last executing test programs: 16m2.551709703s ago: executing program 32 (id=1320): socket(0x2, 0x3, 0xff) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$phonet(0x23, 0x2, 0x1) bind(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @call={0x85, 0x0, 0x0, 0xc8}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x123}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x48}}, 0x0) recvfrom$unix(r3, &(0x7f0000000480)=""/172, 0xac, 0x10000, 0x0, 0x0) 15m46.795581991s ago: executing program 3 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x10000}}, 0xa) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) 15m45.139239753s ago: executing program 3 (id=1370): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 15m34.723870946s ago: executing program 3 (id=1383): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x402) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0xfffffffc, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 15m33.108907197s ago: executing program 3 (id=1386): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0), 0x0, 0xfffffffffffffffe) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d}, 0xc) 15m27.84806635s ago: executing program 3 (id=1390): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 15m12.524399527s ago: executing program 33 (id=1390): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 10m52.772810003s ago: executing program 5 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000002980), 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 10m50.707383185s ago: executing program 5 (id=1756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x10000}}, 0xa) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) 10m47.956329923s ago: executing program 5 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x9}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, 0x0) 10m47.847487466s ago: executing program 4 (id=1761): mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 10m46.966948267s ago: executing program 4 (id=1764): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 10m41.739940527s ago: executing program 4 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5}) 10m37.518480502s ago: executing program 5 (id=1775): socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4000010) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000000000019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) unshare(0x2c020400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 10m28.163455315s ago: executing program 5 (id=1782): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fallocate(r0, 0x28, 0xfff, 0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') timer_settime(0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/cpu_dma_latency\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='\x00w5', 0x3) 10m27.006131773s ago: executing program 5 (id=1784): socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000540)={[&(0x7f0000000280)='\x00', &(0x7f00000004c0)='\x1f\xe9\r\xaf\xeds\x12', &(0x7f0000000300)='*.#\x00', &(0x7f0000000500)='simple\x00']}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0xdb57}, {0x10, 0x0, 0x8}]}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) syz_emit_ethernet(0x236, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x400007, 0x1, 0x6, 0x800100000000}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 10m26.036596367s ago: executing program 34 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5}) 10m11.41405232s ago: executing program 35 (id=1784): socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000540)={[&(0x7f0000000280)='\x00', &(0x7f00000004c0)='\x1f\xe9\r\xaf\xeds\x12', &(0x7f0000000300)='*.#\x00', &(0x7f0000000500)='simple\x00']}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0xdb57}, {0x10, 0x0, 0x8}]}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) syz_emit_ethernet(0x236, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x400007, 0x1, 0x6, 0x800100000000}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 7m27.87833044s ago: executing program 2 (id=2016): socket(0x10, 0x3, 0x0) brk(0x200000ffc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x26) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000060}, 0x4008001) 7m26.801762938s ago: executing program 2 (id=2017): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 7m26.007323237s ago: executing program 2 (id=2020): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0xc0402, 0x80) openat(r0, 0x0, 0x0, 0xe0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) timer_gettime(0x0, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000240)) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x162, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000740)={{0xa, 0x0, 0x9, 0xc46, 'syz0\x00', 0x4001}, 0x6, 0x200, 0x4, 0x0, 0x0, 0xc, 'syz0\x00', 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000000140)) 7m21.745781563s ago: executing program 2 (id=2022): getrandom(&(0x7f0000000380)=""/12, 0xc, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2b4540, 0x56}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6b4e1c1017bef5ac, 0x0, &(0x7f0000000500)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={&(0x7f00000003c0)="120eb51c09523d85223b584dd4b8b51f5fae9c4f92c3ebf188846516fd2d224eb16784acefd27bd99a0b73b5190b1602b7b7e418fcc007f1df8de7633d8c336ac3a4928b4dd76ff6bd3c15ba3f462dc6016a467d0d5ffe3d3fb39728e921b43f1726f1e43c9cace17cb79359581dce9dcbf51a10f9", 0x75}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7m20.115672334s ago: executing program 2 (id=2023): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000040000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000000002c5fb51e2c160123ffffff00000000"]}, 0x105) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x109000, 0x0) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x3f5, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x6f993c20cd5c50b2, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) dup(r6) 7m14.179687181s ago: executing program 2 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6}) 6m58.534278519s ago: executing program 36 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6}) 6m36.884099377s ago: executing program 6 (id=2090): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x105) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x109000, 0x0) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x3f5, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x6f993c20cd5c50b2, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) dup(r6) 6m35.361196584s ago: executing program 6 (id=2091): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000280)="8824", 0x2}], 0x1}}], 0x2, 0x24004c41) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = accept4(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000340)={0xe939, r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x406, 0x40b, 0x400}) 6m28.902156235s ago: executing program 6 (id=2102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833e", 0x1c}], 0x1}}], 0x1, 0x4000000) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x4e8, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x6c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 6m24.443542416s ago: executing program 6 (id=2104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x60001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 6m18.703065389s ago: executing program 6 (id=2113): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x105) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x109000, 0x0) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x3f5, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x6f993c20cd5c50b2, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) dup(r6) 6m15.655114284s ago: executing program 6 (id=2118): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) futex(&(0x7f0000000000), 0x5, 0x2, 0x0, 0x0, 0xc6fffffd) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xb0}, [@ldst={0x5, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) 6m0.324527645s ago: executing program 37 (id=2118): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) futex(&(0x7f0000000000), 0x5, 0x2, 0x0, 0x0, 0xc6fffffd) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xb0}, [@ldst={0x5, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) 4m23.703942604s ago: executing program 7 (id=2253): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833e", 0x1c}], 0x1}}], 0x1, 0x4000000) sendmsg$nl_route_sched_retired(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x4e8, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x6c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 4m20.083572714s ago: executing program 7 (id=2258): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040050) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0xfffffc01, 0x7, 0x4, 0x2000, 0x6, {0x77359400}, {0x3, 0x8, 0x81, 0x4, 0x6, 0x9, "d647e190"}, 0x0, 0x1, {0x0}, 0x8}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x48}}, 0x2400c000) 4m13.837815629s ago: executing program 7 (id=2263): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c89, 0x80, 0x3, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f74, 0x4000, 0x1, 0x337, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd59c, 0x4, 0x1, 0x33d}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000440)=0x200000000) 4m13.288788652s ago: executing program 7 (id=2264): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=0x0, @ANYRES32=r2, @ANYBLOB="7c51e31dfa558e19c9b1a8170c08509183979564d5f72b90feb7a64f02f35f570c92bd2b567897cc335ab9", @ANYRESDEC=r5], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x24000084) r6 = socket$inet6(0xa, 0x1, 0x7f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000002c0)={@empty, 0x10803, 0x0, 0x3, 0x9}, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000300)={0xff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008090) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0xffff) write$UHID_INPUT(r0, 0x0, 0x0) 4m10.457971663s ago: executing program 7 (id=2268): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000040000000000000000000000000000000000000000ffffffff00"/71]}, 