last executing test programs: 11m6.899949891s ago: executing program 32 (id=196): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) close(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x0, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x1000, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {0x7, 0x6, 0x1ff, 0xfac}, 0x16, [0x6, 0x0, 0x8108, 0x7, 0x101, 0x2c94cded, 0x4, 0x6, 0x2, 0x9, 0x4, 0x80000000, 0x4, 0xe1, 0x3ff, 0x8, 0x9, 0x9, 0x4, 0x40, 0xffffff01, 0x8, 0x8, 0x6, 0x7fffffff, 0xf618, 0x1, 0xfffffff9, 0x4, 0x10, 0x9, 0x101, 0x3, 0x9, 0xfffffffe, 0x3, 0x400000, 0x8, 0x1, 0x0, 0xc0000, 0x2, 0x4, 0x7, 0x1, 0x9, 0xf, 0x6, 0x1, 0x200, 0x40ba, 0x3, 0xbd6, 0x7, 0x4, 0x80000000, 0x8, 0x101, 0x6, 0x6, 0xd53, 0x71, 0x5, 0xe1d], [0xb66, 0x1, 0xe2d, 0xa, 0x0, 0xfff, 0xfffff2d2, 0x4, 0x0, 0x8, 0x2, 0x5, 0x10001, 0x7bf, 0xa, 0xfffffffe, 0x3, 0xd6f, 0x5, 0xa, 0xc, 0x8, 0x1, 0x1, 0x3, 0x5, 0x2, 0x2, 0x0, 0x3b, 0x3, 0x475, 0x7, 0x10001, 0x5, 0x39, 0xff, 0x6, 0xedd7, 0x2, 0x5421, 0xaf, 0xffffffff, 0x5, 0x10001, 0x4, 0x5, 0x2, 0x9, 0x6, 0xe, 0x9, 0x5, 0x0, 0x20000007, 0x7fff, 0xeb1a, 0x0, 0x7, 0x4, 0x4, 0x1, 0x10001, 0x5], [0xd, 0x4, 0x52c, 0xfb44, 0x7f, 0xe, 0xff, 0xfffffffa, 0x800, 0x9, 0x8001ff, 0x401, 0xfffffc21, 0x7, 0x7, 0x3b, 0xffffffff, 0x8, 0x800, 0x10001, 0x2, 0x18b, 0x8000, 0x508, 0x7, 0x10, 0x6, 0x6, 0x6, 0x9b0, 0x7, 0x4, 0x9, 0x60000000, 0x8001, 0x200, 0x7, 0x3, 0x9, 0x3f, 0x1, 0x4, 0x4, 0x6, 0x5, 0x10000, 0xfffffffb, 0xb, 0x0, 0x7ff, 0x9, 0x4, 0x8, 0x6, 0x7fff, 0x8001, 0x0, 0x80, 0xd0b, 0x800, 0x9, 0x1b, 0x5, 0xfffff432], [0x4, 0x0, 0x8, 0x2, 0x6, 0xfffff5c9, 0x0, 0x1000, 0x0, 0x4, 0x6, 0x8, 0x6, 0x0, 0x2, 0x81, 0x100, 0xfffffff7, 0x5, 0x3, 0x5, 0x7c1f, 0x4, 0x8, 0x2, 0x7, 0x7, 0x0, 0x1d, 0x80000000, 0x3, 0xfb0, 0x9, 0x3, 0x3d9, 0xc27, 0x1, 0x2, 0x5, 0x81, 0x7, 0x4, 0x3, 0x2, 0x1ff, 0x7, 0x6c56, 0x4, 0x9, 0x0, 0x3, 0x8001, 0x5, 0x8, 0x2, 0x3, 0x4, 0x4, 0xfff, 0x8, 0x291, 0x101, 0x5]}, 0x45c) read(r0, &(0x7f0000000ac0)=""/249, 0xf9) 11m5.330919469s ago: executing program 33 (id=207): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x8) 9m38.019620773s ago: executing program 34 (id=874): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8m5.824342339s ago: executing program 35 (id=1691): ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000080)={{}, "6db31ae3fac9a242847f1d628d7788affa22d0e1d0b8e0c159d0de8c27335db5", 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x1f7, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m41.363801985s ago: executing program 0 (id=3726): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r1, r2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) 2m41.153835875s ago: executing program 0 (id=3728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2m40.039933341s ago: executing program 0 (id=3732): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 2m39.758597115s ago: executing program 36 (id=3689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/96, 0x60}, {0x0}], 0x3}, 0x1}], 0x1, 0x20, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "bcad05faa84c4ef8"}}}}}, 0x2e) 2m38.006576691s ago: executing program 0 (id=3742): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m37.764999113s ago: executing program 0 (id=3745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000280)=""/85, 0x55) 2m36.592326511s ago: executing program 0 (id=3748): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1626280165a82cb4f3d803b1307857e57087e7d6af96d09be50b2ea8565a81bc26b50c6ab1f77f01bf85c036215098955c3676ae6e34126cfde8702ff68550ec109a6ee07568a74d5f1a5612db0fe3387f7c461a6fafcc212b471609f442226e4a83e0c3de510e2362b2ebb42d7f899969dd869a773b0b548780fff4e5a6fc95f519522068a93e3a495a7c86267db62fa5952d5a60b570d5ec2c6d3dd0fbd376ea0b53def857bad81f6197af26397f3432e77642524ab625a767b963cb942d1102877f4db19763604db9c1b0f8b098c947bd246177", 0xd5}, {&(0x7f0000000380)="7c7d61aaeac696906e3e31294e487de818174452bcf4606bbad07fc276ac82453342b2f32141e4cd92329cc0d6bea0f8907675d9005e1df8c0b8b5f90802c70726b6af1ab7d23b1f9f771c9fea541be35d1b90bfdd576ee4f5947cb86eebdc5663bc42ed6bba9f43c39be6a804bbf0f6d531b37f99de84c27ce108888cdde8e02841983de5693df17d0a6b90b30235097a1d1eaec8794a25cbca901e663f92926268416b462d8a678d6f1bd9abdfc0a0b4fd8e08776babebf6951d98c726", 0xbe}, {&(0x7f0000000000)="c0da822ffda4b655798f", 0xa}, {&(0x7f0000000440)="3fc493716daf84fd0537576887f0b5d87467c051c0ae61917c928a1714f3e901de579510a7b4e7ccb581d4a704424e8e807e04ac3fbea369d83578dcd4fa3c8bfc54dc4ed88dacc06eb527e9c93dd3ab7840fc5565dd5defc96593f922bbb539a3a1dba00183c2582806d32e6438fac2d8f2b6a23c43d6ec8188e74586192b148918202addeeb74cde52", 0x8a}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18, 0x4000000}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="36c767a8ac82d543df76b25f120cb6150cc97bfb059da9ff8df62db49ae8a5e26e31b992dbb92cf3c8b53c4fad7864e11a27839e1b15a8c575094a3570dad8344115e6415118239f63bbdec2e79d031e890ebd4bbe89242c858dc758bc85647592016f73331860d2b6911236", 0x6c}, {&(0x7f0000000580)="93fe0854ab6b0ba97b62f2a66c50bb372c6541c4fbd619ac06ed2dea2be57011b18c2ff55665d895048d5ae361aa9a27c86cec8dc9c9d98132653c59997dcba63635afad61e9814a8ba9897f3758c17ac7c2958d8397a293048b16dc23fb4d0a3c75066b5e4b099504cc17f06a2b8d537b15d05d2226ac785334f46eb6c8450ca7fed69bd3059682d5c7b54edc4c90137f9c01ae33caae6579b4adff", 0x9c}, {&(0x7f0000000100)="2d9fe3e249acdcee35c865205a80f245a877eccb69738c7b138200ec142574529e9fea71f8c0b9926846", 0x2a}, {&(0x7f0000000640)="5cee259503cb6f4267fb36a568a3cc782f2b055790a32cf23ca50e5a100b1e5b22868383ac2245feb420f03ca3c6641189d49d8eed0270ea509b75b09eb81fce04b32e9e2c47013e5e25882a5844db3ccc371a4b5693a4d4575e3f5b184c1ab851b8558bea5c6bf0960b62679d7bf906cf5740b7c09092c08bd389b4046163e110eef75bffbebfef71f45beef910a78eb78ec1486b7d9a09f544e96241651d936fae1261fe2577e4c3f35bb14aec98cc713fd29296caa350dc27d2eb37f69ecca42ea51906e38ad3efb0546e0f8188230404365950534779ee2f1f1343d6a477656f1b4de9551c86ea887cf0b88bbd4960", 0xf1}, {&(0x7f0000000740)="e171afa35c2a2eb75659ed6d9c0dbad9b8cafffa11e1e37057fef77a433d44734d351620d988222f5e071333d1dc08728d570ad59fbf7a513a87bd7d6e2e3d988f769d400351caf0ca9af318ac727a7ffc1ebc02c509c7687954f46e7c7d1810b853cb9f5a73ce4e9f618f11ada70f4f8c6b79e6266f81dfbfd32bdd9feebc7415f91ab6ae1f2f8fed2a4351c254bcb64ac2ff06f4a4345c6a95739905438a8b5907126a5a7d9dd751", 0xa9}, {&(0x7f0000000800)="de72c6edadac4295e00ef0ef506f504879dfbf", 0x13}, {&(0x7f0000000840)="1acd4a9b885f3fa5d0fa770c669bff82586c1ab5a90451734f374a70d4db4fb690ebbc70fae0189800c07cc57efd", 0x2e}, {&(0x7f0000000880)}], 0x8, &(0x7f0000000940)=[@iv={0xb8, 0x117, 0x2, 0x9f, "5ab3c873b27a57c2efc07bd1f41d81bcd07b2774eea79cbeb1cfd2c909a382ec4ac7a336e11961d78e65d300a763b8380c4cd4c6d351c40f4ee34aea88ee9be40c06ee54fc09a8556fa0b7b18ef543b65be13e70b3d6b4855adf11cd7f644df0b6ae188dfe11196a6d177dbc58720e131445505da1121cdb2896329b911937f16cd9be3cb3fe9ff2b95eb68b34ca91eadd2f4d63227268965af7ced79f5cd3"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0xfe1a}], 0x118, 0x40}], 0x2, 0x20008014) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)='9+', 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400130000000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48d4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002980)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 2m35.829732628s ago: executing program 5 (id=3751): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet(0x2, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000680)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10) 2m33.922410361s ago: executing program 5 (id=3755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2m33.801136727s ago: executing program 5 (id=3756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 2m33.52912831s ago: executing program 5 (id=3757): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x23, &(0x7f0000000000)=r7, 0x8) 2m32.630639355s ago: executing program 5 (id=3759): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) r1 = socket(0x400000000010, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0420070080000900", 0x33a) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) 2m32.447468744s ago: executing program 5 (id=3760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) 2m27.0179325s ago: executing program 8 (id=3764): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) r4 = syz_open_procfs(0x0, 0x0) writev(r4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 2m23.750767661s ago: executing program 8 (id=3772): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000029c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@llc_tr={0x11, {@llc={0x6, 0x7e, "df"}}}}}, 0x0) 2m23.433152087s ago: executing program 8 (id=3774): readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2062) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000080a000/0x3000)=nil, 0x3000, 0x0) 2m21.421331126s ago: executing program 37 (id=3748): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1626280165a82cb4f3d803b1307857e57087e7d6af96d09be50b2ea8565a81bc26b50c6ab1f77f01bf85c036215098955c3676ae6e34126cfde8702ff68550ec109a6ee07568a74d5f1a5612db0fe3387f7c461a6fafcc212b471609f442226e4a83e0c3de510e2362b2ebb42d7f899969dd869a773b0b548780fff4e5a6fc95f519522068a93e3a495a7c86267db62fa5952d5a60b570d5ec2c6d3dd0fbd376ea0b53def857bad81f6197af26397f3432e77642524ab625a767b963cb942d1102877f4db19763604db9c1b0f8b098c947bd246177", 0xd5}, {&(0x7f0000000380)="7c7d61aaeac696906e3e31294e487de818174452bcf4606bbad07fc276ac82453342b2f32141e4cd92329cc0d6bea0f8907675d9005e1df8c0b8b5f90802c70726b6af1ab7d23b1f9f771c9fea541be35d1b90bfdd576ee4f5947cb86eebdc5663bc42ed6bba9f43c39be6a804bbf0f6d531b37f99de84c27ce108888cdde8e02841983de5693df17d0a6b90b30235097a1d1eaec8794a25cbca901e663f92926268416b462d8a678d6f1bd9abdfc0a0b4fd8e08776babebf6951d98c726", 0xbe}, {&(0x7f0000000000)="c0da822ffda4b655798f", 0xa}, {&(0x7f0000000440)="3fc493716daf84fd0537576887f0b5d87467c051c0ae61917c928a1714f3e901de579510a7b4e7ccb581d4a704424e8e807e04ac3fbea369d83578dcd4fa3c8bfc54dc4ed88dacc06eb527e9c93dd3ab7840fc5565dd5defc96593f922bbb539a3a1dba00183c2582806d32e6438fac2d8f2b6a23c43d6ec8188e74586192b148918202addeeb74cde52", 0x8a}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18, 0x4000000}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="36c767a8ac82d543df76b25f120cb6150cc97bfb059da9ff8df62db49ae8a5e26e31b992dbb92cf3c8b53c4fad7864e11a27839e1b15a8c575094a3570dad8344115e6415118239f63bbdec2e79d031e890ebd4bbe89242c858dc758bc85647592016f73331860d2b6911236", 0x6c}, {&(0x7f0000000580)="93fe0854ab6b0ba97b62f2a66c50bb372c6541c4fbd619ac06ed2dea2be57011b18c2ff55665d895048d5ae361aa9a27c86cec8dc9c9d98132653c59997dcba63635afad61e9814a8ba9897f3758c17ac7c2958d8397a293048b16dc23fb4d0a3c75066b5e4b099504cc17f06a2b8d537b15d05d2226ac785334f46eb6c8450ca7fed69bd3059682d5c7b54edc4c90137f9c01ae33caae6579b4adff", 0x9c}, {&(0x7f0000000100)="2d9fe3e249acdcee35c865205a80f245a877eccb69738c7b138200ec142574529e9fea71f8c0b9926846", 0x2a}, {&(0x7f0000000640)="5cee259503cb6f4267fb36a568a3cc782f2b055790a32cf23ca50e5a100b1e5b22868383ac2245feb420f03ca3c6641189d49d8eed0270ea509b75b09eb81fce04b32e9e2c47013e5e25882a5844db3ccc371a4b5693a4d4575e3f5b184c1ab851b8558bea5c6bf0960b62679d7bf906cf5740b7c09092c08bd389b4046163e110eef75bffbebfef71f45beef910a78eb78ec1486b7d9a09f544e96241651d936fae1261fe2577e4c3f35bb14aec98cc713fd29296caa350dc27d2eb37f69ecca42ea51906e38ad3efb0546e0f8188230404365950534779ee2f1f1343d6a477656f1b4de9551c86ea887cf0b88bbd4960", 0xf1}, {&(0x7f0000000740)="e171afa35c2a2eb75659ed6d9c0dbad9b8cafffa11e1e37057fef77a433d44734d351620d988222f5e071333d1dc08728d570ad59fbf7a513a87bd7d6e2e3d988f769d400351caf0ca9af318ac727a7ffc1ebc02c509c7687954f46e7c7d1810b853cb9f5a73ce4e9f618f11ada70f4f8c6b79e6266f81dfbfd32bdd9feebc7415f91ab6ae1f2f8fed2a4351c254bcb64ac2ff06f4a4345c6a95739905438a8b5907126a5a7d9dd751", 0xa9}, {&(0x7f0000000800)="de72c6edadac4295e00ef0ef506f504879dfbf", 0x13}, {&(0x7f0000000840)="1acd4a9b885f3fa5d0fa770c669bff82586c1ab5a90451734f374a70d4db4fb690ebbc70fae0189800c07cc57efd", 0x2e}, {&(0x7f0000000880)}], 0x8, &(0x7f0000000940)=[@iv={0xb8, 0x117, 0x2, 0x9f, "5ab3c873b27a57c2efc07bd1f41d81bcd07b2774eea79cbeb1cfd2c909a382ec4ac7a336e11961d78e65d300a763b8380c4cd4c6d351c40f4ee34aea88ee9be40c06ee54fc09a8556fa0b7b18ef543b65be13e70b3d6b4855adf11cd7f644df0b6ae188dfe11196a6d177dbc58720e131445505da1121cdb2896329b911937f16cd9be3cb3fe9ff2b95eb68b34ca91eadd2f4d63227268965af7ced79f5cd3"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0xfe1a}], 0x118, 0x40}], 0x2, 0x20008014) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)='9+', 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400130000000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48d4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002980)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 2m21.322710451s ago: executing program 8 (id=3782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r3) 2m20.034541724s ago: executing program 8 (id=3784): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f00000000c0), 0x10) close(r0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x200000000001, 0x6, 0x7267, 0xb, 0x200000006, 0x1ffffffffff, 0x4, 0x9, 0x35}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) 2m18.945830318s ago: executing program 8 (id=3789): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x40) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2m17.388937085s ago: executing program 38 (id=3760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) 2m17.337210857s ago: executing program 9 (id=3792): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x6, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10, 0x7fffffff}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) 2m16.409376433s ago: executing program 9 (id=3794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x6000, 0x1) fsopen(0x0, 0x1) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) 2m14.598859552s ago: executing program 9 (id=3796): syz_open_dev$swradio(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 2m12.972269652s ago: executing program 9 (id=3800): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r4 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 2m12.086710186s ago: executing program 1 (id=3802): r0 = userfaultfd(0x80801) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)='\x00', 0x1, 0x20000040, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000048c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1b", 0x1}], 0x1, 0x0, 0x0, 0x400c0}], 0x1, 0x4004000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x10, 0xffffffff}, 0x10) sendto(r2, &(0x7f0000000000)='N', 0x1, 0x20000800, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2m11.894247115s ago: executing program 1 (id=3803): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00=\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 2m11.79398546s ago: executing program 9 (id=3804): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r2, 0x5) 2m11.729073013s ago: executing program 1 (id=3805): r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2m11.422258318s ago: executing program 1 (id=3806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 2m10.252733326s ago: executing program 1 (id=3807): r0 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10b8}, 0x20008004) 2m10.16812056s ago: executing program 9 (id=3808): clock_gettime(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180), 0x4) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_SKBQUEUE={0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m10.134114032s ago: executing program 1 (id=3809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365000014000780080006400000000008001340"], 0x60}}, 0x0) 2m3.662571331s ago: executing program 39 (id=3789): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x40) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.388521937s ago: executing program 40 (id=3809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365000014000780080006400000000008001340"], 0x60}}, 0x0) 1m54.095628832s ago: executing program 41 (id=3808): clock_gettime(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180), 