last executing test programs: 2m32.030436786s ago: executing program 0 (id=147): ioprio_set$uid(0x3, 0x0, 0x0) 2m31.907934169s ago: executing program 0 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x28000600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x9, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 2m27.382608587s ago: executing program 0 (id=148): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x77) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r3, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x1, 0x4f8, &(0x7f0000005e40)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0x1a, 0x0, 0xc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r5, 0xfffff000) 2m27.140328864s ago: executing program 0 (id=149): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x10, 0x1401, 0x301, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080) 2m26.027013783s ago: executing program 0 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) 2m24.887271852s ago: executing program 0 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m9.529363194s ago: executing program 32 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m2.350943762s ago: executing program 2 (id=175): r0 = fsopen(&(0x7f0000000280)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff9e0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="184a00000565def1a7fd260000000000000000000000b7080000000000000000000000070000b7080000040c00007b8af0ff00000000bfa1000000a5b900000007090000f8ff0001000000000000000007040000f0ffffffb70200000800000018230000219bdb5a211519b0c7fd569017", @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x5, 0x6, 0x8001}, 0x10, 0x2f24e, r1, 0x4, 0x0, &(0x7f0000000600)=[{0x4, 0x4, 0xc, 0x5}, {0x1, 0x1, 0x0, 0x8}, {0x0, 0x5, 0x5, 0xa}, {0x0, 0x5, 0xc, 0x6}], 0x10, 0x20000000}, 0x94) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close(r1) move_mount(r1, 0x0, r1, 0x0, 0x262) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m0.89444162s ago: executing program 2 (id=178): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x80dc5521, 0x0) 1m59.096165347s ago: executing program 2 (id=190): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x80dc5521, 0x0) 1m56.568868633s ago: executing program 2 (id=185): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) close_range(r0, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140c, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}}, 0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000000000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x810, r0, 0xfe8ad000) unlink(&(0x7f0000000000)='./file0\x00') 1m51.28779022s ago: executing program 2 (id=200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x51) 1m49.514796667s ago: executing program 2 (id=204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 1m34.09295114s ago: executing program 33 (id=204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 31.209751644s ago: executing program 1 (id=327): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@_ha_fsid={[0x4, 0xfffffffe]}, {0x1ff, 0x70, 0x8, 0x9}}, 0x100, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x129080, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000c0000000500000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24.378403083s ago: executing program 1 (id=336): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 23.087998337s ago: executing program 1 (id=346): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x80dc5521, 0x0) 19.707014925s ago: executing program 3 (id=344): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.277091575s ago: executing program 1 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_open_dev$loop(0x0, 0x8, 0x430000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x9}, {0xe, "eb87eddb94c3a9e35597e1307b091a89", "1073f3512a2a8ad64dc8412ed7ec85f6"}}}}, 0x27) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 15.137715494s ago: executing program 1 (id=354): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0xffdf0000, 0x4) pipe2(0x0, 0x80880) 13.692597892s ago: executing program 1 (id=356): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 13.487852767s ago: executing program 3 (id=358): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000000480)=""/115, 0x73, 0x40000000, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 12.390284516s ago: executing program 4 (id=359): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x80dc5521, 0x0) 12.22783717s ago: executing program 3 (id=361): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 11.014032922s ago: executing program 5 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 11.013368382s ago: executing program 3 (id=363): syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r5 = fanotify_init(0x40, 0x101000) fanotify_mark(r5, 0x1, 0x8000039, r4, 0x0) 9.070664243s ago: executing program 5 (id=364): socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) unshare(0x2c020400) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="242007ffffffffffff601d4f35a4c6440cfe8a0febf006822b163cba0694c0d7f203a686138490ef5f61241995c1d53230fb36c566f9cde2e584da5d21e90b011a79d81982a2c4e23a555da3efc464165b0bea614ac0206a0501c1333967b65b16217171874ac2bdb1ac136c09487b8ba6f0e0506849017304876cb84028ff827059d080efa105f2a8"], 0xa) syz_open_procfs$userns(r0, &(0x7f0000000440)) 9.069999173s ago: executing program 3 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x7}}}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000003300)={0x4, 0x5, 0x1}) 7.980695801s ago: executing program 5 (id=365): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0xffdf0000, 0x4) pipe2(0x0, 0x80880) 6.50924986s ago: executing program 5 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0), 0x3, 0x519, &(0x7f0000000f80)="$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") 6.437149181s ago: executing program 4 (id=367): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) write$P9_RREAD(r2, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESOCT=r4], 0xb) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) 4.687700918s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0x47) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 4.272531438s ago: executing program 3 (id=369): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r1, 0x0) shutdown(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x8041) 2.567150543s ago: executing program 5 (id=370): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000340)) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x3, 0x3c) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x2f) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) 2.277019181s ago: executing program 4 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 1.109395611s ago: executing program 4 (id=373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 964.797975ms ago: executing program 5 (id=374): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 0s ago: executing program 4 (id=375): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0xffdf0000, 0x4) pipe2(0x0, 0x80880) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 67.506372][ T5759] cgroup: Unknown subsys name 'net' [ 