0xbf) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x109000, 0x0) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x3f5, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x6f993c20cd5c50b2, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) dup(r6) 4m7.37160899s ago: executing program 7 (id=2270): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0xffffff1f, 0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x3, r8, 0x4}, 0x38) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd30, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 3m52.091877449s ago: executing program 38 (id=2270): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0xffffff1f, 0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x3, r8, 0x4}, 0x38) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd30, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 2m29.619997026s ago: executing program 8 (id=2370): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0xc0402, 0x80) openat(r0, 0x0, 0x0, 0xe0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) timer_gettime(0x0, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520", 0xa6, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000740)={{0xa, 0x0, 0x9, 0xc46, 'syz0\x00', 0x4001}, 0x6, 0x200, 0x4, 0x0, 0x0, 0xc, 'syz0\x00', 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000000140)) 2m23.879387409s ago: executing program 8 (id=2375): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r5}}) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0x10d, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r0}}], 0x4, &(0x7f000001a400)={0x2e, 0x20, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x44}, 0x0, r5, '\x00', {0x4, 0x32d, 0x0, &(0x7f0000019400)=@buf_max_buf="b0fb58040bb07b7d1ee31befb1a9c82b8b94b13ccad093b25e4e67271f1ce61c7597474efad88c32752351722ccd68ab62cb6ccf4320f55392cdacce5b34e13739a6bc0459a4f5e2a125ff4a0eacb23b814cc828549ece314357f220a2621d1b0e5b7535decd83a79e837001f52e0774c18ae82664f3429754c1cfb0e9c8967ccf0f7ddc8e8c9a2905e2cc32f8a2709552fee4598461d5d756c0abb562e76b86011c1d376b26c29f9ff9afd1cb42145a436f2e9f714f1abb823fe2bbc983d48a16f46dd9ee3c3b06f043c4c374e843650c2b3921625e17de76d87460dbc1f002b2f9eafb84197ca694a87dfa8122dcef40cd6020ccb781db5730f8a11ac91d1d3341b75cbffb661550bf510f62a10975fc6d5ff708f1f2194a859db765d9560e85bdf12a324f27d7db0c01cb7d7a3363c7166515b0424fa8dba0aaa8653200fc33a9ad7a6b9dc0a200a98a2fbd84ad8888be5537fa414471e7e0b4e000f1ac3ba6a1b13b7f57413347de3ddc0595b9d2ddde0b4b5613005d1e8f8949e3b0fdf9343b3c5641c6ab16d5df9b8db9320446e33aa62fe072a0d6f3d22457a5ee3cea0f7ef65330d02eb093b157a5b9f22ecacb178dc1fb510caefa0987070b8e9a5488f815bdeb8cfbc9a366f2dbfbd1260b842455eae1e3ac4e242aab62c245d19b369b03b5ca2e415d4971da353c747cc1430d165ffcba118c14944f991aa16ce219b4fbc6a5d960713424a4bcf90d6baf96e4685d8de3560c1b60141ff32160460cac60f009c8c3b06b6f3ba6349cd39dc12e5223b684d0a6dad20619a7a1d5c73558f90a222d9458b07bed1f9f6df9a35965c7b44c0c05680f88d06af60e195e83e0c360e776bf635403d0658ac81d38d057de7c0b1309a082af055df9ebb22e69242d0624e34575816f02b5174b5c60c4a10a8076371a3de382aef6c19b693dec9f3f00d4d65441fcf31d33035829bd37d7a64bf2fe02710786d1fa07d60d3c25414c6c8e7ff9ab326b0a7c3613025cde711f79b02e234f8b7217dca4924df51b0201e4777c0cb130f15ca30432da24991af58817a005971ef4263d1ca8fb7edd61448185bf59b086c4651bdb2ffbaf5147546d15bf94e3b016e06d3fce9781a303bd579ac8e9464fdf23890736866d7246cdc34f21a73a88dfd01768249f8596ab29d73c322a654f58cd883b839016949579c6c2a409eb89a81c07e9bc8b2de510c186afb32155286197330b008316cbe3d8cb52d98f09e8f2bb353fe0d6a2f5c28110cc33eae5ad837b82d82d4e7a45cf3ade48738c20162b1867e818478f09721b751e37da1be76eb16c7b6f23f2fc42d73a4219483c22b0d31d24b094cf5ee81325a3343249504563d690c0a9ea1a318ca27f8edc183abcb4ed2d340c37971bc760405c45f82f2600d00fa8d83130c232e1561752008354480291401de9a2906e255846519948769ae02f4a72c7956b2240d3926d54b90dcc71a9768384a8660440f911893849a3f2db3e65da1ca6f9ee9f3a46160e71fa41e6ced8d2bc0875fb98f1907ff1ab63140c8ce4e6e393ad0b26914ebf3ff99ef1e829a865a9cb905c1e9f22153d102d641615546c21114d6d4f6a05bf3cb63d808b546c4790c22bd4e294168afa792498efd2137e97d048e538959cd9c5b8b39d2223adf484d33fda5c0bdccc3c9b034bb7d5e2bca0f4d026688223a0e9a3b8d8a87a95cda7d2bfa3beb0017c9c3ff3165de642e864273d651e39add4b4f955a25cc242ef130f4837b186c5045e883c72cc388994d1d8a29b3e975a9a297add1dc26b78e6c4d16fc206b8aa594ef3a0884c5abbfd54c148dc60245ab8591f1970a2b73d879808e1d7b1bfcd3da0c0c48a0284acd262f5c7e0b56e1c6014ab6180966d8c5af61ea7dd651b46f747ffcd9e4619a9fd6bd7fdfe1339f7279de6d1a031b58763c344d82f91e5ebfe45045fbacc172457b7f01ffd71de3405c653f09aa3e4add50f24cfa40817544c0e1bdac688c1dbd9b9d690ee23033b5013d94a3c001371991543fa1f226ac001291e853bd8a6b3c3891a4c059c0014c855e4b80a3474600fa1b0b657d61ca379c84b3bece4a8feab998baa8bf5983f0b658efa28553dbce4dd26a94d31522492823874d87a8911bd35e349267f2412e51a89a0a45ae480199d43f417b976717581972c4998318f6ae207a8aa051f00e67cfec6beadfdee8b5c3dd46e7f9556a4089e82f000636027a1ca958357409be5785c75b2b83790e36a7dbd272011b4158f3aab318f3f46bd8bb85089347d6e477b9c48d0308637939ffc462356598a90701380b2d07c274ff82f671803235340b853d0d063429ba8ff1df560f682676d4f6a46ccd909bfc97b09136edf4e2e62bd095dc095619498e22fd228e0b3832dfc76ee57c8e5fa542cc24e20b17029fffbc70f6d65800b5d8f19776ba5be1651d98349ce1f88e08220ef1e05c1dcdbe02f05ccc64151ef8f6dc55f8d1f0c223a858926eafb68bc54b5260ce1e3cd2be94a35d597fc287d969074bda6325cf14e811dd4587a3ca0200e6d6a5d99dd165b193a70d4c42dff373da2aa665a079b9c266f1423a4efe652b399a2f3a72d690b9e5e41deb343537437ea01460a1c44fa6db4ce41ea41cb62bb0c18fbbf7babdd906d586e9d08250a8efa7b5641ded6bc3a1c24952aeb848b55e7d9a748b112e3af8a8423690d03c057d90618d7d061f3007cded3550f15fd9ec7feaacf13e37b18b0eadd3a6664b5e723e7788a264675628ba7a3da3f5e0070e02de662d7db2113ce171f0c4f48bd9904f2e0069c6f6f045a82dc8589d8c34dae16e849dac4dda5c91decb2cd5ef0a7ef93261d1628eafc09cc54881d2aa966feb482905b5d3514cfc627fd6c02d197b0452f4ba3cf5507d071ae3db0ec06b1dd7a5aa646254633392808cddb4b41d1c4c441793d56dea75426547dc2d999c2e82da0ff9a12002b21986a6161d4c4795ce7d445cbbfeb431337bc67c40188578011816b1c015e830e5929256b5b68a5b023d27131f12d75bcb6f09f2d73081137a4807641c453bb01dbd1921977e0c92a55583c9f561a82317a8586c935a58aed5d5d5873b6d94f752e960ae6f37f7a5bee1ebc832873b6c4e1791c8023ef6d38ac1bf6f96dc111ab5bd72a11d2fdfcb6048440ec674b349480e79b349f40ed001cf50459dd27c2d42be51f2031d8e1420e0c6bb0471347eb96f7f67296daf9ba5e73744b78e5f359ca62b51cb50dd838279436148859ac02268e0cf8c12e94e6d1f69f75a2ca1d173ed62f490d7b1f28491f19bd98feca7c084891ad5d6c31efca861d541d85e4731a68a56c51465e21754dac22d4988a520b93d31eb58aea863dcaa171b50a2119aa33e4e45b92fd152643dd5c6a837c5866d465c58c69d6100dbdaf888d0a68e5917b1e9f64b0aabc9eff8711deebc2d0257fc0796c2a7a6c1dfd86a5aaf478c40f2ec9d93d6c8f8b34677a9c6d238e1eb619d7d648af8b9357ae996861b8e10e327f81428ab2eae88feef9cdb6a8de354086c3ae9d27e5d65d4c3652d017d5b9b7e9f49ff4f61af319f3c6654cdda4a1a880f5341ed09fdfeddd204f2c60c332c8d05d5a277efde033e999bac0db719afda5a1141c25ee061f896c11359c28c32233de54b65b3286c6d7930fe5a6259ff3c35f070c5b2a361092fadd9a3dc8e769bb15ef9e045cc416e79c453f1a8fb0c7a385d015b74513a406a90a58e96750790900d5ef4c3a2fb5896d71c6bddb92c7e8e4d1eb0c6f776fcd8903a39ebda56133afb1075d2d9b5187fb0567345f8f3a0e3df7392698d75c9d999a120a0c5a3b87e1953de587614063c94691ee08b08077f2ca6195eca00d9f847cfbf131e847dc84323eed5faf66c8df8a95d67598ffd2acf44a9cea8f690530be2071a9b906d39f3a8f66513a2f99ec8c6d5348503e3db329447ee4785171677c3f9c53d237b366e8b4992b8efea96148c2e324a5abe550814995b6aafc29e2067cd186cc7227b6731119dcf38b5f75d35c6a30a8aabe677d95a35b4f7cca317037a77b518413e491e0ee9e39437c4342f1e2295edf5f2dacc997bfba388a32152b32745a127dbf3adeeef06ca7da1a326404ec8ede8601c20483320b2655ff103be3d41a69f631f24d0b34b897898b22026d1ac5edf2e10d1d384df8216edc198b4ba879f7df7b8f3e98480d2509bf6e329d5d18ed0fa5961f276bc42ce2d57e50b207b3e3655c4d5c5faa13e4ebfcefff774998bcada1119c14fe6d6d15516c95febc06131d7111a5f458888ef1170ea9e242cf39c74c0b6509d36f38b53f9681e617587e0816f095d40a18e0cc0ed4a0cebb0aec0f89ae97402c823c9711c201a4f156242d28db34337e4598f5f698af5a06c65335d6549af6ef3a3fc1b246ea3223e7929f5d5b74b097754343307d4edb4924d27a4802627fcd8b1763cb70a2b415f22f3cb9542ac678f2a4d145f2f09ccd71ffb391dc60ccf40ff514eb4fce8cc70ec1bddab71d370af9e2ba64e4b76182c8dec9fe3e4d7741454b91672660ca55838003e27f1279fd63dfbeb41b331bfc6f1d7cb0914783abec14ce1318579aedd721eee595e25957214e99539c3b2c45ce9bc836475accd61ae16dee9f8dbc1dabcc6c5ea96ecab050f4681bb8a1f48df6155015ab373dccb525288b2a19b63d7e561a5c8af1ec6b13d301fbd1848a9697d071d27885827517b764480ac5d2b603e67142c89cf7ef924b1b22a799763cf128d12172781ec2e74ac9b4160a59140d9af27065baec311ed42b4e1f993382622445c9a2da5828e8e6aac0701aa1ae80d73963fc9b8d0dcb3478ab8e53c65ac0d87fbe03eae071741b87d8c2c376684099b527a3f63dbf7f6f6be848b9fe3572cd293a705a798687c4132b9b8c33b207dbc25bde2cebb084c18ed35808892934e2adafab17d13435ee12d3df4ea8750fedddb78e7f37ef53c62e00771c4329cc5d22b0e91815657e764eaa8f801046afc5cdba83528e856da36c90f00da7820a9eae7a7be1bcc2d1bfd081a703496e84d690e05343804bf1bee596bec776ce2b8dfcb07bb15db097f6a87f4c848c3d7afd2cbf2fd730965903b45347820f6b73b08882dedd9b655da89c88b7a5557d4f0f9ae2c767d1a651d862d85ef94d284dd4e6fed56f8e5b69d414c2cf05b08c016a3b355e76e57109b5f57e603ed6ab9a8f61e8fb3cc8104963463bac32451d7fee005bf23668250a6a121f871dca3dbc756f09c29ae677ff4121b1d27adde6c7122a85ae20f1eec9caf4917977d557848223c5bd5efa77c8e78dfe760d1d7c58719c02d9728fc3d8073404c47b1c1974c37fba185b7447e567b27ecf04e452ea8a38dacd20230f4838da3261f003d92578c30c08fb94d4d0ff0a92f0bb622b020e802d8cf4df20a28f73ecb5c200b98b01862127d7ef6c5fc0d2fdee58b54df019729193d5097eff314945bb78ca5bd942337419fcae4a77c7f153e1049fba37e00f31f1a88deb59c5c35529ac334c92a024451a043386cc79648cf11436cb7f683070f0c1dba12e6acfe5475a9c485c733db4bbe1ebfd296dfdff4433f5d9920cd12984f22c5b5b6586edd4236e3646501073d310f94f70d31e292ae031d7d7aee5d5c4aecb054b2b8f414b06fd3f0b0cdbcd5f0749dad5748b65ac1b25562fbde520614b6cc6ab40931c513d67de54d72f9fecbae304df5fdff6c83ae45cb32aea22b0551bf4b7504ffa38ce39571f14c4a83546a7aad35b6376bf94a20bb4e7d3a238f4ac18"}}, &(0x7f000001a480)) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r8, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m20.876080254s ago: executing program 8 (id=2376): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000380)=""/12, 0xc, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x2b4540, 0x56}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6b4e1c1017bef5ac, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 2m19.041163379s ago: executing program 8 (id=2377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m15.271397093s ago: executing program 8 (id=2382): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000040000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000"]}, 0xda) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x109000, 0x0) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x3f5, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x6f993c20cd5c50b2, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) dup(r6) 2m11.951289895s ago: executing program 8 (id=2384): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) 1m56.666894315s ago: executing program 39 (id=2384): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) 14.029111942s ago: executing program 1 (id=2491): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x709e01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) preadv(r1, &(0x7f0000000900), 0x0, 0x8000, 0x3ff) creat(0x0, 0x1c2) 13.059550316s ago: executing program 1 (id=2493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1000000, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000200)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[], 0x10) 11.300452639s ago: executing program 1 (id=2494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x2400000000000000, 0xeeee0000, 0x4, 0x0, 0x11}) 10.09323864s ago: executing program 0 (id=2495): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r1 = openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000280)={0x1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000340)=0x200000, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r4, 0x6b, 0xffff, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 7.079779515s ago: executing program 0 (id=2496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) semget$private(0x0, 0x4000000009, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.933524608s ago: executing program 4 (id=2395): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0xc0402, 0x80) openat(r0, 0x0, 0x0, 0xe0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) timer_gettime(0x0, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669", 0xac, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000740)={{0xa, 0x0, 0x9, 0xc46, 'syz0\x00', 0x4001}, 0x6, 0x200, 0x4, 0x0, 0x0, 0xc, 'syz0\x00', 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000000140)) 6.84976474s ago: executing program 0 (id=2497): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000600)}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000280)="8824", 0x2}], 0x1}}], 0x2, 0x24004c41) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = accept4(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000340)={0xe939, r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x406, 0x40b, 0x400}) 5.323370128s ago: executing program 0 (id=2498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) sendmmsg$inet6(r0, &(0x7f0000007f00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="7b1b99983d", 0x5}], 0x1}}], 0x1, 0x804) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0}, &(0x7f0000000380)=0x40) 5.321803518s ago: executing program 4 (id=2499): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) 5.129623443s ago: executing program 1 (id=2500): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x709e01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) preadv(r1, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2, 0x8000, 0x3ff) creat(0x0, 0x1c2) 5.063508295s ago: executing program 0 (id=2501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], 0x0}, 0x94) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1000000, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000200)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[], 0x10) 3.60910147s ago: executing program 0 (id=2502): mkdirat(0xffffffffffffff9c, 0x0, 0x158) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x4, 0x4, 0x80, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x5d, 0x8, 'syz1\x00', 0x0, 0xfdc0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) sendto$inet6(r0, &(0x7f0000000400), 0x0, 0x24000005, &(0x7f00000001c0)={0xa, 0x42, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mount(0x0, 0x0, 0x0, 0x10, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1a1c08, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0x7}, {0x6, 0x0, 0x0, 0x3bd7}]}) 2.640234255s ago: executing program 1 (id=2503): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r1 = openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000280)={0x1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000340)=0x200000, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r4, 0x6b, 0xffff, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 121.026507ms ago: executing program 1 (id=2504): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x6, 0xe9, 0x8, 0x402, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x18900, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000600)=""/189, 0xbd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x181080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 65.544129ms ago: executing program 3 (id=2283): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040050) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0xfffffc01, 0x7, 0x4, 0x2000, 0x6, {0x77359400}, {0x3, 0x8, 0x81, 0x4, 0x6, 0x9, "d647e190"}, 0x0, 0x1, {0x0}, 0x8}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x48}}, 0x2400c000) 0s ago: executing program 4 (id=2505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) semget$private(0x0, 0x4000000009, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ][T13104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.880279][T13104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.890818][T13104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.912858][T13104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.930492][T13743] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1248.970549][T12161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1249.029658][T12161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1249.066246][T13104] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.201660][T13104] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.282656][T13104] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.372029][T13104] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.215517][ T9214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1251.229009][ T9214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1251.241065][ T9214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1251.256980][ T9214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1251.275881][ T9214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1251.286288][ T9214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1254.032569][ T9214] Bluetooth: hci4: command 0x0409 tx timeout [ 1254.224396][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1254.267427][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1254.332415][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1255.037333][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1256.051508][ T9214] Bluetooth: hci4: command 0x041b tx timeout [ 1256.195167][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1256.406637][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1256.591871][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1257.263520][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1257.318110][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1257.331264][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1257.349300][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1257.374911][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1257.387907][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1257.552989][T13766] lo speed is unknown, defaulting to 1000 [ 1257.633792][T13789] netlink: 'syz.7.2151': attribute type 1 has an invalid length. [ 1257.768681][T13789] device bond1 entered promiscuous mode [ 1257.782183][T13789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1258.127670][T13799] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1258.141660][ T9214] Bluetooth: hci4: command 0x040f tx timeout [ 1258.176444][ T8837] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.013308][ T8837] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.050609][T13792] lo speed is unknown, defaulting to 1000 [ 1259.383275][T13809] ubi0: attaching mtd0 [ 1259.388739][T13809] ubi0: scanning is finished [ 1259.396119][T13809] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1259.418297][ T8837] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.492650][ T9214] Bluetooth: hci5: command 0x0409 tx timeout [ 1260.863036][ T9214] Bluetooth: hci4: command 0x0419 tx timeout [ 1261.835726][ T9214] Bluetooth: hci5: command 0x041b tx timeout [ 1261.876315][T13809] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1262.064419][ T8837] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.977752][T13766] chnl_net:caif_netlink_parms(): no params data found [ 1263.580217][ T8837] tipc: Left network mode [ 1263.891757][ T9214] Bluetooth: hci5: command 0x040f tx timeout [ 1263.935407][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1263.949015][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1263.957898][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1264.000398][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1264.009801][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1264.019108][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1264.027639][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1266.622810][ T9214] Bluetooth: hci5: command 0x0419 tx timeout [ 1266.631113][ T26] audit: type=1326 audit(1787994276.840:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.8.2159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d78b9e159 