0x4) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_SKBQUEUE={0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 50.667004215s ago: executing program 6 (id=3976): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) 49.55988641s ago: executing program 6 (id=3979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x3) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 48.190024087s ago: executing program 6 (id=3984): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4b4b, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, 0x0, 0x5}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 43.209164082s ago: executing program 6 (id=4002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1379, &(0x7f0000000c80)=ANY=[], 0x0) 42.700959597s ago: executing program 6 (id=3996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x8010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1088}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 40.766120163s ago: executing program 6 (id=4000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 25.484157975s ago: executing program 42 (id=4000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 22.391675967s ago: executing program 7 (id=4044): openat$rtc(0xffffffffffffff9c, 0x0, 0xc02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') readv(r3, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) 20.164693637s ago: executing program 7 (id=4045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 19.128345468s ago: executing program 7 (id=4049): userfaultfd(0x801) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0100000000fff4001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100003040000ae85d95c000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x4000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 18.399244384s ago: executing program 7 (id=4053): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x55c, &(0x7f00000003c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 16.837490661s ago: executing program 7 (id=4057): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x60000002) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) close(r0) 16.111319727s ago: executing program 4 (id=4059): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) socket$netlink(0x10, 0x3, 0x0) 14.445224228s ago: executing program 4 (id=4064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14.253339278s ago: executing program 4 (id=4066): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff9a, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 12.909029824s ago: executing program 4 (id=4067): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$eJzs3M9rHOUbAPBnJpvf+TbpF1FbBANSFcVt2pQKPbWeRQU9eGxMNiVk+8Mkggk9pPWuHkQ8FKR/guDdXjwJHupB619QxCJFL20PK7M/0jWb3cR0s2PTzwfezPvOO9nneTLZzDuwkwCeWJPZlzTiUEScTSLG6/vTiBio9oYi1mvH3b97eTZrSVQq7/6RRBIR9+5enm28VlLfjtYHQxFx840k/v9Ja9zl1bXFmXK5tFQfH105f+no8uraawvnZ86VzpUunJh+/cT0yenpLtZ6+9IHXz3301svXr3+6dTbXx74IYnTMVafa66jWyZjcuNn0qwQETPdDpaTvno9zXUmhRwTAgCgo7RpDfd0jEdfPFy8jcf3P+eaHAAAANAVlb6ICgAAALDPJe7/AQAAYJ9rfA7g3t3Ls42W7ycSeuvOmYiYqNXfeL65NlOI9ep2KPojYuTPJJofa01q3/bIJrNI3/5Yylps9xzycBcCbrJ+JSKe3er8J9X6J6pPcbfWn0bEVBfiT24a9/r371HqP92F+HnXD8CT6caZ2oWs9fqX1tY/g7XR5utfYYtr127kff1rrP/ut6z/0o31X1+b9d87O4xx+MErN9vNNa//3v/s17ksfrZ9pKL+hTtXIg4Xtqo/2ag/aVP/2R3GGJ29fa3dXFZ/Vm+j9br+yvWII9XVXGv9DUmn/090dH6hXJqqfd3i9VdPdo7ffP6zlsVv3Av0Qnb+R2J35//SDmNMPPP7oXZz29ef/jaQvFftDdT3fDyzsrJ0LGIgebN1//HOuTSOabxGVv/LL3R+/29Vf/Y3Yb3+c8h+e67Ut9n46qaYo0eOf7P7+vdWVv/cLs//5zuM8fV31z7ctGvjzZV3/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HtKIGIskLW7007RYjBiNiKdiJC1fXF55df7iRxfmsrmIiehP5xfKpamIGK+Nk2x8rNp/OD6+aTwdEQcj4ovx4eq4OHuxPJd38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwYjYixSNJiRKQR8dd4mhaLeWcFAAAAdN1E3gkAAAAAe879PwAAAOx/Lff/hX+MhnqZCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPvSwedv3EoiYv3UcLVlBupz/blmBuy1dGeHjex1HkDv9eWdAJCbQlO/UqlUckwF6DH3+ECyzfxQ25nBrucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/XS4du3EoiYv3UcLVlBupz/blmBuy1NO8EgNz0dZpMtt0BPMYKeScA5MY9PlBb2T+o1LTOD7X9zsGH3fXdRQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8TFWbUlajIi02k/TYjHifxExEf3J/ELEVEQciIhfxvsH5xfKpWN5Jw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDXLa+uLc6Uy6UlHR2dLnaGo2exhutv5jbHDLaf6tDJ+Q8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5WF5dW5wpl0tLy3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORteXVtcaZcLi3tYSfvGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM/fAQAA///+hAlq") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x55c, &(0x7f00000003c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 11.010525428s ago: executing program 7 (id=4070): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 10.724100912s ago: executing program 43 (id=4070): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 10.674021424s ago: executing program 4 (id=4072): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x2, 0x4) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x9, 0xbb, 0x57e0, 0x0, 0x4662, r5}, 0x20) 6.515941309s ago: executing program 3 (id=4078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) 6.405859975s ago: executing program 2 (id=4079): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x61, 0x0, 0xf9, 0x5b}]}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0002"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair(0x5, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000300)={r5, r0, 0x1, 0x0, &(0x7f0000000080), 0x9, 0xfa, 0x6825, 0x5, 0x30ef, 0x0, 0xe57d, 'syz1\x00'}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, 0x50661}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @multicast1}}}], 0x20}}], 0x1, 0x4044880) 5.4937884s ago: executing program 2 (id=4080): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c0102030109022400010100"], 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(0xffffffffffffffff, 0x0, 0x40000000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) write$P9_RUNLINKAT(r1, 0x0, 0x0) 5.359093616s ago: executing program 3 (id=4081): openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi5\x00', 0xc0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = semget$private(0x0, 0x6, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000880)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100c9, &(0x7f0000000100)=ANY=[], 0x1, 0x245, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) nanosleep(&(0x7f00000001c0), 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r1, 0x0, 0x0) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) 4.583169484s ago: executing program 4 (id=4082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/78, 0x1f}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000540)=""/43, 0x2b}], 0x3}, 0x0) 4.391714144s ago: executing program 44 (id=4082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/78, 0x1f}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000540)=""/43, 0x2b}], 0x3}, 0x0) 4.350352355s ago: executing program 3 (id=4084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f00000000c0)='%ps \x00'}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 3.086512698s ago: executing program 3 (id=4085): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000003c0)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c726f6469722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c636865636b3d7374726963742c007dda7c45d5aad78cccfdc2ffc29d6a3b6e1b129f9d0266d865d85fd2bfa2ccc210c0dcd127a25f0d6c6d96a9a07afc56b8e1aba9cc2ada1d083e28a51159b7c76a012ba863bd2b72ca09635af17887064bb040ed8e5244d0f8d2cf2a0964bc96503d78291d"], 0x6, 0x2d5, &(0x7f0000000680)="$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") r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x3ea, 0xffffffff, 0x40}) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x2000000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0xc01a2, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) 2.83325462s ago: executing program 2 (id=4086): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='veth0'], 0x12) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x3}, {0x3, 0x0, 0xfffffffc, 0x4}], 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r7, 0xc) 2.716075866s ago: executing program 3 (id=4087): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x1, 'ipvlan1\x00', {}, 0x4}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x2, 0x10001}, 0xc) 2.253207689s ago: executing program 3 (id=4088): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e0cff1c20"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.862498839s ago: executing program 2 (id=4089): sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) 967.636653ms ago: executing program 2 (id=4090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x2, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x1000, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e23, 0x202, 0x2, 0x20, 0x0, 0x3b}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x1, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 2 (id=4091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/199, 0xc7}], 0x1, &(0x7f0000000c40)=[{&(0x7f0000000d80)=""/95, 0x5f}], 0x1, 0x0) kernel console output (not intermixed with test programs): I: 00007f0264bbdea0 [ 428.794807][T13457] RBP: 0000200000000000 R08: 00007f0264bbdee0 R09: 000000000000881d [ 428.803450][T13457] R10: 000000000000881d R11: 0000000000000246 R12: 0000200000000040 [ 428.811569][T13457] R13: 00007f0264bbdea0 R14: 000000000001272b R15: 00002000000001c0 [ 428.819823][T13457] [ 428.823703][T13457] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5 [ 435.429873][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 435.718479][T13570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.929767][T13583] overlayfs: failed to clone upperpath [ 438.434554][T13590] lo speed is unknown, defaulting to 1000 [ 440.219926][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.226832][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.288968][ T4837] device hsr_slave_0 left promiscuous mode [ 441.314661][ T4837] device hsr_slave_1 left promiscuous mode [ 441.420709][ T4837] device veth1_macvtap left promiscuous mode [ 441.467147][ T4837] device veth0_macvtap left promiscuous mode [ 441.520473][ T4837] device veth1_vlan left promiscuous mode [ 441.549042][ T4837] device veth0_vlan left promiscuous mode [ 442.113487][T13640] input: syz1 as /devices/virtual/input/input5 [ 444.656925][ T4837] bond0 (unregistering): Released all slaves [ 444.908964][T13686] netlink: 'syz.5.3017': attribute type 1 has an invalid length. [ 444.935035][T13688] device wg1 entered promiscuous mode [ 445.946486][T13711] netlink: 'syz.1.3035': attribute type 15 has an invalid length. [ 446.125681][T13711] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 447.391747][T13720] overlayfs: failed to clone upperpath [ 448.346417][ T4289] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 448.746631][ T4289] usb 9-1: config 0 has no interfaces? [ 448.860696][T13750] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 449.819140][ T4289] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.832842][ T4289] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.844560][ T4289] usb 9-1: Product: syz [ 449.849830][ T4289] usb 9-1: Manufacturer: syz [ 449.885265][ T4289] usb 9-1: config 0 descriptor?? [ 450.244669][ T4312] usb 9-1: USB disconnect, device number 6 [ 451.430356][T13770] loop8: detected capacity change from 0 to 256 [ 453.741797][T13770] loop8: detected capacity change from 0 to 32768 [ 457.197777][T13840] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.3067'. [ 458.118913][T13885] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 461.098768][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3086'. [ 461.241337][T13913] device bond1 left promiscuous mode [ 461.283077][T13913] device bond2 left promiscuous mode [ 461.326876][T13913] device bridge1 left promiscuous mode [ 461.375395][T13913] device team1 left promiscuous mode [ 461.400916][T13913] device team2 left promiscuous mode [ 461.438685][T13913] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.448467][T13913] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.459793][T13913] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.469679][T13913] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.667105][T13921] tipc: Enabling of bearer rejected, failed to enable media [ 463.549415][T13961] netlink: 'syz.1.3104': attribute type 4 has an invalid length. [ 463.977167][T13964] netlink: 'syz.1.3104': attribute type 4 has an invalid length. [ 464.682870][T13979] netlink: 'syz.4.3101': attribute type 4 has an invalid length. [ 464.748261][T13982] netlink: 'syz.4.3101': attribute type 4 has an invalid length. [ 469.670143][T14036] netlink: 'syz.0.3127': attribute type 1 has an invalid length. [ 469.754104][T14032] tipc: Enabled bearer , priority 10 [ 469.897285][T14041] bond5: (slave gretap1): making interface the new active one [ 469.910692][T14045] overlayfs: failed to clone upperpath [ 469.928438][T14041] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 470.005799][T14036] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 471.195532][ T13] tipc: Node number set to 2605889581 [ 473.807580][T14084] bond6: (slave ip6gretap1): no link monitoring support [ 473.848847][T14084] bond6: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 473.935167][T14084] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 475.397844][T14120] netlink: 'syz.0.3155': attribute type 7 has an invalid length. [ 475.601914][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3154'. [ 475.645961][T14130] overlayfs: failed to clone upperpath [ 476.007165][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 478.565732][T14198] syz.4.3187 (14198): attempted to duplicate a private mapping with mremap. This is not supported. [ 478.762107][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3189'. [ 479.251937][T14214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.654897][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 484.654923][ T26] audit: type=1326 audit(2000000384.308:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.8.3218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x0 [ 484.773985][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3221'. [ 484.969152][T14290] 8021q: adding VLAN 0 to HW filter on device bond8 [ 487.847860][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3238'. [ 489.850643][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3250'. [ 489.933994][T14385] netlink: 'syz.1.3253': attribute type 4 has an invalid length. [ 490.141824][T14395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3258'. [ 491.311849][T14427] IPv6: NLM_F_REPLACE set, but no existing node found! [ 494.697768][T14474] tipc: Enabled bearer , priority 10 [ 494.736565][T14474] tipc: Enabled bearer , priority 0 [ 496.645618][T14493] netlink: 182 bytes leftover after parsing attributes in process `syz.5.3284'. [ 496.897066][T14495] lo speed is unknown, defaulting to 1000 [ 498.859525][T14512] overlayfs: failed to clone upperpath [ 499.217352][T14522] overlayfs: failed to clone upperpath [ 499.413639][T14526] lo speed is unknown, defaulting to 1000 [ 501.673761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.681462][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.926461][T14555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3306'. [ 502.314074][T14565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.285503][T14571] team0: Port device syz_tun removed [ 503.316580][T14571] bond0: (slave bridge0): Releasing backup interface [ 503.369683][T14571] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 503.414020][T14571] bond1: (slave bond2): Releasing backup interface [ 503.489946][T14571] bond3: (slave ip6gretap1): Releasing backup interface [ 503.537093][T14571] bond4: (slave geneve2): Releasing active interface [ 503.563426][T14571] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.598004][T14571] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.657362][T14571] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.709780][T14571] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.826252][T14571] bond5: (slave