_1: entered promiscuous mode [ 1361.574630][T15620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.608922][T15620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.755366][T12892] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.928426][T15620] team0: Port device team_slave_0 added [ 1362.076676][T12892] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.164773][T15620] team0: Port device team_slave_1 added [ 1363.792897][ T52] Bluetooth: hci5: command tx timeout [ 1366.706094][T13146] Bluetooth: hci5: command tx timeout [ 1367.249620][T12892] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.768011][T12892] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.934026][T15620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.952351][T15620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.012788][T15620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.229407][T15620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.244799][T15620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.408499][T15620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.740681][T15831] chnl_net:caif_netlink_parms(): no params data found [ 1370.120796][T15620] hsr_slave_0: entered promiscuous mode [ 1370.145166][T15620] hsr_slave_1: entered promiscuous mode [ 1370.151630][T15620] debugfs: 'hsr0' already exists in 'hsr' [ 1370.183756][T15620] Cannot create hsr debugfs directory [ 1371.231357][T15831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.254881][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.262188][T15831] bridge_slave_0: entered allmulticast mode [ 1371.284886][T15831] bridge_slave_0: entered promiscuous mode [ 1371.322333][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.330853][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.420484][T15831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.452983][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.473332][T15831] bridge_slave_1: entered allmulticast mode [ 1371.509922][T15831] bridge_slave_1: entered promiscuous mode [ 1372.886957][T16032] Bluetooth: MGMT ver 1.23 [ 1372.914157][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.078446][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.594645][T15831] team0: Port device team_slave_0 added [ 1373.650199][T15831] team0: Port device team_slave_1 added [ 1373.931563][T15558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1373.990027][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.022758][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.132264][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.167141][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.205068][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.232468][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.306421][T15558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1375.556687][T16064] SQUASHFS error: Failed to read block 0x0: -5 [ 1375.818313][T15558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1375.918413][T15558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1376.200668][T15831] hsr_slave_0: entered promiscuous mode [ 1376.224771][T15831] hsr_slave_1: entered promiscuous mode [ 1376.233796][T15831] debugfs: 'hsr0' already exists in 'hsr' [ 1376.239544][T15831] Cannot create hsr debugfs directory [ 1376.426574][T12892] bridge_slave_1: left allmulticast mode [ 1376.432374][T12892] bridge_slave_1: left promiscuous mode [ 1376.451772][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.477453][T12892] bridge_slave_0: left allmulticast mode [ 1376.483637][T12892] bridge_slave_0: left promiscuous mode [ 1376.489442][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.509854][T12892] bridge_slave_1: left allmulticast mode [ 1376.522978][T12892] bridge_slave_1: left promiscuous mode [ 1376.536164][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.566715][T12892] bridge_slave_0: left allmulticast mode [ 1376.572490][T12892] bridge_slave_0: left promiscuous mode [ 1376.593527][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.168415][T16093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2277'. [ 1383.076504][T12892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.098595][T12892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.116741][T12892] bond0 (unregistering): Released all slaves [ 1383.507981][T12892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.536712][T12892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.565653][T12892] bond0 (unregistering): Released all slaves [ 1383.962876][T12892] tipc: Left network mode [ 1384.877075][T12892] hsr_slave_0: left promiscuous mode [ 1384.905614][T12892] hsr_slave_1: left promiscuous mode [ 1384.923617][T12892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.931551][T12892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.949212][T12892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.964073][T12892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.992253][T12892] hsr_slave_0: left promiscuous mode [ 1385.003453][T12892] hsr_slave_1: left promiscuous mode [ 1385.019869][T12892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.053978][T12892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.162889][T12892] veth1_macvtap: left promiscuous mode [ 1385.185466][T12892] veth0_macvtap: left promiscuous mode [ 1385.191180][T12892] veth1_vlan: left promiscuous mode [ 1385.206904][T12892] veth0_vlan: left promiscuous mode [ 1385.231537][T12892] veth0_macvtap: left promiscuous mode [ 1385.237392][T12892] veth1_vlan: left promiscuous mode [ 1385.254463][T12892] veth0_vlan: left promiscuous mode [ 1386.152013][T12892] team0 (unregistering): Port device team_slave_1 removed [ 1386.189922][T12892] team0 (unregistering): Port device team_slave_0 removed [ 1386.960009][T12892] team0 (unregistering): Port device team_slave_1 removed [ 1387.018960][T12892] team0 (unregistering): Port device team_slave_0 removed [ 1387.550561][T15620] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1387.641904][T15558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.674557][T15620] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1389.133488][T15620] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1389.207320][T15558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.386666][T12908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.393899][T12908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.450051][T12908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.457259][T12908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.548625][T15620] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1389.890868][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1389.903021][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1389.913863][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1389.922025][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1389.929798][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1390.618299][T16225] virt_wifi0 speed is unknown, defaulting to 1000 [ 1391.393979][T15831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1391.483425][T15831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1391.601245][T15831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1391.698508][T15620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.720324][T16268] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2310'. [ 1391.757712][T15831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1391.998189][ T52] Bluetooth: hci0: command tx timeout [ 1392.067761][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 1394.403755][ T52] Bluetooth: hci0: command tx timeout [ 1394.695321][T16225] chnl_net:caif_netlink_parms(): no params data found [ 1394.733701][T15620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.197502][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.204811][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.412703][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.419975][T14426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.441052][ T52] Bluetooth: hci0: command tx timeout [ 1396.839853][T16225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.862827][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.870111][T16225] bridge_slave_0: entered allmulticast mode [ 1396.896047][T16225] bridge_slave_0: entered promiscuous mode [ 1396.944317][T16225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.951565][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.988287][T16225] bridge_slave_1: entered allmulticast mode [ 1397.005270][T16225] bridge_slave_1: entered promiscuous mode [ 1398.582782][ T52] Bluetooth: hci0: command tx timeout [ 1398.796453][T16225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.883703][T16225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.066108][T16225] team0: Port device team_slave_0 added [ 1399.080189][T12892] bridge_slave_1: left allmulticast mode [ 1399.097988][T12892] bridge_slave_1: left promiscuous mode [ 1399.116751][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.167104][T12892] bridge_slave_0: left allmulticast mode [ 1399.187573][T12892] bridge_slave_0: left promiscuous mode [ 1399.212706][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.254422][T13146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1399.265134][T13146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1399.276934][T13146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1399.287470][T13146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1399.306244][T13146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1399.717767][T16380] SQUASHFS error: Failed to read block 0x0: -5 [ 1401.404202][ T52] Bluetooth: hci2: command tx timeout [ 1401.916276][T12892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.947886][T12892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.996522][T12892] bond0 (unregistering): Released all slaves [ 1402.053775][T16225] team0: Port device team_slave_1 added [ 1402.173953][T15831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.470432][T12892] hsr_slave_0: left promiscuous mode [ 1402.503067][T12892] hsr_slave_1: left promiscuous mode [ 1402.523662][T12892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.574189][T12892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.902789][T13146] Bluetooth: hci2: command tx timeout [ 1404.134690][T13146] Bluetooth: hci8: command 0x0406 tx timeout [ 1404.543004][T12892] team0 (unregistering): Port device team_slave_1 removed [ 1404.645917][T12892] team0 (unregistering): Port device team_slave_0 removed [ 1405.554164][T16225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.569137][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.609529][T16225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.637489][T16370] virt_wifi0 speed is unknown, defaulting to 1000 [ 1405.644854][T16225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.651814][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.693288][T16225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.749271][T15831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.886620][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.893847][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.952999][ T52] Bluetooth: hci2: command tx timeout [ 1406.047593][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.054803][T11854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.205250][T16225] hsr_slave_0: entered promiscuous mode [ 1406.233561][T16225] hsr_slave_1: entered promiscuous mode [ 1408.034491][ T52] Bluetooth: hci2: command tx timeout [ 1408.163730][T16370] chnl_net:caif_netlink_parms(): no params data found [ 1412.165859][T16504] netem: unknown loss type 0 [ 1412.186838][T16504] netem: change failed [ 1412.323082][T16370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.330433][T16370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.348937][T16370] bridge_slave_0: entered allmulticast mode [ 1412.375612][T16370] bridge_slave_0: entered promiscuous mode [ 1412.533420][T16370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.540654][T16370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.574485][T16370] bridge_slave_1: entered allmulticast mode [ 1412.603105][T16370] bridge_slave_1: entered promiscuous mode [ 1412.759610][T16370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.826762][T16370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.112097][T16370] team0: Port device team_slave_0 added [ 1413.150732][T16370] team0: Port device team_slave_1 added [ 1413.269138][T12892] bridge_slave_1: left allmulticast mode [ 1413.292911][T12892] bridge_slave_1: left promiscuous mode [ 1413.298990][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.315926][T12892] bridge_slave_0: left allmulticast mode [ 1413.324027][T12892] bridge_slave_0: left promiscuous mode [ 1413.343026][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.857136][T16517] IPVS: Scheduler module ip_vs_@ not found [ 1415.415962][T12892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.418578][T12892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.456235][T12892] bond0 (unregistering): Released all slaves [ 1416.915980][T16370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.972965][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.054604][T16370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.143580][T16370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.150566][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.177452][T16424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1417.187550][T16424] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1417.206627][T16424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1417.214863][T16424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1417.222506][T16370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.252773][T16424] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1417.303019][T12892] hsr_slave_0: left promiscuous mode [ 1417.309993][T12892] hsr_slave_1: left promiscuous mode [ 1417.316462][T12892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.329378][T12892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.885453][T12892] team0 (unregistering): Port device team_slave_1 removed [ 1417.944823][T12892] team0 (unregistering): Port device team_slave_0 removed [ 1418.553118][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 1418.948705][T16225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1419.004915][T16553] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1419.066306][T16225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1419.179072][T16553] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2368'. [ 1419.195215][T16370] hsr_slave_0: entered promiscuous mode [ 1419.202191][T16370] hsr_slave_1: entered promiscuous mode [ 1419.224063][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2368'. [ 1419.243848][T16370] debugfs: 'hsr0' already exists in 'hsr' [ 1419.249713][T16370] Cannot create hsr debugfs directory [ 1419.264348][T16225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1419.320260][T16424] Bluetooth: hci4: command tx timeout [ 1419.370133][T16225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1419.478059][T16540] virt_wifi0 speed is unknown, defaulting to 1000 [ 1422.172699][T16424] Bluetooth: hci4: command tx timeout [ 1422.549282][T16584] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1424.193693][T16424] Bluetooth: hci4: command tx timeout [ 1426.276057][T16424] Bluetooth: hci4: command tx timeout [ 1426.297938][T16540] chnl_net:caif_netlink_parms(): no params data found [ 1426.394595][T16225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.604438][T16225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.150731][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.157980][T11850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.237806][T16654] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 1427.341053][T16654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1427.382714][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.389889][T11850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.457445][T16655] bond1: (slave geneve2): making interface the new active one [ 1427.467294][T16655] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1427.476205][T16370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1427.509135][T16540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.523130][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.530583][T16540] bridge_slave_0: entered allmulticast mode [ 1427.539351][T16540] bridge_slave_0: entered promiscuous mode [ 1428.495831][T16370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1428.511924][T12892] bridge_slave_1: left allmulticast mode [ 1428.597552][T12892] bridge_slave_1: left promiscuous mode [ 1428.604673][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.619096][T12892] bridge_slave_0: left allmulticast mode [ 1428.632955][T12892] bridge_slave_0: left promiscuous mode [ 1428.639224][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.104040][T12892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.116932][T12892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.128129][T12892] bond0 (unregistering): Released all slaves [ 1429.142357][T16540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.150638][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.159459][T16540] bridge_slave_1: entered allmulticast mode [ 1429.167801][T16540] bridge_slave_1: entered promiscuous mode [ 1429.199072][T16370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1429.261755][T16370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1429.308094][T16540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.407973][T12892] hsr_slave_0: left promiscuous mode [ 1429.423148][T12892] hsr_slave_1: left promiscuous mode [ 1429.429368][T12892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.440635][T12892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1430.466381][T12892] team0 (unregistering): Port device team_slave_1 removed [ 1432.157737][T12892] team0 (unregistering): Port device team_slave_0 removed [ 1432.646740][T16540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.675963][T16679] syzkaller0: entered promiscuous mode [ 1432.681468][T16679] syzkaller0: entered allmulticast mode [ 1432.760372][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.767792][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.857025][T16540] team0: Port device team_slave_0 added [ 1432.906176][T16540] team0: Port device team_slave_1 added [ 1433.042970][T16540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.050037][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.122864][T16540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.155374][T16540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.162372][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.215463][T16540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.441159][T16540] hsr_slave_0: entered promiscuous mode [ 1433.748574][T16540] hsr_slave_1: entered promiscuous mode [ 1434.943973][T16540] debugfs: 'hsr0' already exists in 'hsr' [ 1434.950281][T16540] Cannot create hsr debugfs directory [ 1437.782482][T16370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.845989][T16370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1437.924547][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.931679][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.105457][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.112600][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.205744][T16225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.505771][T16540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1441.541971][T16540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1441.569601][T16540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1441.609696][T16540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1441.894887][T16370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.776758][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'. [ 1442.857716][T16540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.941065][T16540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.976668][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.983966][T11850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.230016][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.237228][T11850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.518900][T16225] veth0_vlan: entered promiscuous mode [ 1443.560598][T16225] veth1_vlan: entered promiscuous mode [ 1443.703872][T16225] veth0_macvtap: entered promiscuous mode [ 1443.743358][T16225] veth1_macvtap: entered promiscuous mode [ 1443.833264][T16225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1443.867654][T16225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.004442][ T72] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.191005][ T72] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.229106][ T72] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.343321][T12892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.542166][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.591319][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.716812][T16540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.746428][T12892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.776093][T12892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.817691][T16370] veth0_vlan: entered promiscuous mode [ 1445.911829][T16370] veth1_vlan: entered promiscuous mode [ 1445.980751][T16823] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1446.019489][T16540] veth0_vlan: entered promiscuous mode [ 1446.069823][T16540] veth1_vlan: entered promiscuous mode [ 1446.107169][T16370] veth0_macvtap: entered promiscuous mode [ 1446.153019][T16370] veth1_macvtap: entered promiscuous mode [ 1446.256062][T16370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.266126][T16540] veth0_macvtap: entered promiscuous mode [ 1446.336130][T16540] veth1_macvtap: entered promiscuous mode [ 1446.368526][T16370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.409437][T16831] SQUASHFS error: Failed to read block 0x0: -5 [ 1446.431352][ T6097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.472879][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.492977][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.519717][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.825293][T16540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.891203][T16540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.997085][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.041180][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.076038][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.152066][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.270385][ T6097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.308892][ T6097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.634233][T11850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.691846][T11850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.066147][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.091741][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.093298][T11858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.156337][T11858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.568724][T16864] ipvlan2: entered promiscuous mode [ 1454.496043][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1454.606133][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1454.623058][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1454.633891][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1454.642111][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1455.173372][T16889] virt_wifi0 speed is unknown, defaulting to 1000 [ 1455.923336][ T1317] bridge_slave_1: left allmulticast mode [ 1455.960174][ T1317] bridge_slave_1: left promiscuous mode [ 1455.974063][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.071937][ T1317] bridge_slave_0: left allmulticast mode [ 1456.101999][ T1317] bridge_slave_0: left promiscuous mode [ 1456.141611][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.672991][ T52] Bluetooth: hci3: command tx timeout [ 1458.753259][ T52] Bluetooth: hci3: command tx timeout [ 1460.838878][ T52] Bluetooth: hci3: command tx timeout [ 1461.892000][T16949] block device autoloading is deprecated and will be removed. [ 1461.983832][T16949] SQUASHFS error: Failed to read block 0x0: -5 [ 1462.736876][ T1317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.785955][ T1317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.850683][ T1317] bond0 (unregistering): Released all slaves [ 1462.912784][ T52] Bluetooth: hci3: command tx timeout [ 1463.635689][ T1317] bond1 (unregistering): Released all slaves [ 1463.807053][T16889] chnl_net:caif_netlink_parms(): no params data found [ 1464.234594][ T1317] tipc: Disabling bearer [ 1465.272863][ T1317] tipc: Left network mode [ 1465.484965][T16889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.648494][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.699734][T16889] bridge_slave_0: entered allmulticast mode [ 1465.721089][T16889] bridge_slave_0: entered promiscuous mode [ 1467.246060][T16889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.642860][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.650151][T16889] bridge_slave_1: entered allmulticast mode [ 1467.858321][T16889] bridge_slave_1: entered promiscuous mode [ 1468.435635][T16424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1468.458089][T16424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1468.468475][T16424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1468.540041][T16424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1468.552119][T16424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1468.634923][T16889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.847442][T16889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.059005][T17025] virt_wifi0 speed is unknown, defaulting to 1000 [ 1469.324895][T16889] team0: Port device team_slave_0 added [ 1469.439697][T16889] team0: Port device team_slave_1 added [ 1470.191401][ T1317] hsr_slave_0: left promiscuous mode [ 1470.225476][ T1317] hsr_slave_1: left promiscuous mode [ 1470.252982][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.285887][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.596767][T16424] Bluetooth: hci5: command tx timeout [ 1471.876614][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 1472.074936][ T1317] team0 (unregistering): Port device team_slave_0 removed [ 1474.452794][ T5841] Bluetooth: hci5: command tx timeout [ 1475.300113][T16889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.353707][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.433604][T16889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.457327][T16889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.500663][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.609676][T16889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.057357][T17099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.206052][T17099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.259699][T16889] hsr_slave_0: entered promiscuous mode [ 1476.267218][T16889] hsr_slave_1: entered promiscuous mode [ 1476.274618][T16889] debugfs: 'hsr0' already exists in 'hsr' [ 