code=0x0 [ 1267.955660][T13792] chnl_net:caif_netlink_parms(): no params data found [ 1268.456575][T13766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.045840][T13766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.058332][T13766] device bridge_slave_0 entered promiscuous mode [ 1269.155392][T13862] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1270.757498][T13766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.771648][T13766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.863055][T13766] device bridge_slave_1 entered promiscuous mode [ 1271.793063][T13766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.986305][T13766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.013482][T13882] ubi0: attaching mtd0 [ 1272.013668][T13792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.153297][T13792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.190595][T13882] ubi0: scanning is finished [ 1272.217844][T13792] device bridge_slave_0 entered promiscuous mode [ 1272.221711][T13882] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1272.300083][T13792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.313313][T13792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.345917][T13792] device bridge_slave_1 entered promiscuous mode [ 1272.487238][T13766] team0: Port device team_slave_0 added [ 1272.532258][T13882] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1272.694434][T13766] team0: Port device team_slave_1 added [ 1272.726072][T13792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.592715][T13792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.802774][T13766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.839455][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.947719][T13766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.926600][ T26] audit: type=1326 audit(1787994286.700:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13898 comm="syz.7.2169" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a439e159 code=0x0 [ 1277.772695][T13766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.779896][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.830313][ T26] audit: type=1800 audit(1787994288.720:774): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2173" name="sda1" dev="sda1" ino=2048 res=0 errno=0 [ 1279.265516][T13766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.298575][T13792] team0: Port device team_slave_0 added [ 1279.343294][T13792] team0: Port device team_slave_1 added [ 1279.442688][ T8837] device hsr_slave_0 left promiscuous mode [ 1279.469323][ T8837] device hsr_slave_1 left promiscuous mode [ 1279.551600][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.711521][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.772303][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.780317][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.880283][ T8837] device bridge_slave_1 left promiscuous mode [ 1279.911644][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.952730][ T8837] device bridge_slave_0 left promiscuous mode [ 1279.960272][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.222721][ T8837] device veth1_macvtap left promiscuous mode [ 1280.228843][ T8837] device veth0_macvtap left promiscuous mode [ 1280.268987][T13934] ubi0: attaching mtd0 [ 1280.416755][T13934] ubi0: scanning is finished [ 1280.436415][T13934] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1280.557099][T13934] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1282.548502][ T8837] bond2 (unregistering): Released all slaves [ 1283.216708][ T8837] bond1 (unregistering): Released all slaves [ 1285.483316][ T26] audit: type=1326 audit(1787994296.380:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13951 comm="syz.7.2180" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a439e159 code=0x0 [ 1286.177773][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1286.264358][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1286.325928][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.360719][ T22] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1286.410483][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.583488][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1286.598009][ T22] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1286.612680][ T22] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1286.631437][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.678941][ T22] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 1286.692826][ T22] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 1287.334987][ T8837] bond0 (unregistering): Released all slaves [ 1288.247378][ T127] lo speed is unknown, defaulting to 1000 [ 1288.297247][T13958] device batadv_slave_1 entered promiscuous mode [ 1288.345279][ T127] usb 8-1: USB disconnect, device number 7 [ 1288.368957][ T127] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1288.379527][ T127] spcp8x5 8-1:1.0: device disconnected [ 1288.388579][T13792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.427982][ T26] audit: type=1800 audit(1787994299.320:776): pid=13975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2184" name="sda1" dev="sda1" ino=2048 res=0 errno=0 [ 1288.477297][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.758094][T13792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.854446][T13957] device batadv_slave_1 left promiscuous mode [ 1289.049400][T13792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.075635][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.576619][T13792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.309749][T13766] device hsr_slave_0 entered promiscuous mode [ 1290.503686][T13766] device hsr_slave_1 entered promiscuous mode [ 1290.531872][T13766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.571601][T13766] Cannot create hsr debugfs directory [ 1291.792021][ T26] audit: type=1326 audit(1787994302.680:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.8.2190" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d78b9e159 code=0x0 [ 1292.400181][T13792] device hsr_slave_0 entered promiscuous mode [ 1292.435202][T13792] device hsr_slave_1 entered promiscuous mode [ 1292.498427][T13792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1292.520966][T13792] Cannot create hsr debugfs directory [ 1293.306266][T14021] ubi0: attaching mtd0 [ 1293.379662][T14021] ubi0: scanning is finished [ 1293.386806][T14021] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1293.546683][T14021] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1295.902301][ T8837] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.029995][T13766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1296.144870][ T8837] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.215188][T13766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1296.262502][T13766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1296.359547][ T8837] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.385902][T13766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1296.752477][ T8837] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.040896][T13766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.166725][ T26] audit: type=1326 audit(1787994312.060:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.7.2200" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a439e159 code=0x0 [ 1301.214603][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.232270][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.397476][T13766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.797787][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1301.817150][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1301.976604][T14062] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1302.169604][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1302.253869][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1302.378732][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.385982][T13298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.591077][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1303.002682][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1303.015305][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1303.047626][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.055937][ T8847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.192327][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1303.245927][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1303.316474][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1303.350812][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1304.466865][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1304.526713][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1304.727308][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1306.286764][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1306.322018][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1306.592422][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1306.602297][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1306.627189][T13766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1307.575336][T13792] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1307.668972][T13792] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1308.272624][T13792] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1308.333110][T13792] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1308.984467][T13792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.071583][ T26] audit: type=1800 audit(1787994319.730:779): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2206" name="sda1" dev="sda1" ino=2048 res=0 errno=0 [ 1309.813189][ T8837] device hsr_slave_0 left promiscuous mode [ 1309.852980][ T8837] device hsr_slave_1 left promiscuous mode [ 1309.879697][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.935215][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.993434][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.011868][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.082407][ T8837] device bridge_slave_1 left promiscuous