bond6): Releasing backup interface [ 503.855282][T14571] device bond6 left promiscuous mode [ 503.924873][T14571] bond7: (slave bridge8): Releasing active interface [ 503.979105][T14573] team0: Unable to change to the same mode the team is in [ 504.293031][T14588] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3315'. [ 506.453418][T14613] tipc: Failed to remove unknown binding: 66,0,0/2605889581:589305801/589305803 [ 506.484100][T14613] tipc: Failed to remove unknown binding: 66,0,0/2605889581:589305801/589305802 [ 506.528253][T14616] tipc: Failed to remove unknown binding: 66,0,0/2605889581:589305801/589305803 [ 506.561682][T14616] tipc: Failed to remove unknown binding: 66,0,0/2605889581:589305801/589305802 [ 506.635432][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3326'. [ 506.738002][T14624] tipc: Failed to remove unknown binding: 66,0,0/2605889581:1903910203/1903910205 [ 506.767195][T14624] tipc: Failed to remove unknown binding: 66,0,0/2605889581:1903910203/1903910204 [ 506.818721][T14631] tipc: Failed to remove unknown binding: 66,0,0/2605889581:1903910203/1903910205 [ 506.857476][T14631] tipc: Failed to remove unknown binding: 66,0,0/2605889581:1903910203/1903910204 [ 507.205999][T14639] tipc: Enabling of bearer rejected, failed to enable media [ 507.258083][T14643] overlayfs: failed to clone upperpath [ 507.644928][T14657] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 507.681484][T14657] netlink: 'syz.8.3338': attribute type 15 has an invalid length. [ 507.740884][T14657] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 507.797056][T14662] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 508.161987][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3345'. [ 509.114925][T14687] x_tables: duplicate underflow at hook 2 [ 509.481637][T14707] netlink: 'syz.5.3355': attribute type 15 has an invalid length. [ 510.844275][T14758] team0: Port device dummy0 removed [ 510.862587][T14758] bond4: (slave ip6erspan0): Releasing active interface [ 511.272803][T14758] bond5: (slave gretap1): Releasing active interface [ 511.865050][T14758] bond6: (slave ip6gretap1): Releasing backup interface [ 511.968970][T14759] netlink: 'syz.4.3373': attribute type 15 has an invalid length. [ 511.984140][T14770] overlayfs: failed to clone upperpath [ 512.218111][T14761] team0: Mode changed to "loadbalance" [ 512.556749][ T13] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 512.987546][ T13] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.071647][ T13] usb 9-1: config 0 has no interface number 0 [ 513.311585][ T13] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 513.351962][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.379628][ T13] usb 9-1: config 0 descriptor?? [ 513.404843][T14790] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.3385'. [ 513.419709][ T13] usb 9-1: selecting invalid altsetting 1 [ 513.435984][ T13] dvb_ttusb_budget: ttusb_init_controller: error [ 513.454784][ T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 513.709202][ T13] DVB: Unable to find symbol cx22700_attach() [ 513.854473][ T13] DVB: Unable to find symbol tda10046_attach() [ 513.864304][ T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 513.898639][ T13] usb 9-1: USB disconnect, device number 7 [ 514.131916][T14807] device bridge_slave_0 left promiscuous mode [ 514.160100][T14807] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.932478][T14829] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 515.968477][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3396'. [ 516.908102][T14842] netlink: 'syz.0.3400': attribute type 4 has an invalid length. [ 516.976243][T14848] netlink: 'syz.0.3400': attribute type 4 has an invalid length. [ 519.078378][T14875] netlink: 182 bytes leftover after parsing attributes in process `syz.0.3409'. [ 520.747661][ T26] audit: type=1326 audit(2000000420.408:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.3413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x0 [ 520.833535][T14899] loop8: detected capacity change from 0 to 512 [ 520.896977][T14899] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 520.966560][T14899] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 521.345370][T14899] EXT4-fs (loop8): 1 orphan inode deleted [ 521.398784][T14899] EXT4-fs (loop8): 1 truncate cleaned up [ 521.427716][T14899] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x0000000000000006,stripe=0x0000000000000005,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 522.699880][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3411'. [ 524.895941][ T26] audit: type=1326 audit(2000000424.548:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.0.3428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fcbfbfe0517 code=0x0 [ 524.943842][T14948] loop8: detected capacity change from 0 to 2048 [ 525.755858][T14948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 530.113659][T14994] lo speed is unknown, defaulting to 1000 [ 533.293274][T15038] sctp: [Deprecated]: syz.8.3452 (pid 15038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.293274][T15038] Use struct sctp_sack_info instead [ 534.710950][ T26] audit: type=1326 audit(2000000434.368:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15067 comm="syz.5.3462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0f23a2799 code=0x0 [ 534.824395][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3463'. [ 534.851870][T15070] lo speed is unknown, defaulting to 1000 [ 534.863257][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3463'. [ 536.067083][T15102] overlayfs: failed to clone upperpath [ 536.703443][T15123] lo speed is unknown, defaulting to 1000 [ 537.483302][T15137] overlayfs: failed to clone upperpath [ 540.268937][T15167] lo speed is unknown, defaulting to 1000 [ 542.443477][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3500'. [ 542.671226][T15192] loop8: detected capacity change from 0 to 4096 [ 542.709318][T15192] ntfs3: loop8: Failed to load $LogFile. [ 543.900882][T15206] lo speed is unknown, defaulting to 1000 [ 545.050584][T15219] netlink: 'syz.1.3511': attribute type 16 has an invalid length. [ 545.083229][T15219] netlink: 'syz.1.3511': attribute type 17 has an invalid length. [ 545.104194][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 545.136817][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 545.175896][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 545.279844][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 545.491053][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 545.707116][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 546.231084][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 546.264763][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 546.275999][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 546.296181][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 546.359058][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 546.383460][T15219] device syz_tun left promiscuous mode [ 546.397162][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 546.418139][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 546.464159][T15219] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.478605][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 546.489031][T15219] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 546.498318][T15219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.522134][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3512'. [ 546.551025][T15219] syz.1.3511 (15219) used greatest stack depth: 19504 bytes left [ 546.606544][T15233] netlink: 'syz.4.3525': attribute type 16 has an invalid length. [ 546.638685][T15233] netlink: 'syz.4.3525': attribute type 17 has an invalid length. [ 546.660850][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 546.685674][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 546.708370][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 546.745169][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 546.771081][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 546.805220][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 546.817843][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 546.835072][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 546.847797][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 546.865242][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 546.883746][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 546.895494][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 546.914566][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 546.947108][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 546.963124][T15233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.998066][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 547.009852][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 547.020624][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 547.031593][T15233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.162429][T15251] device bridge3 left promiscuous mode [ 547.197368][T15251] device veth3 left promiscuous mode [ 547.203339][T15251] device ip6gre1 left promiscuous mode [ 550.262767][T15306] netlink: 'syz.0.3535': attribute type 4 has an invalid length. [ 550.634393][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3543'. [ 550.986737][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'. [ 553.445194][T15361] tipc: Enabling of bearer rejected, already enabled [ 553.479139][T15364] netlink: 'syz.5.3553': attribute type 1 has an invalid length. [ 553.550670][T15364] 8021q: adding VLAN 0 to HW filter on device bond9 [ 553.621518][T15361] tipc: Enabled bearer , priority 0 [ 553.744765][T15369] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 553.783480][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 556.825173][ T26] audit: type=1326 audit(2000000456.478:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0266985799 code=0x0 [ 556.985675][ T26] audit: type=1326 audit(2000000456.598:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.076844][ T26] audit: type=1326 audit(2000000456.598:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.100711][T15435] netlink: 'syz.1.3573': attribute type 16 has an invalid length. [ 557.123225][T15435] netlink: 'syz.1.3573': attribute type 17 has an invalid length. [ 557.152576][ T26] audit: type=1326 audit(2000000456.598:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.168743][T15435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 557.186602][ T26] audit: type=1326 audit(2000000456.598:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.241487][T15435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 557.258598][ T26] audit: type=1326 audit(2000000456.598:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.321975][T15435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.350280][ T26] audit: type=1326 audit(2000000456.598:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.381674][ T26] audit: type=1326 audit(2000000456.598:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.424685][ T26] audit: type=1326 audit(2000000456.598:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 557.456843][ T26] audit: type=1326 audit(2000000456.598:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.8.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266985799 code=0x7ffc0000 [ 558.440438][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3582'. [ 558.468359][T15455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 558.486972][T15455] bond0: (slave bond_slave_0): Releasing backup interface [ 558.535464][T15455] bond0: (slave bond_slave_1): Releasing backup interface [ 558.575107][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.615316][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.666130][T15455] bond2: (slave bridge1): Releasing backup interface [ 558.743838][T15455] bond3: (slave geneve2): Releasing active interface [ 558.778966][T15455] bond4: (slave ip6erspan0): Releasing active interface [ 559.744341][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3582'. [ 562.010856][T15505] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3595'. [ 562.600485][T15511] overlayfs: failed to clone upperpath [ 567.077557][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.084202][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.752659][T15555] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3608'. [ 571.474213][T15580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.126130][T15609] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3626'. [ 574.156459][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3627'. [ 574.377251][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 574.936951][ T5828] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 575.015577][ T26] kauditd_printk_skb: 120 callbacks suppressed [ 575.015593][ T26] audit: type=1326 audit(2000000474.668:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 575.134359][ T26] audit: type=1326 audit(2000000474.708:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 575.176355][ T26] audit: type=1326 audit(2000000474.708:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 575.220432][ T26] audit: type=1326 audit(2000000474.708:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 575.322787][ T26] audit: type=1326 audit(2000000474.708:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 575.357616][ T26] audit: type=1326 audit(2000000474.758:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 575.387446][ T5828] usb 9-1: Using ep0 maxpacket: 32 [ 576.139984][ T26] audit: type=1326 audit(2000000474.758:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 576.177072][ T5828] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.427520][ T5828] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.485555][ T26] audit: type=1326 audit(2000000474.758:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 576.508431][ T5828] usb 9-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 576.567013][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.582655][ T26] audit: type=1326 audit(2000000474.758:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 576.627179][ T5828] usb 9-1: config 0 descriptor?? [ 576.675413][T15656] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 576.722208][T15656] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 576.745288][ T26] audit: type=1326 audit(2000000474.758:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe519389799 code=0x7ffc0000 [ 577.068786][ T4852] bond0: (slave wlan1): Releasing backup interface [ 577.310397][ T6230] usb 9-1: USB disconnect, device number 8 [ 578.443366][ T4852] device hsr_slave_0 left promiscuous mode [ 578.489052][ T4852] device hsr_slave_1 left promiscuous mode [ 578.517064][ T4852] batman_adv: batadv0: Removing interface: dummy0 [ 578.560574][ T4852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.603085][ T4852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.668988][ T4852] device bridge_slave_1 left promiscuous mode [ 578.878242][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.121353][ T4852] device bridge_slave_0 left promiscuous mode [ 580.178066][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.972375][ T4852] team0 (unregistering): Port device team_slave_1 removed [ 583.075238][ T4852] team0 (unregistering): Port device team_slave_0 removed [ 583.152242][ T4852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.243005][ T4852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.562942][ T4852] bond0 (unregistering): Released all slaves [ 583.673322][T15721] sch_fq: defrate 53322 ignored. [ 584.910380][T15742] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.009588][T15753] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 585.058560][T15753] bond7: (slave macvlan7): Enslaving as an active interface with a down link [ 587.044581][T15799] netlink: 'syz.1.3679': attribute type 7 has an invalid length. [ 587.280842][T15804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3680'. [ 587.530008][T15804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3680'. [ 589.638248][T15842] overlayfs: failed to clone upperpath [ 591.612343][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'. [ 591.687838][T15870] overlayfs: failed to clone upperpath [ 591.725238][T15867] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 591.844388][T15867] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 597.188335][T15902] syz.5.3702 (15902) used greatest stack depth: 18008 bytes left [ 600.040751][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3713'. [ 600.437866][T15962] overlayfs: failed to clone upperpath [ 603.322454][T16011] overlayfs: failed to clone upperpath [ 606.401950][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 606.401968][ T26] audit: type=1804 audit(2000000506.058:1078): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3741" name="bus" dev="ramfs" ino=68791 res=1 errno=0 [ 606.661587][ T26] audit: type=1804 audit(2000000506.058:1079): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3741" name="bus" dev="ramfs" ino=68791 res=1 errno=0 [ 606.687090][T16061] lo speed is unknown, defaulting to 1000 [ 607.407341][T16092] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3747'. [ 607.527898][T16087] loop8: detected capacity change from 0 to 4096 [ 608.394233][T16098] IPv6: Can't replace route, no match found [ 608.432629][T16102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3749'. [ 608.465646][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3746'. [ 608.508372][T16061] chnl_net:caif_netlink_parms(): no params data found [ 608.536738][ T4312] Bluetooth: hci5: command 0x0409 tx timeout [ 608.865516][T16061] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.878719][T16109] VFS: Mount too revealing [ 608.922674][T16061] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.941594][T16061] device bridge_slave_0 entered promiscuous mode [ 608.984218][T16061] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.005461][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.030278][T16061] device bridge_slave_1 entered promiscuous mode [ 609.136940][T16061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.203280][T16061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.366083][T16061] team0: Port device team_slave_0 added [ 609.417798][T16061] team0: Port device team_slave_1 added [ 609.458743][T16122] lo speed is unknown, defaulting to 1000 [ 609.515080][T16061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.524377][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.854725][T16061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.195959][T16061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.231975][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.259794][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.611606][T16061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.729094][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 610.900022][T16061] device hsr_slave_0 entered promiscuous mode [ 610.932952][T16061] device hsr_slave_1 entered promiscuous mode [ 610.955327][T16061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.972484][T16061] Cannot create hsr debugfs directory [ 611.509422][T16061] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 611.535777][T16061] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 611.574964][T16061] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 611.616310][T16061] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 611.893970][T16061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.967393][T16155] netlink: 798 bytes leftover after parsing attributes in process `syz.5.3759'. [ 611.988039][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.003751][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.039754][T16061] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.096714][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.112459][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.164329][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.171871][ T4856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.321834][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.385080][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.449486][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.529326][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.536997][ T4856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.675317][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.810861][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.948103][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.963386][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 613.036437][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.083800][T16163] loop8: detected capacity change from 0 to 256 [ 613.106632][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.137027][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.166572][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.211007][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.241163][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.278186][T16061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.345728][T16061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.387482][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.407222][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.589406][T16163] FAT-fs (loop8): Directory bread(block 64) failed [ 613.596138][T16163] FAT-fs (loop8): Directory bread(block 65) failed [ 613.661816][T16163] FAT-fs (loop8): Directory bread(block 66) failed [ 613.707402][T16163] FAT-fs (loop8): Directory bread(block 67) failed [ 613.745113][T16163] FAT-fs (loop8): Directory bread(block 68) failed [ 613.853545][T16163] FAT-fs (loop8): Directory bread(block 69) failed [ 613.894724][T16163] FAT-fs (loop8): Directory bread(block 70) failed [ 613.912642][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 613.929332][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 613.965172][T16061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.977915][T16163] FAT-fs (loop8): Directory bread(block 71) failed [ 613.984748][T16163] FAT-fs (loop8): Directory bread(block 72) failed [ 614.093201][T16163] FAT-fs (loop8): Directory bread(block 73) failed [ 615.153898][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 615.410773][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 615.453212][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 615.573899][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 615.584640][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 615.654623][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.713999][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.747346][T16061] device veth0_vlan entered promiscuous mode [ 615.799844][T16061] device veth1_vlan entered promiscuous mode [ 615.919069][T16061] device veth0_macvtap entered promiscuous mode [ 615.942784][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.952854][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.983801][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 616.015433][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.055338][T16061] device veth1_macvtap entered promiscuous mode [ 616.252958][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.262295][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.342401][T16061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.528142][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.667469][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.972121][T16061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.015837][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 617.073444][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.159714][T16061] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.210924][T16061] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.239854][T16061] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.276496][T16061] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.533942][ T4837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.556293][ T4837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.627721][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.669456][ T4856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.698753][ T4856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.819602][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 618.206467][ T4311] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 618.650518][T16227] loop9: detected capacity change from 0 to 2048 [ 618.706916][ T4311] usb 9-1: config 0 has no interfaces? [ 618.840163][T16227] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 618.936843][ T4311] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 619.006559][ T4311] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 619.053875][ T4311] usb 9-1: Product: syz [ 619.086272][ T4311] usb 9-1: Manufacturer: syz [ 619.105614][T16224] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 619.145039][ T4311] usb 9-1: SerialNumber: syz [ 619.177415][ T4311] usb 9-1: config 0 descriptor?? [ 619.229339][T16227] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 619.303396][T16227] EXT4-fs (loop9): This should not happen!! Data will be lost [ 619.303396][T16227] [ 619.364553][T16227] EXT4-fs (loop9): Total free blocks count 0 [ 619.415566][T16227] EXT4-fs (loop9): Free/Dirty block details [ 619.460234][T16227] EXT4-fs (loop9): free_blocks=4096 [ 619.476546][T16227] EXT4-fs (loop9): dirty_blocks=16 [ 619.503306][T16227] EXT4-fs (loop9): Block reservation details [ 619.523581][T16227] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 620.739026][ T4226] usb 9-1: USB disconnect, device number 9 [ 622.730046][ T26] audit: type=1800 audit(2000000522.388:1080): pid=16271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3777" name="bus" dev="ramfs" ino=70103 res=0 errno=0 [ 624.354124][ T26] audit: type=1326 audit(2000000523.958:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.1.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb7da2799 code=0x7ffc0000 [ 624.573401][T16309] loop8: detected capacity change from 0 to 512 [ 624.590662][ T26] audit: type=1326 audit(2000000524.068:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16302 comm="syz.1.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb7da2799 code=0x7ffc0000 [ 624.661937][T16301] lo speed is unknown, defaulting to 1000 [ 624.753052][T16311] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3785'. [ 624.846575][T16309] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 624.895993][T16309] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 625.319748][T16301] chnl_net:caif_netlink_parms(): no params data found [ 625.789925][T16301] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.823746][T16336] loop8: detected capacity change from 0 to 512 [ 625.853322][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.095475][T16301] device bridge_slave_0 entered promiscuous mode [ 626.106015][T16301] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.134750][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.805945][T16254] Bluetooth: hci6: command 0x0409 tx timeout [ 626.822979][T16301] device bridge_slave_1 entered promiscuous mode [ 627.071209][T16336] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,max_dir_size_kb=0x0000000000000a30,journal_dev=0x00000000460b8000,,errors=continue. Quota mode: writeback. [ 627.205014][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.241153][T16336] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 627.300308][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.532327][T16301] team0: Port device team_slave_0 added [ 627.582983][T16301] team0: Port device team_slave_1 added [ 627.686144][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.722767][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.805743][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.901141][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.949943][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.041929][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.245092][T16359] lo speed is unknown, defaulting to 1000 [ 628.332725][T16301] device hsr_slave_0 entered promiscuous mode [ 628.357868][T16301] device hsr_slave_1 entered promiscuous mode [ 628.401518][T16301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.420365][T16301] Cannot create hsr debugfs directory [ 629.503905][T16254] Bluetooth: hci6: command 0x041b tx timeout [ 629.709452][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.715927][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.110165][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'. [ 630.143428][T16254] Bluetooth: hci7: command 0x0409 tx timeout [ 630.311815][T16359] chnl_net:caif_netlink_parms(): no params data found [ 630.764859][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.886357][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.939477][T16359] device bridge_slave_0 entered promiscuous mode [ 630.999976][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.046508][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.098063][T16359] device bridge_slave_1 entered promiscuous mode [ 631.377077][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.432320][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.599750][ T4226] Bluetooth: hci6: command 0x040f tx timeout [ 631.830908][T16359] team0: Port device team_slave_0 added [ 631.876838][T16359] team0: Port device team_slave_1 added [ 632.136888][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.144698][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.210620][T16414] overlayfs: failed to clone upperpath [ 632.229422][T16254] Bluetooth: hci7: command 0x041b tx timeout [ 632.236016][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.284792][T16415] overlayfs: failed to clone upperpath [ 632.339000][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.371965][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.468804][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.690906][T16359] device hsr_slave_0 entered promiscuous mode [ 632.730971][T16426] loop9: detected capacity change from 0 to 128 [ 632.766433][T16359] device hsr_slave_1 entered promiscuous mode [ 632.799688][T16359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.850819][T16359] Cannot create hsr debugfs directory [ 633.003901][T16301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 633.014860][T16432] attempt to access beyond end of device [ 633.014860][T16432] loop9: rw=2049, want=593, limit=128 [ 633.166374][T16301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 633.183347][T16426] attempt to access beyond end of device [ 633.183347][T16426] loop9: rw=524288, want=369, limit=128 [ 633.211875][T16301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 633.288768][T16438] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 634.189433][ T4226] Bluetooth: hci6: command 0x0419 tx timeout [ 634.263957][T16301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 634.304203][ T13] Bluetooth: hci7: command 0x040f tx timeout [ 636.051068][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.312021][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.358160][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.368076][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.393577][ T13] Bluetooth: hci7: command 0x0419 tx timeout [ 636.602938][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.627786][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.655133][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.662556][ T4850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.767364][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.786736][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.817010][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.856434][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.864336][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.902069][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 636.911833][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 636.951535][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 