67.644126][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.978094][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.411264][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.432531][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.443455][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.452399][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.460039][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.464342][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.474873][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.482285][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.482831][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.490794][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.498806][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.510990][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.511447][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.526879][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.534300][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.535508][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.541650][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.549479][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.556109][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.563752][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.579019][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.580791][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.593571][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.593985][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.004772][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 71.088571][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.153486][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 71.229033][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.236832][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.246161][ T5770] bridge_slave_0: entered allmulticast mode [ 71.253096][ T5770] bridge_slave_0: entered promiscuous mode [ 71.262560][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.272637][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.280030][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.287560][ T5771] bridge_slave_0: entered allmulticast mode [ 71.294217][ T5771] bridge_slave_0: entered promiscuous mode [ 71.309913][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.317168][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.324609][ T5770] bridge_slave_1: entered allmulticast mode [ 71.331969][ T5770] bridge_slave_1: entered promiscuous mode [ 71.355611][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.362910][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.370387][ T5771] bridge_slave_1: entered allmulticast mode [ 71.377159][ T5771] bridge_slave_1: entered promiscuous mode [ 71.439312][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.473518][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.484927][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.498026][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.525371][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.535619][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.542935][ T5773] bridge_slave_0: entered allmulticast mode [ 71.550346][ T5773] bridge_slave_0: entered promiscuous mode [ 71.568805][ T5770] team0: Port device team_slave_0 added [ 71.589286][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.596462][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.603915][ T5773] bridge_slave_1: entered allmulticast mode [ 71.610716][ T5773] bridge_slave_1: entered promiscuous mode [ 71.623728][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.636903][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.646271][ T5770] team0: Port device team_slave_1 added [ 71.663577][ T5771] team0: Port device team_slave_0 added [ 71.673195][ T5771] team0: Port device team_slave_1 added [ 71.694884][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.723109][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.730262][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.756514][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.770006][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.776978][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.803252][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.823811][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.845987][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.855581][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.882280][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.893619][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.901132][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.908568][ T5772] bridge_slave_0: entered allmulticast mode [ 71.915285][ T5772] bridge_slave_0: entered promiscuous mode [ 71.946957][ T5773] team0: Port device team_slave_0 added [ 71.954273][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.962512][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.988632][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.005574][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.013099][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.020479][ T5772] bridge_slave_1: entered allmulticast mode [ 72.027526][ T5772] bridge_slave_1: entered promiscuous mode [ 72.044110][ T5773] team0: Port device team_slave_1 added [ 72.130537][ T5770] hsr_slave_0: entered promiscuous mode [ 72.137468][ T5770] hsr_slave_1: entered promiscuous mode [ 72.154668][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.168018][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.179861][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.186862][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.213055][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.225416][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.232448][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.258410][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.275369][ T5771] hsr_slave_0: entered promiscuous mode [ 72.282203][ T5771] hsr_slave_1: entered promiscuous mode [ 72.288634][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.296397][ T5771] Cannot create hsr debugfs directory [ 72.342550][ T5772] team0: Port device team_slave_0 added [ 72.379626][ T5773] hsr_slave_0: entered promiscuous mode [ 72.386039][ T5773] hsr_slave_1: entered promiscuous mode [ 72.392499][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.400253][ T5773] Cannot create hsr debugfs directory [ 72.415906][ T5772] team0: Port device team_slave_1 added [ 72.502458][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.509482][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.535550][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.552691][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.559738][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.585728][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.596473][ T51] Bluetooth: hci2: command tx timeout [ 72.657322][ T5784] Bluetooth: hci3: command tx timeout [ 72.663056][ T5784] Bluetooth: hci0: command tx timeout [ 72.669321][ T51] Bluetooth: hci1: command tx timeout [ 72.762597][ T5772] hsr_slave_0: entered promiscuous mode [ 72.769933][ T5772] hsr_slave_1: entered promiscuous mode [ 72.776005][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.783712][ T5772] Cannot create hsr debugfs directory [ 