mode [ 1310.843912][ T26] audit: type=1326 audit(1787994321.740:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14122 comm="syz.8.2210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d78b9e159 code=0x0 [ 1311.145909][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.794282][ T8837] device bridge_slave_0 left promiscuous mode [ 1311.808402][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.245329][ T8837] device veth1_macvtap left promiscuous mode [ 1312.261536][ T8837] device veth0_macvtap left promiscuous mode [ 1312.267767][ T8837] device veth1_vlan left promiscuous mode [ 1312.397489][ T8837] device veth0_vlan left promiscuous mode [ 1312.623278][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1312.636286][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1312.648938][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1312.673938][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1312.684661][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1312.694399][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1314.743364][ T9214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1314.763394][ T9214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1314.773272][ T9214] Bluetooth: hci2: command 0x0409 tx timeout [ 1314.780812][ T9214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1314.793160][ T9214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1314.805765][T14152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1314.813393][T14152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1315.876513][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1315.943376][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1316.016811][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.079129][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.549583][ T8837] bond0 (unregistering): Released all slaves [ 1316.650231][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1316.659091][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1316.748510][T14157] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1316.851979][T14152] Bluetooth: hci2: command 0x041b tx timeout [ 1316.859140][T14152] Bluetooth: hci4: command 0x0409 tx timeout [ 1318.243026][ T26] audit: type=1800 audit(1787994329.140:781): pid=14181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2218" name="sda1" dev="sda1" ino=2048 res=0 errno=0 [ 1318.704371][T14195] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1318.931837][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 1318.933121][T14152] Bluetooth: hci4: command 0x041b tx timeout [ 1319.394718][T14136] chnl_net:caif_netlink_parms(): no params data found [ 1319.504840][T14150] chnl_net:caif_netlink_parms(): no params data found [ 1321.773924][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 1321.773980][T14152] Bluetooth: hci4: command 0x040f tx timeout [ 1322.863748][T14136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.878375][T14136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.976183][T14136] device bridge_slave_0 entered promiscuous mode [ 1323.270107][T14136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.300291][T14136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.333071][T14136] device bridge_slave_1 entered promiscuous mode [ 1323.781763][T14136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.801785][T14150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.809219][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.831510][T14152] Bluetooth: hci4: command 0x0419 tx timeout [ 1323.848854][T14150] device bridge_slave_0 entered promiscuous mode [ 1323.859950][T14136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.897632][T14136] team0: Port device team_slave_0 added [ 1323.909705][T14136] team0: Port device team_slave_1 added [ 1323.955257][T14150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.981722][T14150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.990480][T14150] device bridge_slave_1 entered promiscuous mode [ 1324.077631][T14136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.143195][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.208112][T14136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.455061][T14136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.471525][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.553668][T14136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.666972][T14235] SET target dimension over the limit! [ 1325.022389][ T4321] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1325.181570][ T4321] usb 8-1: device descriptor read/64, error -71 [ 1325.364382][T14150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.451584][ T4321] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1325.484975][ T127] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1325.631619][ T4321] usb 8-1: device descriptor read/64, error -71 [ 1325.666041][T14150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.785298][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 1325.792067][ T4321] usb usb8-port1: attempt power cycle [ 1325.829080][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.959912][ T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1326.081070][ T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1326.103323][ T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1326.130194][ T127] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1326.153603][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.167430][T14136] device hsr_slave_0 entered promiscuous mode [ 1326.187488][ T127] hub 1-1:1.0: bad descriptor, ignoring hub [ 1326.205550][ T127] hub: probe of 1-1:1.0 failed with error -5 [ 1326.213669][T14136] device hsr_slave_1 entered promiscuous mode [ 1326.217184][ T127] cdc_wdm 1-1:1.0: skipping garbage [ 1326.221583][ T4321] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1326.249422][ T127] cdc_wdm 1-1:1.0: skipping garbage [ 1326.250782][T14150] team0: Port device team_slave_0 added [ 1326.294158][ T4321] usb 8-1: device descriptor read/8, error -71 [ 1326.301307][ T127] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1326.308274][ T127] cdc_wdm 1-1:1.0: Unknown control protocol [ 1326.348003][T14150] team0: Port device team_slave_1 added [ 1326.571837][ T4321] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1326.623469][ T4321] usb 8-1: device descriptor read/8, error -71 [ 1326.721210][T14247] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1326.851197][T14150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.881145][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.124671][T14150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.238331][T14244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2224'. [ 1327.352896][ T4321] usb usb8-port1: unable to enumerate USB device [ 1327.430654][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.561102][T14150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.586455][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.646382][T14150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.848412][T14150] device hsr_slave_0 entered promiscuous mode [ 1327.877320][T14150] device hsr_slave_1 entered promiscuous mode [ 1327.907757][T14150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.926182][T14150] Cannot create hsr debugfs directory [ 1328.408009][T14258] capability: warning: `syz.8.2234' uses deprecated v2 capabilities in a way that may be insecure [ 1328.654645][ T4372] usb 1-1: USB disconnect, device number 7 [ 1333.906474][T14279] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1334.575439][ T8837] device hsr_slave_0 left promiscuous mode [ 1334.670508][ T8837] device hsr_slave_1 left promiscuous mode [ 1334.712607][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.801733][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.842417][ T8837] device bridge_slave_1 left promiscuous mode [ 1334.848840][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.918452][ T8837] device bridge_slave_0 left promiscuous mode [ 1334.936261][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.001776][ T8837] device hsr_slave_0 left promiscuous mode [ 1335.022021][ T8837] device hsr_slave_1 left promiscuous mode [ 1335.042010][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.072467][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.170925][ T8837] device bridge_slave_1 left promiscuous mode [ 1335.212880][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.292270][ T8837] device bridge_slave_0 left promiscuous mode [ 1335.298640][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.104827][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1336.230586][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1336.303470][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.345304][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.627995][ T8837] bond0 (unregistering): Released all slaves [ 1339.139707][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1339.342585][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1339.492626][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.754155][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.491932][ T26] audit: type=1326 audit(1787994353.300:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.7.2251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a439e159 code=0x0 [ 1344.125419][ T8837] bond0 (unregistering): Released all slaves [ 1344.480447][T14285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2241'. [ 