636.980512][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 636.997786][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.024065][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 637.039751][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.092860][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 637.117369][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.158446][T16301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.222122][T16301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 637.254629][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 637.273231][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.467057][T16359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 637.507355][T16359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 637.547903][T16359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 637.579954][T16359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 637.664323][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.697204][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 637.713577][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.795931][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 637.817556][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.893148][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 637.924555][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.954171][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.986212][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 638.008897][T16301] device veth0_vlan entered promiscuous mode [ 638.067797][T16301] device veth1_vlan entered promiscuous mode [ 638.108389][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.187606][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 638.198855][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.237605][T16301] device veth0_macvtap entered promiscuous mode [ 638.253187][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.289420][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 638.326120][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 638.357083][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.385322][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 638.426802][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.457406][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.464546][ T4856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.499571][T16301] device veth1_macvtap entered promiscuous mode [ 638.536351][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 638.568642][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.587498][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 638.618770][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.666913][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.674401][ T4856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.746857][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 638.827766][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 638.839946][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 638.860082][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 638.884318][T16301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.901552][T16301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.924358][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.959143][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 638.980149][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 638.999095][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.018682][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.044387][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.060145][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.077235][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.101586][T16301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.122067][T16301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.178392][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.211541][T16359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.246842][T16359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.295213][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 639.327362][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 639.357941][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.397352][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.428771][T16301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.457728][T16301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.488510][T16301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.526001][T16301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.724122][ T4852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.769117][ T4852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.805688][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.861227][ T4852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.876805][ T4852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.907421][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 640.125246][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.151412][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.170227][T16515] netlink: 'syz.3.3780': attribute type 1 has an invalid length. [ 640.188447][T16359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.209546][T16515] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.3780'. [ 640.278981][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.303007][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.399521][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.420729][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.457761][T16359] device veth0_vlan entered promiscuous mode [ 640.480124][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.499642][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.545121][T16359] device veth1_vlan entered promiscuous mode [ 640.661973][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 640.676817][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 640.717265][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.761510][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.808325][T16359] device veth0_macvtap entered promiscuous mode [ 640.880614][T16359] device veth1_macvtap entered promiscuous mode [ 640.976382][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.985663][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 641.064952][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.112617][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.153799][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.224282][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.276014][T16359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.319520][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.368329][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.407115][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.456979][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.518606][T16359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.627759][T16359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.727610][T16359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.750632][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.787150][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 641.865433][T16359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.899193][T16359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.944830][T16359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.993915][T16359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.034829][T16532] lo speed is unknown, defaulting to 1000 [ 642.326454][T13890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.334816][T13890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.408830][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.452563][ T4850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.469814][ T4850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.553757][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.664641][T16532] chnl_net:caif_netlink_parms(): no params data found [ 642.675854][T16553] loop3: detected capacity change from 0 to 1024 [ 642.814251][T16553] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 642.975486][T16553] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 643.198735][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.256382][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.309876][T16532] device bridge_slave_0 entered promiscuous mode [ 643.368863][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.416726][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.425315][T16532] device bridge_slave_1 entered promiscuous mode [ 643.572473][T16532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.651328][T16532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.672743][ T4226] Bluetooth: hci8: command 0x0409 tx timeout [ 643.876731][T16532] team0: Port device team_slave_0 added [ 643.916833][T16532] team0: Port device team_slave_1 added [ 644.049402][T16532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.075192][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.429019][T16532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.483061][T16532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.525261][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.582414][T16532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.670829][T16532] device hsr_slave_0 entered promiscuous mode [ 644.803984][T16532] device hsr_slave_1 entered promiscuous mode [ 645.635570][T16532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.738089][T16532] Cannot create hsr debugfs directory [ 645.748727][ T4226] Bluetooth: hci8: command 0x041b tx timeout [ 646.102130][T16604] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 646.233404][T16606] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 646.254674][T16606] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 647.908332][ T5839] Bluetooth: hci8: command 0x040f tx timeout [ 648.525660][T16532] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 648.588557][T16532] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 648.641186][T16532] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 648.680588][T16532] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 648.806861][T16646] loop3: detected capacity change from 0 to 1024 [ 648.872487][T16646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 648.996465][T16532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.195619][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 649.208360][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 649.260362][T16532] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.426193][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.477070][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.516772][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.524312][ T4856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.596935][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.639331][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.669155][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.676511][ T4856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.717220][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 649.929983][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 650.042440][ T5836] Bluetooth: hci8: command 0x0419 tx timeout [ 650.686578][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 650.707420][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 651.060180][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 651.155085][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 651.204794][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 651.239002][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.657192][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.721177][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.922516][T16724] lo speed is unknown, defaulting to 1000 [ 651.925636][T16532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.022100][T16532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.134020][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.176865][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.202325][T16729] lo speed is unknown, defaulting to 1000 [ 653.074026][ T4222] Bluetooth: hci1: command 0x0409 tx timeout [ 653.602057][ T4222] Bluetooth: hci0: command 0x0409 tx timeout [ 653.820162][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 653.835201][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 653.845168][T16748] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 653.892801][T16747] device bridge1 entered promiscuous mode [ 655.097800][ T1325] Bluetooth: hci1: command 0x041b tx timeout [ 655.263522][T16729] chnl_net:caif_netlink_parms(): no params data found [ 655.355117][T16532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.756710][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 656.868030][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.896921][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.917452][T16729] device bridge_slave_0 entered promiscuous mode [ 656.927987][T16779] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3845'. [ 656.958742][T16779] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.966604][T16779] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.024739][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.040345][T16777] loop3: detected capacity change from 0 to 4096 [ 657.048406][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.077424][T16729] device bridge_slave_1 entered promiscuous mode [ 657.108976][T16781] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3845'. [ 657.126603][T16781] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.134384][T16781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.142229][T16781] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.149559][T16781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.173234][T16781] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3845'. [ 657.184318][ T4311] Bluetooth: hci1: command 0x040f tx timeout [ 657.196130][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.204290][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.234884][T16724] chnl_net:caif_netlink_parms(): no params data found [ 657.310244][T16777] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 657.388101][T16729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.463897][T16729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.851247][T16729] team0: Port device team_slave_0 added [ 658.235739][T16729] team0: Port device team_slave_1 added [ 658.420046][ T1325] Bluetooth: hci0: command 0x040f tx timeout [ 658.474559][T16729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.496495][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.648054][T16729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.681600][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 658.692761][ T26] audit: type=1800 audit(4147484206.349:1083): pid=16777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3844" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 658.721016][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 658.807328][T16792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3847'. [ 658.847836][T16729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.855959][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.933663][T16729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.969496][T16795] netlink: 'syz.2.3847': attribute type 6 has an invalid length. [ 658.991873][T16795] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3847'. [ 659.082778][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 659.103920][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.123370][T16724] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.141788][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.157001][T16724] device bridge_slave_0 entered promiscuous mode [ 659.259164][T16729] device hsr_slave_0 entered promiscuous mode [ 659.296326][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 