1476.280543][T16889] Cannot create hsr debugfs directory [ 1476.428819][T17099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.670415][T17099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.677628][ T5841] Bluetooth: hci5: command 0x040f tx timeout [ 1477.297141][T14964] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.436617][T17025] chnl_net:caif_netlink_parms(): no params data found [ 1477.460113][ T1140] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.556910][ T1317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.590659][ T72] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.760686][ T66] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.842596][ T1317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.165141][T17025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.172424][T17025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.193408][T17025] bridge_slave_0: entered allmulticast mode [ 1478.220129][T17025] bridge_slave_0: entered promiscuous mode [ 1478.251337][T17025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.278985][T17025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.304631][T17025] bridge_slave_1: entered allmulticast mode [ 1478.335828][T17025] bridge_slave_1: entered promiscuous mode [ 1479.469670][ T5841] Bluetooth: hci5: command 0x040f tx timeout [ 1479.954944][ T1317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.581248][T16424] Bluetooth: hci5: command 0x040f tx timeout [ 1481.634292][T17155] raw_sendmsg: syz.9.2469 forgot to set AF_INET. Fix it! [ 1481.666267][T17025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.681176][T17025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.727775][T17025] team0: Port device team_slave_0 added [ 1481.825610][T17025] team0: Port device team_slave_1 added [ 1481.988803][ T1317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.218070][T17025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.242666][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.322708][T17025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.438862][T17025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.455986][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.514480][T17025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.911570][T17025] hsr_slave_0: entered promiscuous mode [ 1482.954163][T17025] hsr_slave_1: entered promiscuous mode [ 1482.983006][T17025] debugfs: 'hsr0' already exists in 'hsr' [ 1482.988879][T17025] Cannot create hsr debugfs directory [ 1483.196142][ T1317] bridge_slave_1: left allmulticast mode [ 1483.226322][ T1317] bridge_slave_1: left promiscuous mode [ 1483.232515][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.305234][ T1317] bridge_slave_0: left allmulticast mode [ 1483.329869][ T1317] bridge_slave_0: left promiscuous mode [ 1483.343331][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.650506][ T1317] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1486.043332][ T1317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.093392][ T1317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.146367][ T1317] bond0 (unregistering): Released all slaves [ 1486.680074][ T1317] bond1 (unregistering): Released all slaves [ 1487.839586][T16889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1487.926877][T16889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1488.103401][T16889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1488.208529][T16889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1488.651893][T17264] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2499'. [ 1488.941225][ T1317] hsr_slave_0: left promiscuous mode [ 1488.969601][ T1317] hsr_slave_1: left promiscuous mode [ 1488.982020][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.998617][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.025565][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.035322][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.110145][ T1317] veth1_macvtap: left promiscuous mode [ 1489.123104][ T1317] veth0_macvtap: left promiscuous mode [ 1489.134186][ T1317] veth1_vlan: left promiscuous mode [ 1489.144207][ T1317] veth0_vlan: left promiscuous mode [ 1490.137260][T17272] SQUASHFS error: Failed to read block 0x0: -5 [ 1491.311775][T17292] netlink: 'syz.0.2506': attribute type 4 has an invalid length. [ 1491.349443][T17292] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2506'. [ 1491.376366][T17293] delete_channel: no stack [ 1493.794217][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 1493.875895][ T1317] team0 (unregistering): Port device team_slave_0 removed [ 1494.200042][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.207617][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.658802][T16889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.960864][T16889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.160253][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.167484][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.387354][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.394575][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.643561][T17379] netlink: 'syz.4.2523': attribute type 4 has an invalid length. [ 1496.651437][T17379] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1496.751057][T17376] delete_channel: no stack [ 1497.481793][T17025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1497.534201][T17025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1497.634021][T17025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1497.713693][T17025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1497.871977][T16889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.169154][T17410] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.467253][T17410] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.697710][T17410] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.854320][T16889] veth0_vlan: entered promiscuous mode [ 1498.978017][T17410] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.116616][T16889] veth1_vlan: entered promiscuous mode [ 1499.292399][T17430] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2533'. [ 1499.372135][T17025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.518562][T16889] veth0_macvtap: entered promiscuous mode [ 1499.529307][T10679] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.567224][T10679] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.603875][T16889] veth1_macvtap: entered promiscuous mode [ 1500.018297][T15949] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.097711][T15949] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.115270][T17448] SQUASHFS error: Failed to read block 0x0: -5 [ 1500.154138][T17025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.201953][T11367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.209273][T11367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.388545][T11367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.395931][T11367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.515803][T16889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.577770][T16889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.698314][ T990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.730103][ T990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.753803][ T990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.799467][ T990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.180773][T14345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.225779][T14345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.308405][T15956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.336537][T17468] netlink: 'syz.6.2545': attribute type 4 has an invalid length. [ 1501.344608][T17468] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2545'. [ 1501.360462][T15956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.404783][T17470] delete_channel: no stack [ 1502.308046][T17025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.611788][T17509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2550'. [ 1504.118856][T17025] veth0_vlan: entered promiscuous mode [ 1504.375993][T17025] veth1_vlan: entered promiscuous mode [ 1504.480726][T17025] veth0_macvtap: entered promiscuous mode [ 1504.535729][T17025] veth1_macvtap: entered promiscuous mode [ 1504.780609][T17025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.861133][T17025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.902151][ T3498] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.941559][ T3498] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.971065][ T3498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.999344][ T3498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.308130][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.356345][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.752228][T15956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.822703][T15956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.275231][T17563] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2569'. [ 1506.434653][T17570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2446'. [ 1506.596331][T17579] netlink: 'syz.2.2571': attribute type 4 has an invalid length. [ 1506.605797][T17579] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1506.687063][T17582] netlink: 'syz.5.2446': attribute type 13 has an invalid length. [ 1506.697410][T17579] delete_channel: no stack [ 1507.060018][T17582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.069088][T17582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.166484][T17588] Illegal XDP return value 4294967274 on prog (id 217) dev N/A, expect packet loss! [ 1508.051815][T17602] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2581'. [ 1508.724398][T17582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.796525][T17582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.052200][T17618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2586'. [ 1512.023352][T17618] geneve2: entered promiscuous mode [ 1512.077688][T15949] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.143661][T15949] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.234178][T15949] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.301033][T15949] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.938925][T17670] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2593'. [ 1514.091374][T17697] netlink: 'syz.0.2601': attribute type 4 has an invalid length. [ 1514.099463][T17697] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2601'. [ 1514.525019][T17697] delete_channel: no stack [ 1515.800817][ T5841] Bluetooth: hci5: command 0x040f tx timeout [ 1516.752720][T16424] Bluetooth: hci0: command 0x0406 tx timeout [ 1518.066331][T17771] tipc: Started in network mode [ 1518.082700][T17771] tipc: Node identity 0e4867447e4d, cluster identity 4711 [ 1518.118452][T17771] tipc: Enabled bearer , priority 0 [ 1518.184705][T17776] syzkaller0: entered promiscuous mode [ 1518.223126][T17776] syzkaller0: entered allmulticast mode [ 1518.955553][T17783] tipc: Resetting bearer [ 1519.055751][T17769] tipc: Resetting bearer [ 1519.234610][T17769] tipc: Disabling bearer [ 1519.513004][ T5914] tipc: Node number set to 1879402308 [ 1519.778191][T17797] pimreg3: entered allmulticast mode [ 1521.875743][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1522.617123][T17864] pimreg3: entered allmulticast mode [ 1527.655085][T17972] fuse: Bad value for 'group_id' [ 1527.663461][T17972] fuse: Bad value for 'group_id' [ 1529.606656][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2679'. [ 1530.236455][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2684'. [ 1530.393212][T18042] fuse: Bad value for 'group_id' [ 1530.416443][T18042] fuse: Bad value for 'group_id' [ 1530.905073][T18044] SQUASHFS error: Failed to read block 0x0: -5 [ 1532.466444][T18089] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2704'. [ 1534.061090][T18104] fuse: Bad value for 'group_id' [ 1534.066152][T18104] fuse: Bad value for 'group_id' [ 1534.325475][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2710'. [ 1535.256047][T18135] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1535.755330][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2726'. [ 1536.616142][T18185] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2737'. [ 1537.200474][T18200] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2743'. [ 1537.836007][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2753'. [ 1538.197499][T18244] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.410954][T18244] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.546183][T18251] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2761'. [ 1538.813794][T18244] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.994157][T18270] xt_hashlimit: size too large, truncated to 1048576 [ 1539.090345][T18244] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.104206][T18275] SQUASHFS error: Failed to read block 0x0: -5 [ 1539.220144][T18277] –: renamed from vxcan1 (while UP) [ 1539.561920][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.705165][T15949] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.781081][T15949] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.918788][T15949] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.101014][T18308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2780'. [ 1541.691761][T18341] SQUASHFS error: Failed to read block 0x0: -5 [ 1542.355553][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1542.996332][T18380] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2802'. [ 1544.587256][T18414] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 