72.967841][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.981835][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.996286][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.006796][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.092548][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.105695][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.121272][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.148654][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.251092][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.263170][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.272848][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.284757][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.360322][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.370740][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.381856][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.394536][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.461352][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.486185][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.532381][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.558892][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.572394][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.579781][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.602632][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.609809][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.641028][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.648224][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.668757][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.682967][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.690121][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.718807][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.781616][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.796180][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.834805][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.842079][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.852399][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.859538][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.894158][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.901419][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.921892][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.929109][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.954417][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.231706][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.381505][ T5770] veth0_vlan: entered promiscuous mode [ 74.392674][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.422367][ T5770] veth1_vlan: entered promiscuous mode [ 74.528783][ T5773] veth0_vlan: entered promiscuous mode [ 74.554788][ T5770] veth0_macvtap: entered promiscuous mode [ 74.564856][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.578846][ T5773] veth1_vlan: entered promiscuous mode [ 74.595164][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.613936][ T5770] veth1_macvtap: entered promiscuous mode [ 74.634358][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.650385][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.658741][ T5784] Bluetooth: hci2: command tx timeout [ 74.691797][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.701884][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.711421][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720733][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.737944][ T5784] Bluetooth: hci0: command tx timeout [ 74.743375][ T5784] Bluetooth: hci1: command tx timeout [ 74.749704][ T51] Bluetooth: hci3: command tx timeout [ 74.798033][ T5771] veth0_vlan: entered promiscuous mode [ 74.831662][ T5772] veth0_vlan: entered promiscuous mode [ 74.838713][ T5773] veth0_macvtap: entered promiscuous mode [ 74.863561][ T5771] veth1_vlan: entered promiscuous mode [ 74.873487][ T5773] veth1_macvtap: entered promiscuous mode [ 74.884595][ T5772] veth1_vlan: entered promiscuous mode [ 74.935011][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.946934][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.960173][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.010428][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.021787][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.033655][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.056022][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065146][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.074950][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.083961][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.098516][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.106535][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.162890][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.171829][ T5771] veth0_macvtap: entered promiscuous mode [ 75.183709][ T5772] veth0_macvtap: entered promiscuous mode [ 75.189809][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.234875][ T5771] veth1_macvtap: entered promiscuous mode [ 75.244419][ T5772] veth1_macvtap: entered promiscuous mode [ 75.301544][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.312326][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.323228][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.334315][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.345460][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.354778][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.366026][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.376328][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.387798][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.397735][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.408226][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.420096][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.436716][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.448864][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.459458][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.472480][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.482816][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.493792][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.506777][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.541419][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.571937][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.582877][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.593820][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.603910][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.615485][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.629012][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.640029][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.654991][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.664474][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.680348][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.704488][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.729103][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.742308][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.752498][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.810684][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.822827][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.513716][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.573809][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.675663][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.701465][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.741481][ T5784] Bluetooth: hci2: command tx timeout [ 76.756456][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.804327][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.812636][ T5839] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.820663][ T5784] Bluetooth: hci1: command tx timeout [ 76.829246][ T5784] Bluetooth: hci3: command tx timeout [ 76.834664][ T5784] Bluetooth: hci0: command tx timeout [ 76.859579][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.875911][ T28] audit: type=1800 