659.356740][T16729] device hsr_slave_1 entered promiscuous mode [ 659.373199][T16729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.394007][T16729] Cannot create hsr debugfs directory [ 659.410594][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.432597][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 659.454906][T16724] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.474430][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.489483][T16724] device bridge_slave_1 entered promiscuous mode [ 659.567293][ T895] tipc: Disabling bearer [ 659.574097][ T895] tipc: Disabling bearer [ 659.607795][T16532] device veth0_vlan entered promiscuous mode [ 659.614611][ T895] tipc: Left network mode [ 659.663863][T16724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.729395][T16724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.803302][T16532] device veth1_vlan entered promiscuous mode [ 659.834681][T16806] loop2: detected capacity change from 0 to 2048 [ 660.086696][T16806] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 660.126039][T16724] team0: Port device team_slave_0 added [ 660.555917][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 661.652227][ T4844] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 661.696011][ T4844] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 661.722144][T16724] team0: Port device team_slave_1 added [ 661.731037][ T4844] EXT4-fs (loop2): This should not happen!! Data will be lost [ 661.731037][ T4844] [ 661.742369][ T4844] EXT4-fs (loop2): Total free blocks count 0 [ 661.750043][ T4844] EXT4-fs (loop2): Free/Dirty block details [ 661.756002][ T4844] EXT4-fs (loop2): free_blocks=2415919504 [ 661.762455][ T4844] EXT4-fs (loop2): dirty_blocks=6320 [ 661.768701][ T4844] EXT4-fs (loop2): Block reservation details [ 661.775073][ T4844] EXT4-fs (loop2): i_reserved_data_blocks=395 [ 662.394338][ T4850] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 662.417722][ T4850] EXT4-fs (loop2): This should not happen!! Data will be lost [ 662.417722][ T4850] [ 662.649475][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 662.677664][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 662.691431][T16532] device veth0_macvtap entered promiscuous mode [ 662.714165][T16724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.726846][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.768663][T16724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.800650][T16532] device veth1_macvtap entered promiscuous mode [ 662.851004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.860478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 662.885542][T16724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.893671][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.930694][T16724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.049742][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.092131][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.122134][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.134215][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.149973][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.168448][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.193346][T16532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.313187][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 663.334398][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.364037][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.385292][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.401877][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.421900][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.444271][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.481335][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.514439][T16532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.618477][T16724] device hsr_slave_0 entered promiscuous mode [ 664.244483][T16724] device hsr_slave_1 entered promiscuous mode [ 664.267492][T16724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.275993][T16724] Cannot create hsr debugfs directory [ 664.410338][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.438992][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.495721][T16532] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.516490][T16532] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.532813][T16532] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.566524][T16532] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.747915][ T4837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.782027][ T4837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.873573][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 666.153733][T16729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 666.819934][T16857] loop3: detected capacity change from 0 to 512 [ 666.850629][T16857] FAT-fs (loop3): Unrecognized mount option "uid=+1" or missing value [ 667.153536][T13890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.163238][T16729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 667.180181][T13890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.241148][T16729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 667.261032][ T26] audit: type=1326 audit(4147484214.909:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16863 comm="syz.2.3868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd063537799 code=0x0 [ 667.360051][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 667.396626][T16729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 667.573401][ T26] audit: type=1804 audit(4147484215.219:1085): pid=16869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3810" name="bus" dev="ramfs" ino=72197 res=1 errno=0 [ 667.724418][ T26] audit: type=1804 audit(4147484215.259:1086): pid=16869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3810" name="bus" dev="ramfs" ino=72197 res=1 errno=0 [ 668.124426][T16874] loop3: detected capacity change from 0 to 32768 [ 668.352425][T16874] XFS (loop3): Mounting V5 Filesystem [ 668.420668][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 668.532090][T16874] XFS (loop3): Starting recovery (logdev: internal) [ 668.705343][T16874] XFS (loop3): Ending recovery (logdev: internal) [ 668.766942][T16729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.012073][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 669.031203][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.075453][T16729] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.152748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.194116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.217223][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.224607][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.296768][T16301] XFS (loop3): Unmounting Filesystem [ 669.467164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 669.478768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 669.494352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.503300][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.510504][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.552800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 670.556920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 670.639088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 670.706293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 670.735240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.767829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.807111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 670.851943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.922273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 670.937516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 670.947535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.052638][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3877'. [ 672.029537][T16724] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 672.081597][T16724] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 672.166790][T16923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3879'. [ 672.206319][T16923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3879'. [ 672.275794][T16923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3879'. [ 672.296923][T16923] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 672.387555][T16724] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 672.449647][T16929] device gretap0 entered promiscuous mode [ 672.491200][T16929] device vlan2 entered promiscuous mode [ 672.627606][T16724] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 673.611756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.627044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.667706][T16953] device syzkaller1 entered promiscuous mode [ 673.812814][T16729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.987180][T16724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.098580][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 674.144865][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.179749][T16724] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.296823][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.311230][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.341848][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.349401][ T4850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.445657][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.605872][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.615802][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.623287][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.899630][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 675.951575][T16983] loop6: detected capacity change from 0 to 512 [ 676.029071][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 676.114020][T16983] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 676.169852][T16983] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 676.214564][ T895] device hsr_slave_0 left promiscuous mode [ 676.229574][T16983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 676.264875][T16983] System zones: 1-12 [ 676.270212][ T895] device hsr_slave_1 left promiscuous mode [ 676.292753][T16983] EXT4-fs (loop6): orphan cleanup on readonly fs [ 676.335436][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3891'. [ 676.348861][T16983] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3889: invalid indirect mapped block 2 (level 2) [ 676.369150][ T895] bond7 (unregistering): (slave macvlan7): Releasing active interface [ 676.459247][ T895] bond7 (unregistering): Released all slaves [ 676.485163][T16983] EXT4-fs (loop6): Remounting filesystem read-only [ 676.491575][ T895] bond6 (unregistering): Released all slaves [ 676.505172][T16983] EXT4-fs (loop6): 1 truncate cleaned up [ 676.522701][T16983] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback. [ 676.550163][ T895] bond5 (unregistering): Released all slaves [ 676.597752][ T895] bond4 (unregistering): Released all slaves [ 677.206815][ T895] bond3 (unregistering): Released all slaves [ 677.268566][ T895] bond0 (unregistering): Released all slaves [ 677.509278][ T895] bond2 (unregistering): Released all slaves [ 677.577787][ T895] bond1 (unregistering): Released all slaves [ 677.965875][T17009] loop6: detected capacity change from 0 to 256 [ 678.851065][T17009] vfat filesystem being mounted at /10/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 679.081423][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 679.188836][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 679.241416][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 679.507766][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 679.530284][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 679.658568][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 679.763287][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 680.522237][T16724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.557378][T16724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.644069][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 680.663345][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 680.706619][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 680.716694][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 680.725868][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 680.745425][T16729] device veth0_vlan entered promiscuous mode [ 682.198775][T16729] device veth1_vlan entered promiscuous mode [ 682.296702][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 682.326032][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.381074][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 682.405597][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.425147][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.519733][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.539564][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.609968][T16729] device veth0_macvtap entered promiscuous mode [ 682.646153][T16729] device veth1_macvtap entered promiscuous mode [ 682.815688][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 682.866522][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 682.907177][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 682.925258][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 682.948935][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.035010][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.066502][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.099483][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.119702][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.166275][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.189770][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.249296][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.286319][T16729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.309216][T17064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.661757][T17064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.685320][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 683.707650][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 683.721531][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.791679][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.209610][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.706295][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.740007][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.758134][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.783179][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.824792][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.862940][T16729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.893537][T16724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.975937][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 685.017799][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 685.099642][T16729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.122499][T16729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.144463][T16729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.162197][T16729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.373833][T17086] team0 (unregistering): Port device team_slave_0 removed [ 685.418940][T17086] team0 (unregistering): Failed to send options change via netlink (err -105) [ 685.449884][T17086] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 685.487363][T17086] team0 (unregistering): Port device team_slave_1 removed [ 685.906604][ T4844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.917117][ T4844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.925142][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 686.097742][ T4850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.140883][ T4850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.193466][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 686.545589][T17111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3908'. [ 689.978300][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.015784][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.906267][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 