1544.682275][T18423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1544.775484][T18427] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1545.365602][T18414] bond1: entered promiscuous mode [ 1545.416758][T18414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1545.672766][T18423] bond1: entered allmulticast mode [ 1545.795303][T18430] bond1: (slave bridge1): making interface the new active one [ 1545.821565][T18430] bridge1: entered promiscuous mode [ 1545.835975][T18430] bridge1: entered allmulticast mode [ 1545.950059][T18430] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1547.039352][T18484] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1547.556611][T18487] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2835'. [ 1548.146292][T18504] pimreg3: entered allmulticast mode [ 1550.415488][T18512] syz.6.2844 (18512) used greatest stack depth: 19672 bytes left [ 1551.840063][T18560] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2852'. [ 1556.085510][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.091872][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.795053][T18638] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.981860][T18638] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.172156][T18638] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.523931][T18638] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.572682][T14537] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1559.932228][T14537] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.945957][T14537] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.960438][T15918] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.978766][T14537] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1560.066615][T15918] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.116351][T14537] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1560.142450][T14537] usb 7-1: Manufacturer: syz [ 1560.166950][T12892] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.183982][T14537] usb 7-1: config 0 descriptor?? [ 1560.261808][T15918] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.422947][T14537] usbhid 7-1:0.0: can't add hid device: -71 [ 1560.433011][ T52] Bluetooth: hci5: command 0x040f tx timeout [ 1560.444107][T14537] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1560.494563][T14537] usb 7-1: USB disconnect, device number 2 [ 1562.021837][T18687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1566.412478][T18723] netlink: 'syz.4.2889': attribute type 4 has an invalid length. [ 1566.420378][T18723] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2889'. [ 1566.666412][T18723] delete_channel: no stack [ 1568.162713][T14537] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1568.374663][T14537] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.414767][T14537] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.448153][T14537] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1568.499409][T14537] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1568.535462][T14537] usb 6-1: Manufacturer: syz [ 1568.582009][T14537] usb 6-1: config 0 descriptor?? [ 1568.840491][T14537] usbhid 6-1:0.0: can't add hid device: -71 [ 1568.879391][T14537] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1571.223400][T14537] usb 6-1: USB disconnect, device number 11 [ 1575.590438][T18833] SQUASHFS error: Failed to read block 0x0: -5 [ 1575.607345][T18835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1577.382687][T14537] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1577.554563][T14537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.607704][T14537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.737605][T14537] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1577.769062][T14537] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1577.837390][T14537] usb 5-1: Manufacturer: syz [ 1577.968095][T14537] usb 5-1: config 0 descriptor?? [ 1578.208934][T14537] usbhid 5-1:0.0: can't add hid device: -71 [ 1578.225483][T14537] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1578.273030][T16424] Bluetooth: hci3: command 0x0406 tx timeout [ 1578.301209][T14537] usb 5-1: USB disconnect, device number 7 [ 1578.799193][T18868] netlink: 'syz.2.2922': attribute type 4 has an invalid length. [ 1578.807117][T18868] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2922'. [ 1578.878907][T18868] delete_channel: no stack [ 1582.497419][T18898] tipc: Enabling of bearer rejected, failed to enable media [ 1585.815973][ T6094] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1585.996467][ T6094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.029943][ T6094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.076725][ T6094] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1586.114866][ T6094] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1586.142370][ T6094] usb 3-1: Manufacturer: syz [ 1586.174056][ T6094] usb 3-1: config 0 descriptor?? [ 1586.185375][T18930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1586.571373][ T6094] usbhid 3-1:0.0: can't add hid device: -71 [ 1586.605312][ T6094] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1586.683602][ T6094] usb 3-1: USB disconnect, device number 9 [ 1590.047127][T18965] tipc: Enabling of bearer rejected, failed to enable media [ 1590.473397][T18975] netlink: 'syz.5.2947': attribute type 4 has an invalid length. [ 1590.481350][T18975] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2947'. [ 1590.578986][T18977] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2949'. [ 1591.272608][T18974] delete_channel: no stack [ 1592.402714][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1592.656271][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.707071][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.770051][ T5922] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1592.861036][ T5922] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1592.892189][ T5922] usb 5-1: Manufacturer: syz [ 1593.004051][ T5922] usb 5-1: config 0 descriptor?? [ 1593.290285][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 1593.308962][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1593.347892][ T5922] usb 5-1: USB disconnect, device number 8 [ 1593.554260][ T52] Bluetooth: hci5: command 0x040f tx timeout [ 1594.469932][T19033] tipc: Enabling of bearer rejected, failed to enable media [ 1595.300643][T19041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1595.787020][T19046] SQUASHFS error: Failed to read block 0x0: -5 [ 1596.867101][T19047] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.310099][T19047] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.735012][T19063] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2970'. [ 1599.183334][T19047] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.474404][T19047] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.904718][T15949] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.996346][T15701] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.077487][T15701] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.129015][T14369] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.174597][T19081] tipc: Enabling of bearer rejected, failed to enable media [ 1601.746000][T19098] SQUASHFS error: Failed to read block 0x0: -5 [ 1605.729403][T19143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1607.171830][T19168] tipc: Enabling of bearer rejected, failed to enable media [ 1613.133520][T19233] SQUASHFS error: Failed to read block 0x0: -5 [ 1614.785953][T19251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1617.080478][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.086943][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1627.114529][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f968000: rx timeout, send abort [ 1627.154358][T19326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1627.614679][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880254e8000: rx timeout, send abort [ 1627.623156][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f968000: abort rx timeout. Force session deactivation [ 1627.649251][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880254e8000: connection exists (fe ff). last cmd: 20 [ 1627.899208][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880254e9000: rx timeout, send abort [ 1628.407505][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880254e9000: abort rx timeout. Force session deactivation [ 1630.044723][T19361] SQUASHFS error: Failed to read block 0x0: -5 [ 1633.333659][T19374] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3053'. [ 1636.892956][T19393] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3059'. [ 1636.970048][T19394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1641.824710][T19432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.210030][T19432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.530544][T19432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.887594][T19453] SQUASHFS error: Failed to read block 0x0: -5 [ 1643.171733][T19432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.865825][ T6272] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.937890][ T6272] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.012676][ T6272] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.054067][ T6272] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.434368][T19544] fuse: Bad value for 'fd' [ 1651.483810][T19565] pimreg3: entered allmulticast mode [ 1653.409576][T19612] SQUASHFS error: Failed to read block 0x0: -5 [ 1654.119854][T19611] fuse: Bad value for 'fd' [ 1654.914812][T19628] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3120'. [ 1659.983667][T19675] fuse: Bad value for 'fd' [ 1660.833023][ T52] Bluetooth: hci5: command 0x040f tx timeout [ 1666.175697][T19753] fuse: Bad value for 'fd' [ 1666.812867][T19766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1671.569328][T19835] fuse: Bad value for 'fd' [ 1673.093518][T19863] syzkaller0: entered promiscuous mode [ 1673.128263][T19863] syzkaller0: entered allmulticast mode [ 1675.980488][T19930] fuse: Invalid rootmode [ 1677.289626][T19885] netlink: 'syz.4.3186': attribute type 3 has an invalid length. [ 1677.310590][T19892] syz_tun: entered allmulticast mode [ 1677.639694][T19900] syz_tun: left allmulticast mode [ 1678.212469][T19966] fuse: Invalid rootmode [ 1678.517866][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.526397][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.759000][T20005] pimreg3: entered allmulticast mode [ 1681.608315][T20028] fuse: Invalid rootmode [ 1686.063647][T20067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3231'. [ 1686.072917][ T6500] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1686.345364][ T6500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.398046][T20077] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1686.488333][ T6500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.623041][ T6500] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1686.632298][ T6500] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1686.651543][ T6500] usb 3-1: Manufacturer: syz [ 1686.733787][ T6500] usb 3-1: config 0 descriptor?? [ 1692.003566][T20103] fuse: Bad value for 'rootmode' [ 1692.019067][ T6500] usbhid 3-1:0.0: can't add hid device: -32 [ 1692.322760][ T6500] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1693.856465][T20141] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3251'. [ 1695.313680][T20151] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3253'. [ 1697.233475][T20164] fuse: Bad value for 'rootmode' [ 1697.886346][T16424] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1697.901648][T16424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1697.910359][T16424] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1697.918557][T16424] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1697.926526][T16424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1699.935968][T20172] chnl_net:caif_netlink_parms(): no params data found [ 1699.961707][T16424] Bluetooth: hci6: command tx timeout [ 1700.780106][T20228] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3271'. [ 1701.547525][T20172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.563199][T20172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.571704][T20172] bridge_slave_0: entered allmulticast mode [ 1701.579887][T20172] bridge_slave_0: entered promiscuous mode [ 1701.605347][T20172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.623733][T20172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.666823][T20172] bridge_slave_1: entered allmulticast mode [ 1701.713033][T20172] bridge_slave_1: entered promiscuous mode [ 1702.032614][T16424] Bluetooth: hci6: command tx timeout [ 1702.990662][T20172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.124054][T20172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.576503][T20172] team0: Port device team_slave_0 added [ 1703.641099][T20172] team0: Port device team_slave_1 added [ 1704.123442][T16424] Bluetooth: hci6: command tx timeout [ 1704.125610][T20172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.463391][T20172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.531448][T20172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.193121][T16424] Bluetooth: hci6: command tx timeout [ 1706.252341][T20172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.290441][T20172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.355228][ T5901] usb 3-1: USB disconnect, device number 10 [ 1706.361154][T20172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.997217][T15949] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.155863][T20172] hsr_slave_0: entered promiscuous mode [ 1710.213820][T20172] hsr_slave_1: entered