audit(1786056669.510:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6" name="idVendor" dev="configfs" ino=7437 res=0 errno=0 [ 76.914907][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.344178][ T5848] ======================================================= [ 77.344178][ T5848] WARNING: The mand mount option has been deprecated and [ 77.344178][ T5848] and is ignored by this kernel. Remove the mand [ 77.344178][ T5848] option from the mount to silence this warning. [ 77.344178][ T5848] ======================================================= [ 77.968489][ T5847] tipc: Started in network mode [ 77.982484][ T5847] tipc: Node identity f20214c9c24e, cluster identity 4711 [ 77.999525][ T5847] tipc: Enabled bearer , priority 0 [ 78.045997][ T5847] syzkaller0: entered promiscuous mode [ 78.469554][ T5847] syzkaller0: entered allmulticast mode [ 79.252686][ T5784] Bluetooth: hci2: command tx timeout [ 79.260172][ T5784] Bluetooth: hci0: command tx timeout [ 79.271988][ T5784] Bluetooth: hci3: command tx timeout [ 79.289717][ T5776] Bluetooth: hci1: command tx timeout [ 79.802381][ T9] tipc: Node number set to 810292425 [ 79.986362][ T5868] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.079889][ T5847] tipc: Resetting bearer [ 80.573204][ T5881] syzkaller0: entered promiscuous mode [ 80.763793][ T5881] syzkaller0: entered allmulticast mode [ 81.186781][ T5846] tipc: Resetting bearer [ 81.260464][ T5846] tipc: Disabling bearer [ 81.304853][ T5889] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 81.354263][ T5892] syz.2.14[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.399226][ T5861] syz.0.1 (5861) used greatest stack depth: 20456 bytes left [ 82.941376][ T5892] loop2: detected capacity change from 0 to 512 [ 83.014461][ T5892] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.188133][ T5892] EXT4-fs (loop2): 1 orphan inode deleted [ 83.235298][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.327603][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 83.338562][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 83.354052][ T5892] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.958750][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 85.082453][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.132422][ T8] cfg80211: failed to load regulatory.db [ 89.237083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.694663][ T5939] loop2: detected capacity change from 0 to 512 [ 89.783207][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.897611][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.178481][ T5960] syzkaller0: entered promiscuous mode [ 92.198427][ T5960] syzkaller0: entered allmulticast mode [ 94.357152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 94.873524][ T5975] tipc: Started in network mode [ 94.929516][ T5975] tipc: Node identity 7e343ac10cf1, cluster identity 4711 [ 95.005354][ T5975] tipc: Enabled bearer , priority 0 [ 95.087782][ T5981] syzkaller0: entered promiscuous mode [ 95.121507][ T5981] syzkaller0: entered allmulticast mode [ 95.195607][ T5983] tipc: Resetting bearer [ 95.316725][ T5972] tipc: Resetting bearer [ 95.488181][ T5972] tipc: Disabling bearer [ 95.746831][ T5989] o2cb: This node has not been configured. [ 95.753031][ T5989] o2cb: Cluster check failed. Fix errors before retrying. [ 95.760625][ T5989] (syz.3.39,5989,1):user_dlm_register:674 ERROR: status = -22 [ 95.768257][ T5989] (syz.3.39,5989,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 96.305208][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.560053][ T5994] loop2: detected capacity change from 0 to 256 [ 96.586395][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.593756][ T5994] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 96.648882][ T8] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 96.666363][ T5995] syzkaller0: entered promiscuous mode [ 96.672196][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.687650][ T5995] syzkaller0: entered allmulticast mode [ 96.693396][ T8] usb 1-1: Product: syz [ 96.703517][ T8] usb 1-1: Manufacturer: syz [ 96.713659][ T8] usb 1-1: SerialNumber: syz [ 96.859779][ T8] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 97.976811][ T8] gspca_mr97310a: reg write [21] error -71 [ 97.983997][ T8] mr97310a: probe of 1-1:1.0 failed with error -71 [ 98.019146][ T8] usb 1-1: USB disconnect, device number 2 [ 98.757264][ T5834] IPVS: starting estimator thread 0... [ 98.997242][ T6014] IPVS: using max 21 ests per chain, 50400 per kthread [ 100.172291][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.53'. [ 100.289857][ T6037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.53'. [ 100.876229][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.56'. [ 100.889911][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.56'. [ 100.894668][ T6033] netlink: 168 bytes leftover after parsing attributes in process `syz.1.54'. [ 100.920734][ T6045] team0: entered promiscuous mode [ 100.926060][ T6045] team_slave_0: entered promiscuous mode [ 101.011125][ T6045] team_slave_1: entered promiscuous mode [ 101.142775][ T6045] bond0: entered promiscuous mode [ 101.224702][ T6045] bond_slave_0: entered promiscuous mode [ 101.316501][ T6045] bond_slave_1: entered promiscuous mode [ 101.517625][ T6045] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 101.547615][ T6043] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 101.610650][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 102.018330][ T6061] tipc: Started in network mode [ 102.706391][ T6061] tipc: Node identity 125b173b745c, cluster identity 4711 [ 102.737663][ T6061] tipc: Enabled bearer , priority 0 [ 102.744638][ T6063] syzkaller0: entered promiscuous mode [ 102.755990][ T6063] syzkaller0: entered allmulticast mode [ 102.807280][ T6066] netlink: 184 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.827922][ T6066] bond0: entered allmulticast mode [ 102.833101][ T6066] bond_slave_0: entered allmulticast mode [ 102.880365][ T6066] bond_slave_1: entered allmulticast mode [ 103.776547][ T6063] tipc: Resetting bearer [ 103.825458][ T6060] tipc: Resetting bearer [ 103.892913][ T6060] tipc: Disabling bearer [ 103.905310][ T5829] tipc: Node number set to 1711740731 [ 103.970908][ T6068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.118650][ T6080] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 104.176940][ T6080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.238267][ T6082] macvlan2: entered promiscuous mode [ 104.243626][ T6082] macvlan2: entered allmulticast mode [ 104.250507][ T6082] bond1: entered allmulticast mode [ 104.255677][ T6082] bond1: entered promiscuous mode [ 104.265597][ T6082] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.275848][ T6082] team0: Port device macvlan2 added [ 104.283645][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 104.380056][ T6080] bond1: (slave ip6gretap1): making interface the new active one [ 104.395274][ T6080] ip6gretap1: entered promiscuous mode [ 104.424741][ T6080] ip6gretap1: entered allmulticast mode [ 104.454085][ T6080] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 104.541738][ T6086] loop0: detected capacity change from 0 to 256 [ 104.636134][ T6086] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 104.703714][ T28] audit: type=1800 audit(1786056697.340:3): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.67" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 104.888902][ T6093] syzkaller0: entered promiscuous mode [ 104.894588][ T6093] syzkaller0: entered allmulticast mode [ 108.410704][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.422459][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.652342][ T6139] syzkaller0: entered promiscuous mode [ 108.658176][ T6139] syzkaller0: entered allmulticast mode [ 108.852994][ T6147] syzkaller0: entered promiscuous mode [ 108.860083][ T6147] syzkaller0: entered allmulticast mode [ 109.230308][ T6152] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 113.632092][ T6186] loop1: detected capacity change from 0 to 512 [ 114.144543][ T6186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.157723][ T6186] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.309984][ T6192] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 115.547049][ C0] sched: RT throttling activated [ 115.872000][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.017242][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.620034][ T6220] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 117.716349][ T56] IPVS: starting estimator thread 0... [ 117.867564][ T6221] IPVS: using max 16 ests per chain, 38400 per kthread [ 118.108100][ T5812] usb 4-1: config 0 has no interfaces? [ 118.116798][ T5812] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 118.126164][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.134243][ T5812] usb 4-1: Product: syz [ 118.138493][ T5812] usb 4-1: Manufacturer: syz [ 118.143131][ T5812] usb 4-1: SerialNumber: syz [ 118.182928][ T5812] usb 4-1: config 0 descriptor?? [ 120.536288][ T23] usb 4-1: USB disconnect, device number 2 [ 124.699441][ T6244] syzkaller0: entered promiscuous mode [ 124.704953][ T6244] syzkaller0: entered allmulticast mode [ 126.863377][ T6256] loop1: detected capacity change from 0 to 128 [ 127.228610][ T6256] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.243231][ T6256] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.259782][ T6256] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.676125][ T6263] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 127.686888][ T6260] netlink: 168 bytes leftover after parsing attributes in process `syz.0.113'. [ 127.793585][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 127.885865][ T6263] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 127.932911][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 127.943810][ T3541] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 127.963095][ T6263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.099421][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 129.126527][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.145759][ T6278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.213088][ T6283] loop3: detected capacity change from 0 to 2048 [ 129.781260][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.917897][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.040657][ T6281] kvm: kvm [6280]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff9300000860 [ 130.109549][ T6291] tipc: Enabling of bearer rejected, failed to enable media [ 130.132030][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 133.117717][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127637][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.283879][ T6331] bond0: left allmulticast mode [ 133.288920][ T6331] bond_slave_0: left allmulticast mode [ 133.294480][ T6331] bond_slave_1: left allmulticast mode [ 133.893808][ T6335] loop2: detected capacity change from 0 to 2048 [ 134.026289][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.927631][ T28] audit: type=1326 audit(1786056734.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 143.094126][ T28] audit: type=1326 audit(1786056734.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 143.159809][ T28] audit: type=1326 audit(1786056734.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 143.187411][ T28] audit: type=1326 audit(1786056734.530:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 143.234924][ T6394] loop3: detected capacity change from 0 to 256 [ 143.289997][ T28] audit: type=1326 audit(1786056734.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 144.629897][ T6394] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 144.650248][ T28] audit: type=1326 audit(1786056734.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 144.677408][ T28] audit: type=1326 audit(1786056734.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 144.707124][ T28] audit: type=1326 audit(1786056734.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 144.736563][ T28] audit: type=1326 audit(1786056734.540:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 144.841972][ T28] audit: type=1326 audit(1786056734.540:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929399e0d9 code=0x7ffc0000 [ 148.962557][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 162.764031][ T6472] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 162.858387][ T6472] macvtap1: entered allmulticast mode [ 162.926760][ T6472] macvtap2: entered allmulticast mode [ 162.962563][ T6472] Zero length message leads to an empty skb [ 163.036298][ T6476] bond2: (slave bridge1): making interface the new active one [ 163.063786][ T6476] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 163.951317][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.961249][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.970990][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.997254][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.005164][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.014079][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.174755][ T6470] loop1: detected capacity change from 0 to 32768 [ 165.313441][ T6470] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.345574][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 165.475492][ T6470] XFS (loop1): Ending clean mount [ 165.516220][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.571724][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.597429][ T6482] bridge_slave_0: entered allmulticast mode [ 165.604789][ T6482] bridge_slave_0: entered promiscuous mode [ 165.631233][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.647551][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.655145][ T6482] bridge_slave_1: entered allmulticast mode [ 165.671830][ T6482] bridge_slave_1: entered promiscuous mode [ 165.780954][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.820936][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.956221][ T6482] team0: Port device team_slave_0 added [ 165.985920][ T6482] team0: Port device team_slave_1 added [ 166.038529][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.045528][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.100533][ T5784] Bluetooth: hci4: command tx timeout [ 166.127158][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.160690][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.167845][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.196502][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.664838][ T6470] syz.1.167 (6470) used greatest stack depth: 19640 bytes left [ 166.712068][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.746227][ T6482] hsr_slave_0: entered promiscuous mode [ 166.755067][ T6482] hsr_slave_1: entered promiscuous mode [ 166.781637][ T6482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.792111][ T6482] Cannot create hsr debugfs directory [ 167.066261][ T6482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.079031][ T6482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.089662][ T6482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.099446][ T6482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.171979][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.194397][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.208175][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.215333][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.233192][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.240420][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.416058][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.604616][ T6482] veth0_vlan: entered promiscuous mode [ 167.615605][ T6482] veth1_vlan: entered promiscuous mode [ 167.646097][ T6482] veth0_macvtap: entered promiscuous mode [ 167.655811][ T6482] veth1_macvtap: entered promiscuous mode [ 167.672852][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.684658][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.694700][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.705321][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.715295][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.726034][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.736190][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.747245][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.762327][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.773105][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.784914][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.797351][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.808288][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.818220][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.828760][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.838667][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.849233][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.860714][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.875654][ T6482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.885349][ T6482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.894190][ T6482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.904087][ T6482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.969373][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.984989][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.007636][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.015505][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.181122][ T5784] Bluetooth: hci4: command tx timeout [ 169.897365][ T6533] 9pnet_virtio: no channels available for device c::: [ 171.157156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 171.237072][ T5784] Bluetooth: hci4: command tx timeout [ 173.246068][ T6552] loop1: detected capacity change from 0 to 2048 [ 173.297381][ T5784] Bluetooth: hci4: command tx timeout [ 173.342536][ T6477] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.857899][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.870094][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.168833][ T6583] loop4: detected capacity change from 0 to 1764 [ 177.318505][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.837182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 179.750698][ T5775] Bluetooth: hci5: command 0x1003 tx timeout [ 179.750723][ T5784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 180.259091][ T6622] syz.1.196: attempt to access beyond end of device [ 180.259091][ T6622] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 180.273381][ T6622] hfsplus: unable to find HFS+ superblock [ 183.504256][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 185.659818][ T6658] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 187.018831][ T5829] IPVS: starting estimator thread 0... [ 187.107202][ T6660] IPVS: using max 23 ests per chain, 55200 per kthread [ 187.434818][ T6670] loop4: detected capacity change from 0 to 128 [ 188.029123][ T6670] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.045053][ T6670] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.059699][ T6670] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.579430][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 192.597147][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 193.433623][ T6770] fuse: Bad value for 'fd' [ 196.077759][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.084114][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.004601][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 197.217389][ T28] audit: type=1326 audit(1786056789.640:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 197.728319][ T28] audit: type=1326 audit(1786056789.640:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 197.837569][ T28] audit: type=1326 audit(1786056789.640:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 197.867112][ T28] audit: type=1326 audit(1786056789.640:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 198.027691][ T28] audit: type=1326 audit(1786056789.640:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 198.127150][ T28] audit: type=1326 audit(1786056789.640:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 198.151205][ T28] audit: type=1326 audit(1786056789.640:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 198.175416][ T28] audit: type=1326 audit(1786056789.640:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 198.199835][ T28] audit: type=1326 audit(1786056789.640:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 198.235887][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 198.243384][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 198.249612][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 198.255633][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 198.293774][ T28] audit: type=1326 audit(1786056789.640:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.4.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ae39e0d9 code=0x7ffc0000 [ 200.656287][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 201.170409][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 202.209881][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.219042][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.227321][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.238419][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.245878][ T5776] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 202.253978][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.989171][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 203.989281][ T28] audit: type=1326 audit(1786056796.450:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 204.107485][ T28] audit: type=1326 audit(1786056796.450:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 204.338444][ T5776] Bluetooth: hci5: command tx timeout [ 204.822493][ T28] audit: type=1326 audit(1786056796.450:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 204.882360][ T6836] loop4: detected capacity change from 0 to 2048 [ 204.901513][ T28] audit: type=1326 audit(1786056796.450:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 204.989593][ T28] audit: type=1326 audit(1786056796.450:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 205.160259][ T6840] trusted_key: syz.3.236 sent an empty control message without MSG_MORE. [ 205.878486][ T28] audit: type=1326 audit(1786056796.450:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 205.932443][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 205.948378][ T28] audit: type=1326 audit(1786056796.450:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 206.036549][ T28] audit: type=1326 audit(1786056796.450:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 206.153402][ T28] audit: type=1326 audit(1786056796.450:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 206.177767][ T28] audit: type=1326 