1345.819712][T14150] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1346.912007][T14150] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1346.970686][T14150] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1347.110872][T14150] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1347.467260][T14136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1347.563854][T14136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1347.596656][T14136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1347.626673][T14136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1347.993460][T14150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.077245][T14136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.131476][T14150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.138556][T12169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1348.152352][T12169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1348.245284][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1348.262585][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1348.281786][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1348.322254][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1348.361964][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.369302][T12178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.442596][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1348.465733][T14136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.544970][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1348.630136][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1348.889428][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.896826][T12178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.462745][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1349.633745][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1349.932275][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.940517][T12178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.535331][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1351.071214][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1351.112025][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1351.147689][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1351.177192][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1351.200497][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1351.221192][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1352.668029][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.675930][T12178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.864408][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1352.880148][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1353.127679][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1353.153812][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1353.219906][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1353.296280][T14150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1353.311235][T14150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1353.342743][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1354.240652][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1354.260752][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1354.295375][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1354.343282][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1354.382321][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1354.422955][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1354.441887][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1354.547921][T14136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1354.601645][T14136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1354.644656][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1354.665806][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1354.707367][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1354.741277][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1354.781563][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1354.801955][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1354.854417][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1355.320749][T14360] futex_wake_op: syz.0.2260 tries to shift op by 144; fix this program [ 1356.288460][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1356.308425][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1356.374992][T14150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.525706][T12171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1356.577063][T12171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1356.621589][T14136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.653000][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1357.721742][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1357.782708][T12171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1357.804450][T12171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1359.215087][T14136] device veth0_vlan entered promiscuous mode [ 1359.249146][T12171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1359.273415][T12171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1359.297260][T14136] device veth1_vlan entered promiscuous mode [ 1359.393159][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1359.424107][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1360.736896][ T4321] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1360.798184][T14136] device veth0_macvtap entered promiscuous mode [ 1360.848153][T14136] device veth1_macvtap entered promiscuous mode [ 1360.943843][T14136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.011434][T14136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.073445][T14136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.098052][T14136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.141440][ T4321] usb 9-1: device not accepting address 2, error -71 [ 1361.161450][T14136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.421476][T14136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.616011][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.622717][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.896934][T14136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.986887][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1363.102462][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1363.208690][T14136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.262177][T14136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.321380][T14136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.434776][T14136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.521620][T14136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.564670][T14136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.652379][T14136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.663522][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1363.697129][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1363.735312][T14136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.767443][T14136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.789158][T14136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.866745][T14136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.927708][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1363.951722][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1364.075370][T14150] device veth0_vlan entered promiscuous mode [ 1364.122313][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1364.132609][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1364.187938][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1364.208793][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1364.908866][T14150] device veth1_vlan entered promiscuous mode [ 1365.078253][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.116884][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1365.123583][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.192555][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1365.281959][T14438] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1365.379858][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1365.541984][T14150] device veth0_macvtap entered promiscuous mode [ 1365.738679][ T8829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.751070][ T8829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.870099][T14150] device veth1_macvtap entered promiscuous mode [ 1365.930341][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1366.033601][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.271417][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.338550][T14448] usbip-vudc usbip-vudc.0: gadget not bound [ 1367.010722][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.047148][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.084117][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.136715][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.170568][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.226666][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.273049][T14150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.332163][T14447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.340592][T14447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.457858][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 1367.481955][T14449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.489761][T14449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.497471][T14449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.504691][T14449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.532649][T14449] device bridge0 entered promiscuous mode [ 1368.384500][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1368.471865][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1368.513280][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.725202][T14464] sctp_transport_update_pmtu: 40 callbacks suppressed [ 