promiscuous mode [ 1710.245610][T20172] debugfs: 'hsr0' already exists in 'hsr' [ 1710.251433][T20172] Cannot create hsr debugfs directory [ 1710.379961][T15949] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.104633][T15949] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.326420][T15949] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.818049][T15949] bridge_slave_1: left allmulticast mode [ 1718.852727][T15949] bridge_slave_1: left promiscuous mode [ 1718.858613][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.124537][T15949] bridge_slave_0: left allmulticast mode [ 1719.130250][T15949] bridge_slave_0: left promiscuous mode [ 1719.175280][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.914644][T15949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1721.013397][T15949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1721.543796][T20359] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3297'. [ 1723.497397][T15949] bond0 (unregistering): Released all slaves [ 1723.794259][T15949] tipc: Left network mode [ 1726.318646][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1726.460926][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1726.471744][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1726.482028][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1726.493293][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1727.077291][T15949] hsr_slave_0: left promiscuous mode [ 1727.121909][T15949] hsr_slave_1: left promiscuous mode [ 1727.134477][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1727.141976][T15949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.199411][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1727.212660][T15949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.283695][T15949] veth1_macvtap: left promiscuous mode [ 1727.289337][T15949] veth0_macvtap: left promiscuous mode [ 1727.313326][T15949] veth1_vlan: left promiscuous mode [ 1727.318757][T15949] veth0_vlan: left promiscuous mode [ 1727.833577][T20407] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3318'. [ 1728.645612][T16424] Bluetooth: hci3: command tx timeout [ 1730.896844][ T52] Bluetooth: hci3: command tx timeout [ 1730.989607][T20418] netlink: 'syz.4.3321': attribute type 4 has an invalid length. [ 1730.997661][T20418] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3321'. [ 1731.782185][T15949] team0 (unregistering): Port device team_slave_1 removed [ 1731.910638][T15949] team0 (unregistering): Port device team_slave_0 removed [ 1732.912953][ T52] Bluetooth: hci3: command tx timeout [ 1733.302720][T20172] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1733.347669][T20172] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1733.429602][T20440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3328'. [ 1733.444966][T20172] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1733.557238][T20172] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1733.627444][T20440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.636542][T20440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.651959][T20446] netlink: 'syz.6.3330': attribute type 6 has an invalid length. [ 1733.687069][T20446] netlink: 'syz.6.3330': attribute type 6 has an invalid length. [ 1734.074678][T20384] chnl_net:caif_netlink_parms(): no params data found [ 1736.185164][ T52] Bluetooth: hci3: command tx timeout [ 1736.328504][T20172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.391054][T20473] netlink: 'syz.4.3336': attribute type 4 has an invalid length. [ 1736.446681][T20473] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1736.717101][T20384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.750438][T20384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.772007][T20384] bridge_slave_0: entered allmulticast mode [ 1736.810436][T20384] bridge_slave_0: entered promiscuous mode [ 1737.015180][T20384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.033814][T20384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.069521][T20384] bridge_slave_1: entered allmulticast mode [ 1737.097433][T20384] bridge_slave_1: entered promiscuous mode [ 1737.428654][T20172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.483936][T20384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1737.619596][T20384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.966314][T15701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.973545][T15701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.928276][T20384] team0: Port device team_slave_0 added [ 1739.000396][T20384] team0: Port device team_slave_1 added [ 1739.206928][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.214195][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.297157][T20384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.337215][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.472604][T20384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.536993][T20384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.574779][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.722844][T20384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.956704][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1739.966577][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.983108][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1742.009660][T20384] hsr_slave_0: entered promiscuous mode [ 1742.069220][T20384] hsr_slave_1: entered promiscuous mode [ 1742.087240][T20384] debugfs: 'hsr0' already exists in 'hsr' [ 1742.117785][T20384] Cannot create hsr debugfs directory [ 1742.216944][T15949] bridge_slave_1: left allmulticast mode [ 1742.243404][T15949] bridge_slave_1: left promiscuous mode [ 1742.249354][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.326433][T15949] bridge_slave_0: left allmulticast mode [ 1742.366025][T15949] bridge_slave_0: left promiscuous mode [ 1742.371913][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.666930][T15949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.683681][T15949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.709005][T15949] bond0 (unregistering): Released all slaves [ 1743.771822][T20556] netlink: 'syz.6.3353': attribute type 3 has an invalid length. [ 1743.829056][T20566] syz_tun: entered allmulticast mode [ 1744.133339][T20582] netlink: 'syz.4.3350': attribute type 4 has an invalid length. [ 1744.158984][T20582] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3350'. [ 1744.198577][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3357'. [ 1744.316459][T20566] syz_tun: left allmulticast mode [ 1744.349845][T20595] netlink: 9 bytes leftover after parsing attributes in process `syz.9.3357'. [ 1744.390290][T20590] [†’Ì: entered promiscuous mode [ 1745.093647][T15949] hsr_slave_0: left promiscuous mode [ 1745.106146][T15949] hsr_slave_1: left promiscuous mode [ 1747.086280][T15949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1747.139222][T15949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1747.301936][T15949] pimreg3 (unregistering): left allmulticast mode [ 1748.804875][T15949] team0 (unregistering): Port device team_slave_1 removed [ 1749.119683][T15949] team0 (unregistering): Port device team_slave_0 removed [ 1754.057228][T20172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.222934][T20690] batman_adv: batadv0: Adding interface: dummy0 [ 1755.269125][T20690] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.592145][T20690] batman_adv: batadv0: Interface activated: dummy0 [ 1756.474987][T20721] Cannot find add_set index 0 as target [ 1757.551241][T20384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1757.622091][T20384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1757.668439][T20384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1757.727943][T20384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1757.974858][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 1758.028791][T16424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1758.039436][T16424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1758.049614][T16424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1758.089345][T16424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1758.118614][T16424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1758.250226][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1758.265449][T20759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1759.074479][T20384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.150286][T20774] netlink: 'syz.6.3397': attribute type 4 has an invalid length. [ 1759.185133][T20774] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3397'. [ 1759.229241][T20384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.368243][T14369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.375453][T14369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.414847][T14369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.422180][T14369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.193364][T16424] Bluetooth: hci5: command tx timeout [ 1763.000163][ T52] Bluetooth: hci5: command tx timeout [ 1763.127488][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3406'. [ 1763.181298][T20754] chnl_net:caif_netlink_parms(): no params data found [ 1765.073840][T16424] Bluetooth: hci5: command tx timeout [ 1766.165999][T20754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.232800][T20754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.274149][T20754] bridge_slave_0: entered allmulticast mode [ 1766.316737][T20754] bridge_slave_0: entered promiscuous mode [ 1766.391799][T20754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.436213][T20754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.474206][T20754] bridge_slave_1: entered allmulticast mode [ 1766.496737][T20754] bridge_slave_1: entered promiscuous mode [ 1767.038646][T20850] bond0: (slave rose0): Releasing backup interface [ 1767.132957][T20754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.163997][T16424] Bluetooth: hci5: command tx timeout [ 1767.205709][T20754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.372126][T15505] bridge_slave_1: left allmulticast mode [ 1767.402555][T15505] bridge_slave_1: left promiscuous mode [ 1767.408485][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.493950][T15505] bridge_slave_0: left allmulticast mode [ 1767.499836][T15505] bridge_slave_0: left promiscuous mode [ 1767.566785][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.862426][T20874] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3418'. [ 1771.848569][T20887] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3424'. [ 1771.951723][T15505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1772.053859][T15505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1772.071187][T15505] bond0 (unregistering): Released all slaves [ 1772.206911][T20754] team0: Port device team_slave_0 added [ 1772.286058][T20754] team0: Port device team_slave_1 added [ 1772.352856][T15505] hsr_slave_0: left promiscuous mode [ 1772.372969][T15505] hsr_slave_1: left promiscuous mode [ 1772.379457][T15505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.414453][T15505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.950418][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 1772.981659][T20904] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1774.287171][T15505] team0 (unregistering): Port device team_slave_1 removed [ 1776.723479][T15505] team0 (unregistering): Port device team_slave_0 removed [ 1778.370621][T20754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.381206][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.419499][T20754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.787576][T20754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.798674][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1780.827437][T20754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.900579][T20384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.915324][T20974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3445'. [ 1781.099144][T20754] hsr_slave_0: entered promiscuous mode [ 1781.295054][T20754] hsr_slave_1: entered promiscuous mode [ 1781.301657][T20754] debugfs: 'hsr0' already exists in 'hsr' [ 1781.364438][T20754] Cannot create hsr debugfs directory [ 1781.388572][T20974] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1781.599716][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1781.622160][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1781.633277][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1781.643440][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1781.652051][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1783.109021][T21013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.116550][T21013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.288200][T21013] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1783.305347][T21013] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1783.332976][T21013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1783.365776][T21013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1785.320311][T16424] Bluetooth: hci6: command tx timeout [ 1785.731634][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1785.742781][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1785.754352][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1785.771968][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1785.781205][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1786.046515][ T6272] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.082647][ T6272] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.133963][ T6272] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.335147][ T6272] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.419132][T14964] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.956112][T14964] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.225485][T14964] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.400927][T16424] Bluetooth: hci6: command tx timeout [ 1787.622349][T14964] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.882751][T16424] Bluetooth: hci1: command tx timeout [ 1788.086703][T21026] chnl_net:caif_netlink_parms(): no params data found [ 1789.960904][T16424] Bluetooth: hci6: command tx timeout [ 1789.960915][ T52] Bluetooth: hci1: command tx timeout [ 1790.245798][T20982] chnl_net:caif_netlink_parms(): no params data found [ 1790.553728][T14964] bridge_slave_1: left allmulticast mode [ 1790.559603][T14964] bridge_slave_1: left promiscuous mode [ 1790.566545][T14964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.606690][T14964] bridge_slave_0: left allmulticast mode [ 1790.616447][T14964] bridge_slave_0: left promiscuous mode [ 1790.622381][T14964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.837230][T14964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1791.856710][T14964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1791.869104][T14964] bond0 (unregistering): Released all slaves [ 1791.975400][T14964] [†’Ì: left promiscuous mode [ 1792.022655][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3470'. [ 1792.033172][T16424] Bluetooth: hci6: command tx timeout [ 1792.033211][ T52] Bluetooth: hci1: command tx timeout [ 1792.059744][T20754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1792.181290][T20754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1792.186684][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3471'. [ 1792.229484][T20754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1792.335245][T21120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 1792.635771][T20754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1792.803966][T21122] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1792.861263][T21026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.890502][T21026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.898279][T21026] bridge_slave_0: entered allmulticast mode [ 1792.906759][T21026] bridge_slave_0: entered promiscuous mode [ 1792.992052][T21026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.007067][T21026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.017675][T21026] bridge_slave_1: entered allmulticast mode [ 1793.027288][T21026] bridge_slave_1: entered promiscuous mode [ 1793.138257][T20982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.160425][T20982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.186150][T20982] bridge_slave_0: entered allmulticast mode [ 1793.204910][T20982] bridge_slave_0: entered promiscuous mode [ 1795.033716][ T52] Bluetooth: hci1: command tx timeout [ 1795.191634][T20982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.232748][T20982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.240124][T20982] bridge_slave_1: entered allmulticast mode [ 1795.294688][T20982] bridge_slave_1: entered promiscuous mode [ 1795.692388][T21026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.714625][T21026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.817604][T14964] hsr_slave_0: left promiscuous mode [ 1795.841423][T14964] hsr_slave_1: left promiscuous mode [ 1795.868382][T14964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.894214][T14964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.926441][T14964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1795.954041][T14964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.059090][T14964] veth1_macvtap: left promiscuous mode [ 1796.082702][T14964] veth0_macvtap: left promiscuous mode [ 1796.098956][T14964] veth1_vlan: left promiscuous mode [ 1796.120484][T14964] veth0_vlan: left promiscuous mode [ 1796.433234][T14964] pimreg3 (unregistering): left allmulticast mode [ 1796.538210][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1796.548453][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1796.582807][T21182] netlink: 'syz.0.3483': attribute type 15 has an invalid length. [ 1796.597131][T21182] netlink: 'syz.0.3483': attribute type 18 has an invalid length. [ 1797.549812][T14964] team0 (unregistering): Port device team_slave_1 removed [ 1797.608638][T14964] team0 (unregistering): Port device team_slave_0 removed [ 1798.225308][T20982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.364716][T21026] team0: Port device team_slave_0 added [ 1798.770844][T20982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.792100][T21026] team0: Port device team_slave_1 added [ 1798.874717][T21026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.888195][T21026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.942942][T21220] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3494'. [ 1798.964528][T21026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.094073][T20982] team0: Port device team_slave_0 added [ 1799.127652][T21026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.150145][T21026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.250571][T21026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.299360][T20982] team0: Port device team_slave_1 added [ 1799.452700][T20982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.469868][T20982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.535269][T20982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.617239][T20982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.652669][T20982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.742535][T20982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.875585][T21026] hsr_slave_0: entered promiscuous mode [ 1799.897253][T21026] hsr_slave_1: entered promiscuous mode [ 1799.926545][T21026] debugfs: 'hsr0' already exists in 'hsr' [ 1799.932310][T21026] Cannot create hsr debugfs directory [ 1800.100696][T20982] hsr_slave_0: entered promiscuous mode [ 1800.115756][T20982] hsr_slave_1: entered promiscuous mode [ 1800.133231][T20982] debugfs: 'hsr0' already exists in 'hsr' [ 1800.139086][T20982] Cannot create hsr debugfs directory [ 1801.127767][T20754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1801.397906][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.582376][T20754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1801.619072][T14964] bridge_slave_1: left allmulticast mode [ 1801.628859][T14964] bridge_slave_1: left promiscuous mode [ 1801.653856][T14964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.688795][T14964] bridge_slave_0: left allmulticast mode [ 1801.699707][T14964] bridge_slave_0: left promiscuous mode [ 1801.715901][T14964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.996787][T21274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3512'. [ 1802.995161][T14964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.024206][T14964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.049075][T14964] bond0 (unregistering): Released all slaves [ 1803.077957][T14345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.085314][T14345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1803.214677][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.221943][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1803.267224][T14964] hsr_slave_0: left promiscuous mode [ 1803.279486][T14964] hsr_slave_1: left promiscuous mode [ 1803.290294][T14964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1803.308942][T14964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.079917][T14964] team0 (unregistering): Port device team_slave_1 removed [ 1804.190953][T14964] team0 (unregistering): Port device team_slave_0 removed [ 1806.169983][T20982] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1806.191468][T20754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.203948][T20982] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1806.277683][T20982] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1806.331804][T20982] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1806.774848][T20982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1806.905241][T20982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1807.014497][T14369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.021753][T14369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1807.083883][T21026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1807.175265][T14369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.182680][T14369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1807.206647][T21026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1807.307259][T21026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1807.371942][T21026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1807.853389][T21373] syzkaller0: entered promiscuous mode [ 1807.874635][T21373] syzkaller0: entered allmulticast mode [ 1808.181379][T20754] veth0_vlan: entered promiscuous mode [ 1808.229171][T20754] veth1_vlan: entered promiscuous mode [ 1808.259875][T21026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.696090][T20754] veth0_macvtap: entered promiscuous mode [ 1808.708075][T20754] veth1_macvtap: entered promiscuous mode [ 1808.731807][T20754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.746169][T20754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.821762][T15505] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.845469][T21026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1808.911238][T20982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1809.025490][T15505] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.063434][T15505] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.080859][T15505] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.147539][T14964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.154790][T14964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.235633][T14964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.243116][T14964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.547734][T15505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.597570][T15505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.711084][T14369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.755022][T14369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.205880][T20982] veth0_vlan: entered promiscuous mode [ 1810.259591][T20982] veth1_vlan: entered promiscuous mode [ 1810.411790][T20982] veth0_macvtap: entered promiscuous mode [ 1810.462409][T20982] veth1_macvtap: entered promiscuous mode [ 1810.594336][T20982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1810.636654][T20982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.699229][T14369] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.721247][T14369] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.750107][T14369] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.791426][T14369] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.823846][T21026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.167385][T21026] veth0_vlan: entered promiscuous mode [ 1811.251469][T15505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.267575][T21026] veth1_vlan: entered promiscuous mode [ 1811.285627][T15505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.444852][T21430] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3548'. [ 1811.624586][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.642802][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.788925][T21026] veth0_macvtap: entered promiscuous mode [ 1811.846518][T21026] veth1_macvtap: entered promiscuous mode [ 1811.952238][T21026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.012085][T21026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1812.100554][T15505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.133182][T15505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.171020][T21444] syzkaller0: entered promiscuous mode [ 1812.177278][T21444] syzkaller0: entered allmulticast mode [ 1812.198951][T15505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.221598][T15505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.665027][T15949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.722450][T15949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.897482][T14369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.937615][T14369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.634863][T21471] syzkaller0: entered promiscuous mode [ 1813.670297][T21471] syzkaller0: entered allmulticast mode [ 1813.791082][T21484] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3560'. [ 1813.944459][T21487] pimreg3: entered allmulticast mode [ 1814.151858][T21490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3561'. [ 1815.580854][T21526] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3573'. [ 1816.650132][T21557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 1816.664828][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3585'. [ 1816.718136][T21553] bridge0: entered promiscuous mode [ 1816.727999][T21553] bridge0: left promiscuous mode [ 1816.840522][T21559] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1817.341287][T21569] netlink: 'syz.4.3587': attribute type 4 has an invalid length. [ 1817.349339][T21569] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3587'. [ 1821.149244][T21650] pimreg3: entered allmulticast mode [ 1821.756797][T21665] syzkaller0: entered promiscuous mode [ 1821.792696][T21665] syzkaller0: entered allmulticast mode [ 1822.318572][T21680] netlink: 'syz.7.3620': attribute type 4 has an invalid length. [ 1822.326701][T21680] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3620'. [ 