691.122967][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.129746][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.159401][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.238663][T16724] device veth0_vlan entered promiscuous mode [ 691.497063][T16724] device veth1_vlan entered promiscuous mode [ 691.505510][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.542995][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 692.556030][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 692.977252][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 692.987826][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 693.000285][T16724] device veth0_macvtap entered promiscuous mode [ 693.078558][T16724] device veth1_macvtap entered promiscuous mode [ 693.333770][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.350999][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.370512][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.521166][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 693.531967][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.642201][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.028307][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.307433][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.079770][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.175252][T16724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.204363][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 695.251077][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 695.295615][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 695.393101][T17174] netlink: 'syz.4.3922': attribute type 10 has an invalid length. [ 695.530452][T17174] team0: Port device dummy0 added [ 695.566317][T17177] netlink: 'syz.4.3922': attribute type 10 has an invalid length. [ 695.607918][T17177] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 695.783043][T17177] team0: Failed to send options change via netlink (err -105) [ 695.807374][T17177] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 695.883667][T17177] team0: Port device dummy0 removed [ 696.004630][T17177] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 696.065090][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.140566][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.214040][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.317517][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.356264][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.379912][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.426716][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.503446][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.546569][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.586324][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.604043][T16730] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 696.636379][T16724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.661444][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 696.684231][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 696.695603][T17192] xt_hashlimit: size too large, truncated to 1048576 [ 696.717768][T17192] xt_hashlimit: invalid rate [ 696.732987][T16724] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.766283][T16724] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.816254][T16724] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.846054][T16724] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.897318][T17178] loop6: detected capacity change from 0 to 40427 [ 696.953344][T16730] usb 5-1: Using ep0 maxpacket: 32 [ 697.165220][T16730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.196878][T16730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 697.219323][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.250765][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.274413][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 697.360415][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.369575][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.393709][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 697.449426][T16730] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 698.223807][T16730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.358532][T16730] usb 5-1: Product: syz [ 698.363091][T16730] usb 5-1: Manufacturer: syz [ 698.396600][T16730] usb 5-1: SerialNumber: syz [ 698.509323][T16730] usb 5-1: config 0 descriptor?? [ 699.777696][T16730] usb 5-1: can't set config #0, error -71 [ 700.601540][T16730] usb 5-1: USB disconnect, device number 8 [ 700.828820][T17243] loop7: detected capacity change from 0 to 512 [ 701.825254][T17266] device bond_slave_0 entered promiscuous mode [ 701.832476][T17266] device bond_slave_1 entered promiscuous mode [ 701.900452][T17266] device vlan2 entered promiscuous mode [ 701.927628][T17266] device bond0 entered promiscuous mode [ 703.534179][T17284] netlink: 'syz.2.3941': attribute type 1 has an invalid length. [ 703.621240][T17284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 703.750513][T17287] bond1: (slave gretap1): making interface the new active one [ 703.810557][T17287] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 703.847150][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 706.194490][T17330] device syzkaller0 entered promiscuous mode [ 706.313916][T17243] EXT4-fs warning (device loop7): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop7. [ 709.496892][T17364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.625851][T17364] bond2: (slave sit1): refused to change device type [ 710.083054][T17381] loop3: detected capacity change from 0 to 2048 [ 711.849737][T17419] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 713.547698][ T26] audit: type=1800 audit(4147484261.189:1087): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3971" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 717.454175][T17482] loop6: detected capacity change from 0 to 2048 [ 717.767359][T17482] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 717.818220][T17482] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 717.850745][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.097286][T17520] fuse: Unknown parameter '4' [ 721.176600][T17520] sctp: [Deprecated]: syz.4.3991 (pid 17520) Use of int in max_burst socket option deprecated. [ 721.176600][T17520] Use struct sctp_assoc_value instead [ 721.291026][T17526] loop7: detected capacity change from 0 to 22 [ 721.331626][T17526] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 721.470653][T17526] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 721.497282][T17531] loop3: detected capacity change from 0 to 256 [ 722.604817][T17531] vfat filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 722.940586][T17558] dns_resolver: Unsupported server list version (6) [ 723.528932][T17546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 723.618574][T17552] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 724.049736][ T26] audit: type=1326 audit(4147484271.699:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ba7b2799 code=0x7ffc0000 [ 724.136369][ T26] audit: type=1326 audit(4147484271.729:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ba7b2799 code=0x7ffc0000 [ 724.161925][ T26] audit: type=1326 audit(4147484271.729:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ba7b2799 code=0x7ffc0000 [ 724.185741][ T26] audit: type=1326 audit(4147484271.729:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ba7b2799 code=0x7ffc0000 [ 724.218506][ T26] audit: type=1326 audit(4147484271.779:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ba7b2799 code=0x7ffc0000 [ 724.438565][ T26] audit: type=1326 audit(4147484271.779:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15ba7b2502 code=0x7ffc0000 [ 725.027103][ T26] audit: type=1326 audit(4147484271.779:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f15ba7b2597 code=0x7ffc0000 [ 725.075456][ T26] audit: type=1326 audit(4147484271.779:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f15ba76f491 code=0x7ffc0000 [ 725.198941][T17556] bond3: (slave veth3): Enslaving as an active interface with a down link [ 725.207890][ T26] audit: type=1326 audit(4147484271.889:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f15ba7b3589 code=0x7ffc0000 [ 725.245415][T17574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4000'. [ 725.295127][ T26] audit: type=1326 audit(4147484271.909:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.7.4001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f15ba76f4fb code=0x7ffc0000 [ 725.434336][T17581] bridge1: port 1(veth0_to_bond) entered blocking state [ 725.506751][T17581] bridge1: port 1(veth0_to_bond) entered disabled state [ 725.515458][T17581] device veth0_to_bond entered promiscuous mode [ 726.528903][T17597] loop2: detected capacity change from 0 to 22 [ 726.581401][T17597] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 726.761311][T17597] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 727.534196][T17603] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 727.881086][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4013'. [ 728.262102][T17623] dns_resolver: Unsupported server list version (6) [ 731.761018][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 731.761035][ T26] audit: type=1804 audit(4147484279.409:1165): pid=17646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4020" name="file0" dev="hugetlbfs" ino=75683 res=1 errno=0 [ 731.909634][ T26] audit: type=1804 audit(4147484279.469:1166): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4020" name="file0" dev="hugetlbfs" ino=75683 res=1 errno=0 [ 731.989729][T17650] bridge0: port 3(syz_tun) entered blocking state [ 732.012302][T17650] bridge0: port 3(syz_tun) entered disabled state [ 732.037907][T17650] device syz_tun entered promiscuous mode [ 732.076703][T17650] bridge0: port 3(syz_tun) entered blocking state [ 732.083210][T17650] bridge0: port 3(syz_tun) entered forwarding state [ 732.123075][T17653] device bridge0 entered promiscuous mode [ 733.813239][T17659] netlink: 165 bytes leftover after parsing attributes in process `syz.7.4022'. [ 736.950267][T17710] comedi comedi0: Minor 3 could not be opened [ 738.808587][T17721] hub 8-0:1.0: USB hub found [ 738.834463][T17721] hub 8-0:1.0: 1 port detected [ 739.235647][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 739.488600][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 739.900208][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 740.112403][T17730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 741.677808][ T895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.835395][T17734] lo speed is unknown, defaulting to 1000 [ 742.376486][ T4222] Bluetooth: hci2: command 0x0409 tx timeout [ 742.593832][T17734] chnl_net:caif_netlink_parms(): no params data found [ 742.988713][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.026793][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.064104][T17734] device bridge_slave_0 entered promiscuous mode [ 743.085359][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.123227][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.147611][T17734] device bridge_slave_1 entered promiscuous mode [ 743.220391][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.249451][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.371539][T17734] team0: Port device team_slave_0 added [ 743.416696][T17734] team0: Port device team_slave_1 added [ 743.495498][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.576832][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.638918][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.680424][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.687733][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.743463][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.886140][T17734] device hsr_slave_0 entered promiscuous mode [ 743.926859][T17734] device hsr_slave_1 entered promiscuous mode [ 743.956250][T17734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.963973][T17734] Cannot create hsr debugfs directory [ 744.557071][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 745.119241][T17798] xt_policy: neither incoming nor outgoing policy selected [ 745.379409][T17810] comedi comedi0: Minor 3 could not be opened [ 745.453637][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 745.483949][T17814] netlink: 'syz.7.4049': attribute type 1 has an invalid length. [ 745.826450][T17817] bond1: (slave veth3): Enslaving as an active interface with a down link [ 745.877215][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.893005][T17821] bond1: (slave dummy0): making interface the new active one [ 745.901838][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.938837][ T21] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 745.988418][T17821] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 745.992858][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.070324][ T21] usb 4-1: config 0 descriptor?? [ 746.087975][ T895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.220441][T17830] loop7: detected capacity change from 0 to 4096 [ 746.307074][T17830] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 746.482359][T17839] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4054'. [ 746.588063][T17839] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.596923][T17839] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.626418][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 746.666392][T17841] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4054'. [ 746.724104][T17841] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.731571][T17841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.741160][T17841] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.748516][T17841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.855484][ T895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.866562][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 746.872960][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 746.904205][T17841] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4054'. [ 746.927495][ T21] usb 4-1: USB disconnect, device number 2 [ 746.979807][T17841] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.988317][T17841] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.171173][ T895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.476913][T17828] loop2: detected capacity change from 0 to 256 [ 747.498144][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.516854][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.531552][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.547720][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.563288][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.590329][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.653596][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.772511][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.829472][ T895] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.904377][T17828] FAT-fs (loop2): Directory bread(block 64) failed [ 747.916508][T17828] FAT-fs (loop2): Directory bread(block 65) failed [ 747.923757][T17828] FAT-fs (loop2): Directory bread(block 66) failed [ 747.936886][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 747.976463][T17828] FAT-fs (loop2): Directory bread(block 67) failed [ 747.983609][T17828] FAT-fs (loop2): Directory bread(block 68) failed [ 747.991466][T16724] EXT4-fs warning (device loop7): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 748.027272][T17828] FAT-fs (loop2): Directory bread(block 69) failed [ 748.034697][T17828] FAT-fs (loop2): Directory bread(block 70) failed [ 748.116487][T17828] FAT-fs (loop2): Directory bread(block 71) failed [ 748.123840][T17828] FAT-fs (loop2): Directory bread(block 72) failed [ 748.187928][T17828] FAT-fs (loop2): Directory bread(block 73) failed [ 748.420806][T17875] loop3: detected capacity change from 0 to 16 [ 748.492226][T17875] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 