audit(1786056796.450:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 206.417099][ T5776] Bluetooth: hci5: command tx timeout [ 206.551127][ T6853] sctp: [Deprecated]: syz.3.237 (pid 6853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.551127][ T6853] Use struct sctp_sack_info instead [ 208.194399][ T6869] loop4: detected capacity change from 0 to 1024 [ 208.301726][ T6869] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.243: Failed to acquire dquot type 0 [ 208.342509][ T6869] EXT4-fs (loop4): 1 truncate cleaned up [ 208.353835][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.547203][ T5776] Bluetooth: hci5: command tx timeout [ 208.780410][ T6708] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.394387][ T6708] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.548019][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.555212][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.586840][ T6815] bridge_slave_0: entered allmulticast mode [ 209.602211][ T6815] bridge_slave_0: entered promiscuous mode [ 209.636149][ T6708] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.652627][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.660694][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.669614][ T6815] bridge_slave_1: entered allmulticast mode [ 209.683779][ T6815] bridge_slave_1: entered promiscuous mode [ 209.734535][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.754113][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.854506][ T6708] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.913939][ T6815] team0: Port device team_slave_0 added [ 209.925425][ T6815] team0: Port device team_slave_1 added [ 210.033959][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.043234][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.077616][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.142529][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.162764][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.200442][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.261741][ T6482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.363285][ T6815] hsr_slave_0: entered promiscuous mode [ 210.385161][ T6815] hsr_slave_1: entered promiscuous mode [ 210.393349][ T6815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.406477][ T6815] Cannot create hsr debugfs directory [ 210.577339][ T5776] Bluetooth: hci5: command tx timeout [ 210.878782][ T6815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.901303][ T6815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.951559][ T6815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.970076][ T6815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.129642][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.193722][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.259158][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.267223][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.304141][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.311340][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.548776][ T6708] hsr_slave_0: left promiscuous mode [ 211.568474][ T6708] hsr_slave_1: left promiscuous mode [ 211.574702][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.585538][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.604165][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.613905][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.628649][ T6708] bridge_slave_1: left allmulticast mode [ 211.634350][ T6708] bridge_slave_1: left promiscuous mode [ 211.641901][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.656045][ T6708] bridge_slave_0: left allmulticast mode [ 211.665470][ T6708] bridge_slave_0: left promiscuous mode [ 211.673826][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.706717][ T6708] veth1_macvtap: left promiscuous mode [ 211.713019][ T6708] veth0_macvtap: left promiscuous mode [ 211.720252][ T6708] veth1_vlan: left promiscuous mode [ 211.725749][ T6708] veth0_vlan: left promiscuous mode [ 212.300576][ T6708] team0 (unregistering): Port device team_slave_1 removed [ 212.350455][ T6708] team0 (unregistering): Port device team_slave_0 removed [ 212.392293][ T6708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.438062][ T6708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.743700][ T6708] bond0 (unregistering): Released all slaves [ 213.029062][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.451549][ T6815] veth0_vlan: entered promiscuous mode [ 213.468672][ T6815] veth1_vlan: entered promiscuous mode [ 213.508531][ T6815] veth0_macvtap: entered promiscuous mode [ 213.527259][ T6815] veth1_macvtap: entered promiscuous mode [ 213.555988][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.568060][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.578304][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.588893][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.598809][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.609549][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.619732][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.630489][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.642538][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.676802][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.688195][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.701734][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.712429][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.722380][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.732931][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.742814][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.753464][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.764860][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.777114][ T6815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.785955][ T6815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.795060][ T6815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.803822][ T6815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.881483][ T6737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.895023][ T6737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.936154][ T6737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.962055][ T6737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.119532][ T6938] loop4: detected capacity change from 0 to 128 [ 214.232217][ T6944] tipc: Enabling of bearer rejected, failed to enable media [ 214.510086][ T6950] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6482] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6950] [ 214.874448][ T6959] loop5: detected capacity change from 0 to 128 [ 215.511066][ T6959] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.527283][ T6959] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.542227][ T6959] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.660256][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 216.373753][ T6981] overlayfs: failed to clone upperpath [ 217.227980][ T6975] loop5: detected capacity change from 0 to 2048 [ 217.435313][ T6819] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.443346][ T6985] blktrace: Concurrent blktraces are not allowed on loop6 [ 217.458527][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 217.467864][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 217.476705][ T6985] netlink: 'syz.3.249': attribute type 18 has an invalid length. [ 217.579462][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 217.607208][ T6988] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 217.627128][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 