1822.555882][T21687] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3623'. [ 1823.386485][T21704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3629'. [ 1823.566115][T21706] pimreg3: entered allmulticast mode [ 1824.843209][T21735] Bluetooth: MGMT ver 1.23 [ 1824.850757][T21733] syzkaller0: entered promiscuous mode [ 1824.857313][T21733] syzkaller0: entered allmulticast mode [ 1827.015628][T21747] mpoa:mpoad_close: () going down [ 1832.835641][T21858] Bluetooth: MGMT ver 1.23 [ 1833.370841][T21879] netlink: 'syz.4.3655': attribute type 4 has an invalid length. [ 1833.379460][T21879] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3655'. [ 1834.016172][T21888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 1834.523958][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3682'. [ 1837.396472][T21978] tipc: Started in network mode [ 1837.422239][T21978] tipc: Node identity 5a3f34f4801b, cluster identity 4711 [ 1837.442343][T21978] tipc: Enabled bearer , priority 0 [ 1837.471851][T21978] syzkaller0: entered promiscuous mode [ 1837.494062][T21978] syzkaller0: entered allmulticast mode [ 1837.528330][T21978] tipc: Resetting bearer [ 1837.563697][T21976] tipc: Resetting bearer [ 1837.660612][T21976] tipc: Disabling bearer [ 1837.720319][T21989] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1837.730150][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1837.750428][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1837.784394][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1838.186275][T22002] wg1: entered promiscuous mode [ 1838.200551][T22002] wg1: entered allmulticast mode [ 1838.848253][T22031] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1839.038702][T22040] Cannot find add_set index 0 as target [ 1840.698660][T22083] Cannot find add_set index 0 as target [ 1841.398190][T22100] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3750'. [ 1842.775215][T22085] mpoa:mpoad_close: () going down [ 1844.545046][T22169] netlink: 'syz.0.3771': attribute type 4 has an invalid length. [ 1844.553525][T22169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3771'. [ 1846.482239][T22206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.523065][T22218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1847.096413][T22228] netlink: 'syz.7.3787': attribute type 4 has an invalid length. [ 1847.104984][T22228] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3787'. [ 1851.632904][T22268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1851.968857][T22274] netlink: 'syz.8.3798': attribute type 16 has an invalid length. [ 1851.982625][T22274] netlink: 'syz.8.3798': attribute type 17 has an invalid length. [ 1852.061492][T22273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.952742][T22274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1853.947375][T22303] netlink: 'syz.8.3804': attribute type 4 has an invalid length. [ 1853.980294][T22303] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3804'. [ 1854.529080][T22315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1855.662734][T22340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3814'. [ 1856.596706][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 1857.210059][T22379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1857.887195][T22384] batman_adv: batadv0: Adding interface: dummy0 [ 1857.994083][T22384] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.190530][T22384] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1858.463104][T22407] netlink: 676 bytes leftover after parsing attributes in process `syz.7.3830'. [ 1858.522230][T22407] netlink: 676 bytes leftover after parsing attributes in process `syz.7.3830'. [ 1859.646342][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3836'. [ 1861.864062][T22473] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1862.268606][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3851'. [ 1862.324497][T22485] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3850'. [ 1862.613511][T22493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1862.861256][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1864.398683][T22542] pim6reg: entered allmulticast mode [ 1864.599216][T22541] pim6reg: left allmulticast mode [ 1866.586107][T22586] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1866.916471][T22596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3881'. [ 1867.641350][T22597] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1867.925133][T22606] netlink: 'syz.8.3886': attribute type 1 has an invalid length. [ 1867.973050][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3886'. [ 1868.005829][T22606] netlink: 'syz.8.3886': attribute type 1 has an invalid length. [ 1868.026957][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3886'. [ 1868.888483][T22636] vlan2: entered promiscuous mode [ 1868.916116][T22636] dummy0: entered promiscuous mode [ 1870.390468][T22660] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.3900'. [ 1870.422110][ T5900] IPVS: starting estimator thread 0... [ 1870.552668][T22663] IPVS: using max 22 ests per chain, 52800 per kthread [ 1873.414957][T22727] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1874.131970][T22753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3921'. [ 1875.345289][T22788] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3934'. [ 1876.549184][T22815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3937'. [ 1877.393113][T22818] pim6reg: entered allmulticast mode [ 1877.475482][T22823] tipc: Started in network mode [ 1877.486426][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1877.501087][T22823] tipc: Node identity 628b2f9ae63e, cluster identity 4711 [ 1877.559601][T22823] tipc: Enabled bearer , priority 0 [ 1877.575310][T22825] syzkaller0: entered promiscuous mode [ 1877.597147][T22825] syzkaller0: entered allmulticast mode [ 1877.629070][T22813] pim6reg: left allmulticast mode [ 1877.762309][T22822] tipc: Resetting bearer [ 1877.805353][T22816] tipc: Resetting bearer [ 1877.898738][T22816] tipc: Disabling bearer [ 1879.796598][T22859] syzkaller0: entered promiscuous mode [ 1879.847940][T22859] syzkaller0: entered allmulticast mode [ 1880.275381][T16424] Bluetooth: hci5: command 0x0406 tx timeout [ 1887.873722][T22879] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-0o%": -EINTR [ 1887.965426][T22911] pim6reg: entered allmulticast mode [ 1888.004692][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 1888.004718][ T31] audit: type=1800 audit(1769029550.959:149): pid=22912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3958" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1888.033407][T22912] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1888.062949][T22912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1888.110008][T22912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1888.166909][T22911] pim6reg: left allmulticast mode [ 1891.337648][T22957] netlink: 'syz.4.3970': attribute type 4 has an invalid length. [ 1891.387789][T22957] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1893.588422][T23025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1895.542829][T23063] netlink: 'syz.1.3991': attribute type 21 has an invalid length. [ 1895.651278][T23063] IPv6: NLM_F_CREATE should be specified when creating new route [ 1895.740915][T23063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1895.748704][T23063] IPv6: NLM_F_CREATE should be set when creating new route [ 1895.756172][T23063] IPv6: NLM_F_CREATE should be set when creating new route [ 1895.763420][T23063] IPv6: NLM_F_CREATE should be set when creating new route [ 1896.452904][T23083] ieee802154 phy0 wpan0: encryption failed: -22 [ 1896.597793][T23087] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4002'. [ 1900.697231][T23145] netlink: 676 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1900.732359][T23145] netlink: 676 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1901.419533][T23167] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4030'. [ 1902.790202][T23208] netlink: 676 bytes leftover after parsing attributes in process `syz.4.4041'. [ 1902.842250][T23208] netlink: 676 bytes leftover after parsing attributes in process `syz.4.4041'. [ 1903.338701][T23216] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4046'. [ 1903.455280][T23219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1903.990703][T23231] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4047'. [ 1905.893042][T16424] Bluetooth: hci6: command 0x0406 tx timeout [ 1905.964177][T23271] netlink: 676 bytes leftover after parsing attributes in process `syz.6.4058'. [ 1906.020578][T23271] netlink: 676 bytes leftover after parsing attributes in process `syz.6.4058'. [ 1911.463272][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4073'. [ 1911.704122][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4073'. [ 1913.757922][T23394] netlink: 'syz.6.4089': attribute type 4 has an invalid length. [ 1913.765898][T23394] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4089'. [ 1914.293519][T23400] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4091'. [ 1914.662057][T23406] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4095'. [ 1916.227047][T23446] tipc: Enabled bearer , priority 0 [ 1916.269261][T23446] syzkaller0: entered promiscuous mode [ 1916.333156][T23446] syzkaller0: entered allmulticast mode [ 1916.502683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.611950][T23454] tipc: Resetting bearer [ 1916.619823][T23460] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4109'. [ 1916.642658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.684006][T23454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.764929][T23445] tipc: Resetting bearer [ 1916.820617][T23465] Cannot find add_set index 0 as target [ 1916.948532][T23445] tipc: Disabling bearer [ 1917.395467][T23485] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 1917.432554][T23482] syzkaller0: entered promiscuous mode [ 1917.438088][T23482] syzkaller0: entered allmulticast mode [ 1917.814583][T23449] mpoa:mpoad_close: () going down [ 1918.557875][T23531] Cannot find add_set index 0 as target [ 1918.872683][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4132'. [ 1919.018672][T23540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1919.038852][T23549] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1919.048907][T23549] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1920.057608][T23587] Cannot find add_set index 0 as target [ 1921.093307][T23571] mpoa:mpoad_close: () going down [ 1924.282278][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1925.515141][T23695] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1925.819358][T23701] sit0: entered promiscuous mode [ 1925.857381][T23701] sit0: entered allmulticast mode [ 1926.106567][T23715] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4182'. [ 1926.643325][T23736] syzkaller0: entered promiscuous mode [ 1926.669241][T23736] syzkaller0: entered allmulticast mode [ 1926.682347][T23743] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4191'. [ 1929.740128][T23794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4208'. [ 1931.670683][T23790] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-0o%": -EINTR [ 1935.134345][T23869] syzkaller0: entered promiscuous mode [ 1935.221886][T23869] syzkaller0: entered allmulticast mode [ 1938.594077][T23961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1944.660846][T24030] loop4: detected capacity change from 0 to 512 [ 1944.712709][T24030] EXT4-fs: Ignoring removed nobh option [ 1944.718356][T24030] EXT4-fs: Invalid want_extra_isize 0 [ 1944.831315][T24041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1946.088038][T24056] binder: 24048:24056 ioctl c0306201 2000000003c0 returned -14 [ 1947.394844][T24089] loop7: detected capacity change from 0 to 1024 [ 1947.869015][T24069] mpoa:mpoad_close: () going down [ 1948.091418][T24108] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1948.098549][T24108] hfsplus: xattr search failed [ 1948.560879][T24111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1948.579159][T11858] hfsplus: b-tree write err: -5, ino 4 [ 1949.647788][T24127] input: syz1 as /devices/virtual/input/input12 [ 1949.781313][T24129] netlink: 'syz.8.4281': attribute type 4 has an invalid length. [ 1949.789694][T24129] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4281'. [ 1951.074117][T24162] loop1: detected capacity change from 0 to 512 [ 1951.248025][T24162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1951.373073][T24162] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1951.421072][T24173] tipc: Enabled bearer , priority 0 [ 1951.451812][T24173] syzkaller0: entered promiscuous mode [ 1951.460548][T24173] syzkaller0: entered allmulticast mode [ 1951.598092][T24176] tipc: Resetting bearer [ 1951.849222][T21026] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1951.913395][T24171] tipc: Resetting bearer [ 1951.935411][T24186] loop6: detected capacity change from 0 to 512 [ 1951.968782][T24186] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1951.977189][T24186] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1951.999069][T24171] tipc: Disabling bearer [ 1952.020330][T24186] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1952.076731][T24186] EXT4-fs (loop6): 1 truncate cleaned up [ 1952.146021][T24186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1952.225867][T24193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1952.291692][T24186] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.4295: invalid fast symlink length 39 [ 1952.776435][T16370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1952.846871][T24203] loop7: detected capacity change from 0 to 2048 [ 