748.769846][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 748.824109][T16724] bridge0: port 3(syz_tun) entered disabled state [ 748.840430][T16724] device syz_tun left promiscuous mode [ 748.846239][T16724] bridge0: port 3(syz_tun) entered disabled state [ 749.526834][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 749.552605][ T895] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.138967][T17905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4064'. [ 750.146797][ T4222] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 750.468109][ T895] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.626533][ T4222] usb 3-1: Using ep0 maxpacket: 8 [ 750.806804][ T4222] usb 3-1: unable to get BOS descriptor or descriptor too short [ 750.926866][ T4222] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 751.023611][ T4222] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 751.527708][T17919] loop4: detected capacity change from 0 to 4096 [ 751.658689][T17919] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 751.746594][ T4222] usb 3-1: string descriptor 0 read error: -22 [ 751.753054][ T4222] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 751.793197][ T4222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.847941][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.854931][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.519199][ T895] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.669140][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 753.747241][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 753.803188][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 753.842695][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 753.876731][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 753.915794][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 754.004064][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 754.053839][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 754.114443][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 754.182778][T16729] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 754.362544][ T21] usb 3-1: USB disconnect, device number 3 [ 754.400120][T17734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 754.474370][T17734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 754.555246][T17734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 754.607411][T17734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.662567][T17949] lo speed is unknown, defaulting to 1000 [ 754.938157][T15259] Bluetooth: hci7: command 0x0406 tx timeout [ 755.178329][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.303106][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 755.352551][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 755.373714][ T895] tipc: Left network mode [ 755.396416][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.409277][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 755.432432][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 755.450768][T16946] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.458726][T16946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.547865][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 755.576952][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 755.616065][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.641631][T16946] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.650590][T16946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.692046][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 755.723830][T17949] chnl_net:caif_netlink_parms(): no params data found [ 755.778128][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 755.807747][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 755.857574][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 755.878688][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 756.084349][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 756.199080][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 756.365273][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 756.409625][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 756.462755][T15259] Bluetooth: hci1: command 0x0409 tx timeout [ 756.719900][T17734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.825716][T17734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 756.871203][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 756.901025][T16946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 758.766312][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 759.082033][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.141904][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.185431][T17949] device bridge_slave_0 entered promiscuous mode [ 759.212204][T18005] loop3: detected capacity change from 0 to 512 [ 759.294286][T18005] FAT-fs (loop3): Unrecognized mount option "/dev/comedi5" or missing value [ 759.409028][T18013] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 759.409028][T18013] The task syz.3.4081 (18013) triggered the difference, watch for misbehavior. [ 759.536277][T17949] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.543489][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.579019][T17949] device bridge_slave_1 entered promiscuous mode [ 759.610896][ T5836] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 759.623383][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.632440][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.664043][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.727240][T17949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.763999][T17949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.857480][T17625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 759.880498][T17625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 759.945084][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 760.010079][T17949] team0: Port device team_slave_0 added [ 760.033916][T17734] device veth0_vlan entered promiscuous mode [ 760.077345][T16979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 760.097499][T16979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 760.157275][T16979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 760.185675][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.196998][T16979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 760.207443][T17949] team0: Port device team_slave_1 added [ 760.241781][ T5836] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 760.276691][T17949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.315771][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.456215][T17949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.505508][T17734] device veth1_vlan entered promiscuous mode [ 760.542870][ T5836] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 760.583026][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.610966][ T5836] usb 3-1: Product: syz [ 760.627834][ T5836] usb 3-1: Manufacturer: syz [ 760.656290][ T5836] usb 3-1: SerialNumber: syz [ 760.830979][T17949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.844613][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.913453][T16254] Bluetooth: hci1: command 0x040f tx timeout [ 761.025276][T17949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.098066][ T4222] usb 3-1: USB disconnect, device number 4 [ 761.148240][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 761.167556][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 761.282104][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 761.304608][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 761.365665][T17734] device veth0_macvtap entered promiscuous mode [ 761.454274][T18037] lo speed is unknown, defaulting to 1000 [ 761.485042][T17734] device veth1_macvtap entered promiscuous mode [ 761.512528][T17949] device hsr_slave_0 entered promiscuous mode [ 761.529881][T17949] device hsr_slave_1 entered promiscuous mode [ 761.547677][T17949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.559819][T17949] Cannot create hsr debugfs directory [ 761.719410][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.766445][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.836380][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.856286][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.883046][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.900131][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.944596][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.976207][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.010388][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.050049][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.078822][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.133879][T17625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 762.150360][T17625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 762.186273][T17625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 762.207291][T17625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 762.265328][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.310475][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.335087][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.372676][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.408452][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.439221][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.487845][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.507268][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.537789][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.568062][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.606306][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.654990][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.717757][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.753388][T17734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.816254][T17734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.859751][T17734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.876403][T17734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.924212][T16979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 762.933496][T16979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 762.964391][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 762.970882][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 764.608103][ T895] [ 764.610472][ T895] ============================================ [ 764.616734][ T895] WARNING: possible recursive locking detected [ 764.623564][ T895] syzkaller #0 Not tainted [ 764.628079][ T895] -------------------------------------------- [ 764.634409][ T895] kworker/u4:3/895 is trying to acquire lock: [ 764.640730][ T895] ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mc_drop_socket+0x7b/0x270 [ 764.650082][ T895] [ 764.650082][ T895] but task is already holding lock: [ 764.657745][ T895] ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd0/0x370 [ 764.667591][ T895] [ 764.667591][ T895] other info that might help us debug this: [ 764.676404][ T895] Possible unsafe locking scenario: [ 764.676404][ T895] [ 764.684631][ T895] CPU0 [ 764.688245][ T895] ---- [ 764.691575][ T895] lock(rtnl_mutex); [ 764.695567][ T895] lock(rtnl_mutex); [ 764.699740][ T895] [ 764.699740][ T895] *** DEADLOCK *** [ 764.699740][ T895] [ 764.708288][ T895] May be due to missing lock nesting notation [ 764.708288][ T895] [ 764.717151][ T895] 4 locks held by kworker/u4:3/895: [ 764.722646][ T895] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 764.733212][ T895] #1: ffffc900038cfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 764.743495][ T895] #2: ffffffff8d430c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 764.753570][ T895] #3: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd0/0x370 [ 764.763583][ T895] [ 764.763583][ T895] stack backtrace: [ 764.769715][ T895] CPU: 0 PID: 895 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 764.777290][ T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.787797][ T895] Workqueue: netns cleanup_net [ 764.792604][ T895] Call Trace: [ 764.795889][ T895] [ 764.799325][ T895] dump_stack_lvl+0x188/0x250 [ 764.804382][ T895] ? show_regs_print_info+0x20/0x20 [ 764.809931][ T895] ? load_image+0x400/0x400 [ 764.814550][ T895] __lock_acquire+0x1236/0x7d10 [ 764.819668][ T895] ? verify_lock_unused+0x140/0x140 [ 764.824903][ T895] ? mark_lock+0x94/0x320 [ 764.829461][ T895] ? __lock_acquire+0x13bc/0x7d10 [ 764.834695][ T895] ? verify_lock_unused+0x140/0x140 [ 764.839999][ T895] ? verify_lock_unused+0x140/0x140 [ 764.845326][ T895] lock_acquire+0x19e/0x400 [ 764.849942][ T895] ? ip_mc_drop_socket+0x7b/0x270 [ 764.855080][ T895] ? __might_sleep+0xf0/0xf0 [ 764.859779][ T895] ? read_lock_is_recursive+0x10/0x10 [ 764.865759][ T895] ? reacquire_held_locks+0x308/0x5a0 [ 764.871579][ T895] ? release_sock+0x2b/0x1b0 [ 764.876506][ T895] ? ip_mc_drop_socket+0x7b/0x270 [ 764.882075][ T895] __mutex_lock_common+0x1e3/0x2400 [ 764.887500][ T895] ? ip_mc_drop_socket+0x7b/0x270 [ 764.892638][ T895] ? mark_lock+0x94/0x320 [ 764.897105][ T895] ? lock_chain_count+0x20/0x20 [ 764.902175][ T895] ? mutex_lock_io_nested+0x60/0x60 [ 764.907973][ T895] ? __local_bh_enable_ip+0x136/0x1c0 [ 764.913629][ T895] ? lockdep_hardirqs_on+0x94/0x140 [ 764.919656][ T895] ? __local_bh_enable_ip+0x136/0x1c0 [ 764.925330][ T895] mutex_lock_nested+0x17/0x20 [ 764.930458][ T895] ip_mc_drop_socket+0x7b/0x270 [ 764.935471][ T895] inet_release+0x47/0x180 [ 764.941045][ T895] sock_release+0x7b/0x140 [ 764.946289][ T895] vxlan_sock_release+0x385/0x400 [ 764.952027][ T895] vxlan_stop+0xf62/0x1090 [ 764.957285][ T895] ? dev_deactivate_many+0xa61/0xc10 [ 764.963128][ T895] ? vxlan_open+0x6e0/0x6e0 [ 764.967753][ T895] ? dev_deactivate_many+0xbf1/0xc10 [ 764.973817][ T895] ? vxlan_open+0x6e0/0x6e0 [ 764.979504][ T895] __dev_close_many+0x1d3/0x2b0 [ 764.984749][ T895] ? __netdev_walk_all_lower_dev+0x550/0x550 [ 764.991206][ T895] ? dev_close_many+0x400/0x400 [ 764.998821][ T895] ? ib_device_get_by_netdev+0x456/0x4b0 [ 765.006399][ T895] dev_close_many+0x21f/0x400 [ 765.012579][ T895] ? __dev_open+0x430/0x430 [ 765.018035][ T895] ? raw_notifier_call_chain+0x143/0x160 [ 765.025152][ T895] unregister_netdevice_many+0x481/0x19f0 [ 765.033801][ T895] ? alloc_netdev_mqs+0xc40/0xc40 [ 765.039605][ T895] ? netdev_upper_dev_unlink+0x88/0xe0 [ 765.046260][ T895] ? netdev_upper_dev_unlink+0x96/0xe0 [ 765.054777][ T895] ? netdev_master_upper_dev_link+0x100/0x100 [ 765.062210][ T895] vxlan_netdevice_event+0x2cb/0x310 [ 765.068226][ T895] ? vxlan_fdb_offloaded_set+0x7d0/0x7d0 [ 765.075152][ T895] ? netconsole_netdev_event+0x2c6/0x370 [ 765.081004][ T895] ? mpls_dev_notify+0x56e/0x780 [ 765.086486][ T895] raw_notifier_call_chain+0xcb/0x160 [ 765.092793][ T895] unregister_netdevice_many+0x1049/0x19f0 [ 765.099426][ T895] ? alloc_netdev_mqs+0xc40/0xc40 [ 765.104589][ T895] ? unregister_netdevice_queue+0x1aa/0x370 [ 765.110957][ T895] ? list_netdevice+0x450/0x450 [ 765.116247][ T895] ip_tunnel_delete_nets+0x320/0x370 [ 765.122386][ T895] ? ip_tunnel_bind_dev+0x740/0x740 [ 765.128053][ T895] ? kfree+0xef/0x2a0 [ 765.132382][ T895] ? ipgre_tap_init_net+0x30/0x30 [ 765.137557][ T895] cleanup_net+0x791/0xba0 [ 765.142074][ T895] ? ops_free_list+0x330/0x330 [ 765.146865][ T895] ? _raw_spin_unlock_irq+0x1f/0x40 [ 765.153641][ T895] process_one_work+0x85f/0x1010 [ 765.159158][ T895] ? worker_detach_from_pool+0x240/0x240 [ 765.165548][ T895] ? lockdep_hardirqs_off+0x70/0x100 [ 765.172412][ T895] ? _raw_spin_lock_irq+0xb7/0xf0 [ 765.177847][ T895] ? _raw_spin_lock_irqsave+0x100/0x100 [ 765.185179][ T895] ? wq_worker_running+0x97/0x170 [ 765.191479][ T895] worker_thread+0xaa6/0x1290 [ 765.198444][ T895] kthread+0x436/0x520 [ 765.204381][ T895] ? rcu_lock_release+0x20/0x20 [ 765.210294][ T895] ? kthread_blkcg+0xd0/0xd0 [ 765.218521][ T895] ret_from_fork+0x1f/0x30 [ 765.223927][ T895] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 765.271976][T16254] Bluetooth: hci0: command 0x041b tx timeout [ 767.343092][T16254] Bluetooth: hci0: command 0x040f tx timeout [ 769.430629][ T5836] Bluetooth: hci0: command 0x0419 tx timeout