222.432761][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 222.517938][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 223.351929][ T6721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.365855][ T6721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.155592][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 225.155631][ T28] audit: type=1800 audit(1786056817.780:63): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.268" name="file0" dev="overlay" ino=170 res=0 errno=0 [ 229.254703][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 229.317177][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 229.385266][ T7116] bond0: entered promiscuous mode [ 229.424376][ T7116] bond_slave_0: entered promiscuous mode [ 229.485304][ T7116] bond_slave_1: entered promiscuous mode [ 229.625652][ T7116] bond0: left promiscuous mode [ 229.652098][ T7116] bond_slave_0: left promiscuous mode [ 229.662514][ T7116] bond_slave_1: left promiscuous mode [ 230.667606][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 230.676575][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 230.690819][ T28] audit: type=1326 audit(1786056823.330:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 230.737257][ T28] audit: type=1326 audit(1786056823.330:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 230.884318][ T28] audit: type=1326 audit(1786056823.330:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 231.732153][ T28] audit: type=1326 audit(1786056823.330:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 231.923351][ T28] audit: type=1326 audit(1786056823.330:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 231.963561][ T28] audit: type=1326 audit(1786056823.330:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 231.994804][ T28] audit: type=1326 audit(1786056823.330:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 232.090399][ T7164] sctp: [Deprecated]: syz.1.293 (pid 7164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.090399][ T7164] Use struct sctp_sack_info instead [ 232.947192][ T28] audit: type=1326 audit(1786056823.330:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 233.099875][ T28] audit: type=1326 audit(1786056823.330:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 233.127144][ T28] audit: type=1326 audit(1786056823.330:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524399e0d9 code=0x7ffc0000 [ 238.939379][ T7206] loop4: detected capacity change from 0 to 8 [ 239.878477][ T7206] unable to read xattr id index table [ 239.918789][ T7209] tipc: Enabled bearer , priority 0 [ 240.230441][ T7209] syzkaller0: entered promiscuous mode [ 240.269727][ T7209] syzkaller0: entered allmulticast mode [ 240.296136][ T7214] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 240.399627][ T7209] tipc: Resetting bearer [ 240.432004][ T7208] tipc: Resetting bearer [ 241.588813][ T7208] tipc: Disabling bearer [ 242.312283][ T5834] tipc: Node number set to 1925528257 [ 247.742965][ T7268] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 247.742965][ T7268] The task syz.3.305 (7268) triggered the difference, watch for misbehavior. [ 247.882343][ T7269] syzkaller0: entered promiscuous mode [ 247.927225][ T7269] syzkaller0: entered allmulticast mode [ 247.961914][ T7269] tipc: Started in network mode [ 247.966857][ T7269] tipc: Node identity 36292a9bc36, cluster identity 4711 [ 248.015085][ T7269] tipc: Enabled bearer , priority 0 [ 248.072578][ T7269] tipc: Resetting bearer [ 249.365211][ T5834] tipc: Node number set to 4115212955 [ 249.447377][ T7267] tipc: Resetting bearer [ 249.699656][ T7267] tipc: Disabling bearer [ 249.966308][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 252.095500][ T7288] hsr_slave_1 (unregistering): left promiscuous mode [ 254.475489][ T7373] futex_wake_op: syz.3.314 tries to shift op by 144; fix this program [ 255.065209][ T7381] syzkaller0: entered promiscuous mode [ 255.109088][ T7381] syzkaller0: entered allmulticast mode [ 255.140040][ T7381] tipc: Started in network mode [ 255.165490][ T7381] tipc: Node identity c65f75cf5f22, cluster identity 4711 [ 255.884315][ T7381] tipc: Enabled bearer , priority 0 [ 255.984196][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.094943][ T7381] tipc: Resetting bearer [ 256.131051][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.253743][ T7379] tipc: Resetting bearer [ 256.308566][ T7379] tipc: Disabling bearer [ 257.211539][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.331518][ T7420] loop5: detected capacity change from 0 to 2048 [ 259.514725][ T7420] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 259.559364][ T7420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.483709][ T7444] netlink: 277 bytes leftover after parsing attributes in process `syz.3.326'. [ 265.093032][ T7471] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.990036][ T7438] Set syz1 is full, maxelem 65536 reached [ 267.885301][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 270.324375][ T7516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 270.357187][ T7516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 270.940813][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 270.951828][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 272.919858][ T7539] capability: warning: `syz.5.335' uses deprecated v2 capabilities in a way that may be insecure [ 275.565286][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.350'. [ 275.598240][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.350'. [ 275.633688][ T7553] bond0: entered promiscuous mode [ 275.646621][ T7553] bond_slave_0: entered promiscuous mode [ 275.662091][ T7553] bond_slave_1: entered promiscuous mode [ 275.680014][ T7553] bond0: left promiscuous mode [ 275.685441][ T7553] bond_slave_0: left promiscuous mode [ 275.693380][ T7553] bond_slave_1: left promiscuous mode [ 276.826246][ T5776] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 279.040948][ T7598] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 280.277624][ T7612] Device name cannot be null; rc = [-22] [ 280.333443][ T7612] loop5: detected capacity change from 0 to 64 [ 280.556970][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'. [ 280.588494][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'. [ 283.534605][ T7642] NILFS (nullb0): couldn't find nilfs on the device [ 284.147196][ T7640] loop1: detected capacity change from 0 to 512 [ 284.172948][ T7640] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 284.197054][ T7640] UDF-fs: Scanning with blocksize 512 failed [ 284.282736][ T7640] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 284.357229][ T7640] UDF-fs: Scanning with blocksize 1024 failed [ 284.412139][ T7640] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 285.658032][ T7640] UDF-fs: Scanning with blocksize 2048 failed [ 285.706040][ T7640] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 285.741505][ T7640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.586056][ T7684] loop5: detected capacity change from 0 to 512 [ 289.066056][ T7675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.077255][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 289.188277][ T7684] EXT4-fs error (device loop5): ext4_quota_enable:7140: comm syz.5.366: Bad quota inum: 2, type: 1 [ 289.199962][ T7684] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 289.246824][ T7684] EXT4-fs (loop5): mount failed [ 289.322055][ T6819] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.050347][ T7748] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 292.180880][ T6427] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2