1952.983343][T24203] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1953.005131][T24203] UDF-fs: Scanning with blocksize 512 failed [ 1953.030701][T24203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1953.263869][ T976] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1953.524753][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1953.547872][ T976] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1953.561807][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.608397][ T976] usb 7-1: config 0 descriptor?? [ 1953.662170][T24203] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134286193 lbcount: 134288384 extent 65+34816 [ 1953.980992][T11850] kworker/u8:21: attempt to access beyond end of device [ 1953.980992][T11850] loop7: rw=8388609, sector=2048, nr_sectors = 2 limit=2048 [ 1954.022798][T11850] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 1954.041721][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.041721][T11850] loop7: rw=8388609, sector=2048, nr_sectors = 2 limit=2048 [ 1954.083329][T11850] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 1954.108580][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.108580][T11850] loop7: rw=8388609, sector=2050, nr_sectors = 2 limit=2048 [ 1954.129601][ T976] input: HID 054c:03d5 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:03D5.0002/input/input13 [ 1954.161488][T11850] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 1954.180554][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.180554][T11850] loop7: rw=8388609, sector=2050, nr_sectors = 2 limit=2048 [ 1954.223953][T11850] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 1954.273844][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.273844][T11850] loop7: rw=8388609, sector=2052, nr_sectors = 2 limit=2048 [ 1954.287589][ T976] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.6-1/input0 [ 1954.344559][T11850] Buffer I/O error on dev loop7, logical block 1026, lost async page write [ 1954.367511][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.367511][T11850] loop7: rw=8388609, sector=2052, nr_sectors = 2 limit=2048 [ 1954.386793][ T976] usb 7-1: USB disconnect, device number 3 [ 1954.452485][T11850] Buffer I/O error on dev loop7, logical block 1026, lost async page write [ 1954.490038][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.490038][T11850] loop7: rw=8388609, sector=2054, nr_sectors = 2 limit=2048 [ 1954.572552][T11850] Buffer I/O error on dev loop7, logical block 1027, lost async page write [ 1954.592521][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.592521][T11850] loop7: rw=8388609, sector=2054, nr_sectors = 2 limit=2048 [ 1954.611202][T11850] Buffer I/O error on dev loop7, logical block 1027, lost async page write [ 1954.621380][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.621380][T11850] loop7: rw=8388609, sector=2056, nr_sectors = 2 limit=2048 [ 1954.626761][T24219] fido_id[24219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1954.653903][T11850] Buffer I/O error on dev loop7, logical block 1028, lost async page write [ 1954.664223][T11850] kworker/u8:21: attempt to access beyond end of device [ 1954.664223][T11850] loop7: rw=8388609, sector=2056, nr_sectors = 2 limit=2048 [ 1954.706804][T11850] Buffer I/O error on dev loop7, logical block 1028, lost async page write [ 1985.719090][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.159416][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2049.234578][T22843] Bluetooth: hci1: command 0x0406 tx timeout [ 2103.483064][ C0] ------------[ cut here ]------------ [ 2103.488886][ C0] ODEBUG: free active (active state 0) object: ffff88805efbec90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 2103.501880][ C0] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 2103.511722][ C0] Modules linked in: [ 2103.516015][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2103.525105][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2103.535576][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 2103.541448][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d e2 d5 d3 0b 41 56 48 8b 14 dd e0 43 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 97 c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 2103.561338][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 2103.567459][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2103.575483][ C0] RDX: ffffffff8bfa4320 RSI: ffffffff8bfa3f40 RDI: ffffffff90c1cc70 [ 2103.583501][ C0] RBP: 0000000000000001 R08: ffff88805efbec90 R09: ffffffff8b92b900 [ 2103.591491][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa3f40 [ 2103.599811][ C0] R13: ffffffff8b92b940 R14: ffffffff8a6490c0 R15: ffffc90000007b18 [ 2103.607838][ C0] FS: 0000000000000000(0000) GS:ffff8881245df000(0000) knlGS:0000000000000000 [ 2103.616943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2103.623589][ C0] CR2: 00007ffe9cb4e0a8 CR3: 000000000e392000 CR4: 0000000000350ef0 [ 2103.631585][ C0] Call Trace: [ 2103.634906][ C0] [ 2103.637799][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2103.643497][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2103.649365][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2103.655132][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 2103.660842][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2103.667025][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2103.673186][ C0] kfree+0x34c/0x690 [ 2103.677306][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2103.682746][ C0] ? rose_timer_expiry+0x53f/0x630 [ 2103.688066][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2103.693877][ C0] ? rose_timer_expiry+0x53f/0x630 [ 2103.699034][ C0] rose_timer_expiry+0x53f/0x630 [ 2103.704147][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2103.709648][ C0] call_timer_fn+0x19a/0x590 [ 2103.714352][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2103.719528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2103.725227][ C0] ? __run_timers+0x747/0xac0 [ 2103.730124][ C0] ? __run_timers+0x747/0xac0 [ 2103.734867][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2103.740545][ C0] ? rcu_is_watching+0x12/0xc0 [ 2103.745375][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2103.750910][ C0] __run_timers+0x757/0xac0 [ 2103.755499][ C0] ? __pfx___run_timers+0x10/0x10 [ 2103.760664][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2103.766385][ C0] run_timer_base+0x114/0x190 [ 2103.771160][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2103.776507][ C0] ? rcu_is_watching+0x12/0xc0 [ 2103.781325][ C0] run_timer_softirq+0x1a/0x50 [ 2103.786296][ C0] handle_softirqs+0x1ea/0x910 [ 2103.791123][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2103.796492][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2103.802173][ C0] __irq_exit_rcu+0xef/0x150 [ 2103.806851][ C0] irq_exit_rcu+0x9/0x30 [ 2103.811183][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2103.816941][ C0] [ 2103.819894][ C0] [ 2103.822868][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2103.828987][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2103.834786][ C0] Code: b6 79 02 e9 0e 33 9b f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 5c 16 00 fb f4 e7 32 9b f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2103.854465][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 2103.860627][ C0] RAX: 0000000002e7aedd RBX: ffffffff8e297ac0 RCX: ffffffff8b7524b5 [ 2103.868767][ C0] RDX: 0000000000000000 RSI: ffffffff8dc427b7 RDI: ffffffff8bfa3220 [ 2103.876982][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 2103.885089][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 2103.893132][ C0] R13: 0000000000000000 R14: ffffffff90b75dd0 R15: 0000000000000000 [ 2103.901179][ C0] ? ct_kernel_exit+0x125/0x180 [ 2103.906127][ C0] default_idle+0x9/0x10 [ 2103.910433][ C0] default_idle_call+0x6c/0xb0 [ 2103.915288][ C0] do_idle+0x35b/0x4b0 [ 2103.919408][ C0] ? __pfx_do_idle+0x10/0x10 [ 2103.924110][ C0] cpu_startup_entry+0x4f/0x60 [ 2103.929045][ C0] rest_init+0x251/0x260 [ 2103.933452][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2103.939031][ C0] start_kernel+0x47a/0x480 [ 2103.943600][ C0] x86_64_start_reservations+0x24/0x30 [ 2103.949184][ C0] x86_64_start_kernel+0x122/0x130 [ 2103.954348][ C0] common_startup_64+0x13e/0x148 [ 2103.959435][ C0] [ 2103.962489][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2103.969784][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2103.978904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2103.989006][ C0] Call Trace: [ 2103.992284][ C0] [ 2103.995121][ C0] dump_stack_lvl+0x100/0x190 [ 2103.999835][ C0] vpanic+0x20d/0x630 [ 2104.003822][ C0] panic+0xd1/0xd1 [ 2104.007565][ C0] ? __pfx_panic+0x10/0x10 [ 2104.011990][ C0] ? check_panic_on_warn+0x1f/0x90 [ 2104.017114][ C0] check_panic_on_warn.cold+0x19/0x34 [ 2104.022596][ C0] ? debug_print_object+0x18e/0x2a0 [ 2104.027833][ C0] __warn.cold+0x191/0x2f8 [ 2104.032280][ C0] __report_bug+0x296/0x3d0 [ 2104.036799][ C0] ? debug_print_object+0x18e/0x2a0 [ 2104.042460][ C0] ? __pfx___report_bug+0x10/0x10 [ 2104.047509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.053164][ C0] ? __lock_acquire+0x4a5/0x2630 [ 2104.058340][ C0] report_bug_entry+0xe1/0x290 [ 2104.063296][ C0] ? debug_print_object+0x19b/0x2a0 [ 2104.068516][ C0] handle_bug+0x1c9/0x2a0 [ 2104.072870][ C0] exc_invalid_op+0x17/0x50 [ 2104.077404][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2104.082281][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 2104.088108][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d e2 d5 d3 0b 41 56 48 8b 14 dd e0 43 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 97 c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 2104.107826][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 2104.113909][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2104.121905][ C0] RDX: ffffffff8bfa4320 RSI: ffffffff8bfa3f40 RDI: ffffffff90c1cc70 [ 2104.129892][ C0] RBP: 0000000000000001 R08: ffff88805efbec90 R09: ffffffff8b92b900 [ 2104.137878][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa3f40 [ 2104.145879][ C0] R13: ffffffff8b92b940 R14: ffffffff8a6490c0 R15: ffffc90000007b18 [ 2104.153961][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2104.159660][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.165322][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2104.170998][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2104.176824][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.182487][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 2104.188075][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2104.194194][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.199857][ C0] kfree+0x34c/0x690 [ 2104.203869][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2104.209284][ C0] ? rose_timer_expiry+0x53f/0x630 [ 2104.214423][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.220093][ C0] ? rose_timer_expiry+0x53f/0x630 [ 2104.225247][ C0] rose_timer_expiry+0x53f/0x630 [ 2104.230226][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2104.235713][ C0] call_timer_fn+0x19a/0x590 [ 2104.240338][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2104.245484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.251196][ C0] ? __run_timers+0x747/0xac0 [ 2104.255907][ C0] ? __run_timers+0x747/0xac0 [ 2104.260620][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.266274][ C0] ? rcu_is_watching+0x12/0xc0 [ 2104.271070][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2104.276551][ C0] __run_timers+0x757/0xac0 [ 2104.281169][ C0] ? __pfx___run_timers+0x10/0x10 [ 2104.286263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.291953][ C0] run_timer_base+0x114/0x190 [ 2104.296771][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2104.302019][ C0] ? rcu_is_watching+0x12/0xc0 [ 2104.306932][ C0] run_timer_softirq+0x1a/0x50 [ 2104.311772][ C0] handle_softirqs+0x1ea/0x910 [ 2104.316584][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2104.321910][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2104.327598][ C0] __irq_exit_rcu+0xef/0x150 [ 2104.332254][ C0] irq_exit_rcu+0x9/0x30 [ 2104.336694][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2104.342349][ C0] [ 2104.345278][ C0] [ 2104.348205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2104.354245][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2104.359882][ C0] Code: b6 79 02 e9 0e 33 9b f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 5c 16 00 fb f4 e7 32 9b f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2104.379614][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 2104.385700][ C0] RAX: 0000000002e7aedd RBX: ffffffff8e297ac0 RCX: ffffffff8b7524b5 [ 2104.393675][ C0] RDX: 0000000000000000 RSI: ffffffff8dc427b7 RDI: ffffffff8bfa3220 [ 2104.401655][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 2104.409628][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 2104.417635][ C0] R13: 0000000000000000 R14: ffffffff90b75dd0 R15: 0000000000000000 [ 2104.425619][ C0] ? ct_kernel_exit+0x125/0x180 [ 2104.430534][ C0] default_idle+0x9/0x10 [ 2104.434822][ C0] default_idle_call+0x6c/0xb0 [ 2104.439692][ C0] do_idle+0x35b/0x4b0 [ 2104.443888][ C0] ? __pfx_do_idle+0x10/0x10 [ 2104.448511][ C0] cpu_startup_entry+0x4f/0x60 [ 2104.453298][ C0] rest_init+0x251/0x260 [ 2104.457575][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2104.463140][ C0] start_kernel+0x47a/0x480 [ 2104.467779][ C0] x86_64_start_reservations+0x24/0x30 [ 2104.473286][ C0] x86_64_start_kernel+0x122/0x130 [ 2104.478522][ C0] common_startup_64+0x13e/0x148 [ 2104.483568][ C0] [ 2104.486990][ C0] Kernel Offset: disabled [ 2104.491435][ C0] Rebooting in 86400 seconds..