1368.725216][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1368.728961][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.761939][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.271182][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.684781][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.710428][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.729190][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.758107][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.769238][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.807104][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.847301][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.864458][T14150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.911897][T14150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.979280][T14150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.018667][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1371.031697][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1371.040015][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1371.047592][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1371.055507][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1371.063653][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1371.071517][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1371.090588][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1371.232011][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1371.254152][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1371.272125][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1371.359326][T14150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.391654][T14482] futex_wake_op: syz.8.2279 tries to shift op by 144; fix this program [ 1371.421271][T14150] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.223002][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1373.241440][T14150] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.250433][T14150] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.345899][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1373.781833][T14464] sctp_transport_update_pmtu: 33 callbacks suppressed [ 1373.781848][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1373.946474][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1374.000386][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1374.186201][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1374.356716][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1374.457744][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1374.521963][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1374.620288][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1374.842251][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1375.152242][T14464] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1375.349025][T14512] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1378.366660][ T9214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1378.384748][ T9214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1378.403101][ T9214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1378.425306][ T9214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1378.438923][ T9214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1378.448086][ T9214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1380.357447][ T8847] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.388974][T14152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1380.472362][T14152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1380.483331][T14152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1380.492007][T14152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1380.501059][T14152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1380.509407][T14152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1380.533193][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 1380.735552][ T8847] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.543245][ T8847] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.753627][ T8847] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.823859][T14550] futex_wake_op: syz.0.2290 tries to shift op by 144; fix this program [ 1382.621578][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 1382.663146][T14152] Bluetooth: hci4: command 0x041b tx timeout [ 1384.691459][ T9214] Bluetooth: hci4: command 0x040f tx timeout [ 1384.697724][ T9214] Bluetooth: hci1: command 0x041b tx timeout [ 1385.507786][T14586] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1386.007284][T14537] chnl_net:caif_netlink_parms(): no params data found [ 1386.118431][T14529] chnl_net:caif_netlink_parms(): no params data found [ 1387.986162][ T9214] Bluetooth: hci1: command 0x040f tx timeout [ 1387.993323][ T9214] Bluetooth: hci4: command 0x0419 tx timeout [ 1388.655224][ T26] audit: type=1326 audit(1787994399.350:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e19d9e159 code=0x0 [ 1389.534666][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.642850][T14537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.822207][T14537] device bridge_slave_0 entered promiscuous mode [ 1389.845323][T14529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.859895][T14529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.893898][T14529] device bridge_slave_0 entered promiscuous mode [ 1390.051947][T14152] Bluetooth: hci1: command 0x0419 tx timeout [ 1390.422219][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.439788][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.479783][T14537] device bridge_slave_1 entered promiscuous mode [ 1390.542253][T14529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.549506][T14529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.063641][T14529] device bridge_slave_1 entered promiscuous mode [ 1392.326723][T14529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.674103][T14529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.739432][T14537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.806625][T14634] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1393.397653][T14537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.458676][T14529] team0: Port device team_slave_0 added [ 1393.608272][T14529] team0: Port device team_slave_1 added [ 1395.262115][T14529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.269852][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.244928][T14529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.364329][T14537] team0: Port device team_slave_0 added [ 1396.409373][T14529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.421287][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.541070][T14529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.588571][T14537] team0: Port device team_slave_1 added [ 1396.633957][ T8847] device hsr_slave_0 left promiscuous mode [ 1396.651053][ T8847] device hsr_slave_1 left promiscuous mode [ 1396.813825][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.831558][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.873295][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.978298][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.122675][ T8847] device bridge_slave_1 left promiscuous mode [ 1397.324422][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.414741][ T8847] device bridge_slave_0 left promiscuous mode [ 1397.458833][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.718332][ T8847] device veth1_macvtap left promiscuous mode [ 1397.738549][ T8847] device veth0_macvtap left promiscuous mode [ 1397.823888][ T8847] device veth1_vlan left promiscuous mode [ 1397.829725][ T8847] device veth0_vlan left promiscuous mode [ 1402.720332][T14690] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1405.652912][ T8847] team0 (unregistering): Port device team_slave_1 removed [ 1405.874579][ T8847] team0 (unregistering): Port device team_slave_0 removed [ 1406.102201][ T8847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.312153][ T8847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.643608][ T8847] bond0 (unregistering): Released all slaves [ 1413.239352][T14529] device hsr_slave_0 entered promiscuous mode [ 1413.282603][T14529] device hsr_slave_1 entered promiscuous mode [ 1413.338179][T14735] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1413.358647][T14529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1413.597184][T14529] Cannot create hsr debugfs directory [ 1413.856436][T14537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.865510][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.925851][T14537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.975972][T14537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.991447][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.044154][T14537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.648343][T14537] device hsr_slave_0 entered promiscuous mode [ 1416.719947][T14537] device hsr_slave_1 entered promiscuous mode [ 1416.768457][T14537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1416.791594][T14537] Cannot create hsr debugfs directory [ 1424.706480][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.714649][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.745294][T14529] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1424.807334][T14529] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1424.854060][T14529] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1424.897005][T14529] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1425.051658][T14537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1425.078694][T14537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1425.126429][T14537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1425.221769][T14537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1425.491997][T14529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.591188][T14529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.619625][T14537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.652526][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1425.676459][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1425.749877][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1425.792447][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1425.822256][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.829683][ T5881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.890746][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1426.021192][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1426.036356][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1426.155896][T14825] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1426.312213][T14537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.366513][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1426.619425][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1426.688562][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.696430][ T8837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.752009][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1426.913104][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1426.923342][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1426.939392][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.947073][ T8837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.004103][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1427.086755][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1427.173279][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1427.292866][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1427.312179][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.320119][ T8837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.375210][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1428.325349][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1428.359580][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1428.410969][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1429.260149][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1429.270804][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1429.282862][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1429.311942][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1429.427456][ T26] audit: type=1326 audit(1787994440.320:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14838 comm="syz.1.2337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc19f9e159 code=0x0 [ 1429.429486][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1430.441683][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1430.504724][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1430.555161][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1430.708950][T14529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1430.800068][T14529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1432.251584][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1432.268837][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1432.352685][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1432.383057][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1432.417208][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1432.468204][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1432.503643][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1432.522492][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1432.553755][T14537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1433.583452][T14529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.622616][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1433.662009][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1435.907455][T14537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.003735][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1436.071834][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1436.149815][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1436.226747][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1436.371783][T14152] Bluetooth: hci2: command 0x0406 tx timeout [ 1437.636162][T14902] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1438.313542][T14152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1438.329860][T14152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1438.343654][T14152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1438.360089][T14152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1438.373484][T14152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1438.382899][T14152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1438.757638][T14152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1438.769250][T14152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1438.779258][T14152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1438.787250][T14152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1438.796312][T14152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1438.803786][T14152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1439.094097][T14918] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1440.531623][ T9214] Bluetooth: hci4: command 0x0409 tx timeout [ 1440.857597][ T9214] Bluetooth: hci1: command 0x0409 tx timeout [ 1442.395827][T14904] chnl_net:caif_netlink_parms(): no params data found [ 1442.438750][T14908] chnl_net:caif_netlink_parms(): no params data found [ 1442.612056][ T9214] Bluetooth: hci4: command 0x041b tx timeout [ 1442.941888][ T9214] Bluetooth: hci1: command 0x041b tx timeout [ 1443.497114][T14908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.521727][T14908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.530526][T14908] device bridge_slave_0 entered promiscuous mode [ 1443.580657][T14908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.620405][T14908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.641610][T14908] device bridge_slave_1 entered promiscuous mode [ 1443.649409][T14904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.681777][T14904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.701405][ T4372] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1443.703677][T14904] device bridge_slave_0 entered promiscuous mode [ 1444.028596][ T4372] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1444.039151][T14904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.055918][T14904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.175460][T14904] device bridge_slave_1 entered promiscuous mode [ 1444.691401][ T9214] Bluetooth: hci4: command 0x040f tx timeout [ 1445.011383][ T9214] Bluetooth: hci1: command 0x040f tx timeout [ 1445.884488][T14908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.763308][T14908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.781389][ T9214] Bluetooth: hci4: command 0x0419 tx timeout [ 1446.820761][ T4372] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1447.091898][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 1447.175491][T14904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.549294][ T4372] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1447.559511][ T4372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.596652][ T8837] device hsr_slave_0 left promiscuous mode [ 1447.612639][ T4372] usb 1-1: can't set config #1, error -71 [ 1447.632059][ T4372] usb 1-1: USB disconnect, device number 8 [ 1447.722966][ T8837] device hsr_slave_1 left promiscuous mode [ 1447.757544][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.793657][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.891233][T14992] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1448.012956][ T8837] device bridge_slave_1 left promiscuous mode [ 1448.183966][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.601438][ T8837] device bridge_slave_0 left promiscuous mode [ 1448.627974][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.002353][T14996] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1453.419036][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1454.872551][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1455.594805][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.839045][T15044] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1457.442906][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.479629][ T26] audit: type=1326 audit(1787994468.640:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.8.2363" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d78b9e159 code=0x0 [ 1463.333881][ T8837] bond0 (unregistering): Released all slaves [ 1463.538463][T15068] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1464.606711][T14904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.670517][T14908] team0: Port device team_slave_0 added [ 1464.780112][T14908] team0: Port device team_slave_1 added [ 1464.833402][T14904] team0: Port device team_slave_0 added [ 1466.496767][T14904] team0: Port device team_slave_1 added [ 1466.506966][T14908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.525963][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.571651][T14908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.603965][T14908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.631488][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.682086][T14908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.748287][T14904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.775345][T14904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.846219][T14904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.884529][T14904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.911540][T14904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.961381][T14904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.115899][T14908] device hsr_slave_0 entered promiscuous mode [ 1467.164515][T14908] device hsr_slave_1 entered promiscuous mode [ 1467.225097][T14908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1467.234928][T14908] Cannot create hsr debugfs directory [ 1467.288212][T14904] device hsr_slave_0 entered promiscuous mode [ 1467.326793][T14904] device hsr_slave_1 entered promiscuous mode [ 1467.358353][T14904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1467.394051][T14904] Cannot create hsr debugfs directory [ 1468.884532][ T8837] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.663129][ T8837] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.815234][ T8837] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.067843][ T8837] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.179570][ T8837] tipc: Left network mode [ 1476.996571][T14908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1478.015079][T14908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1478.202493][T15155] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1478.933426][T14908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1480.332170][T14908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1481.074578][T14904] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1481.274843][T14904] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1481.942770][T14904] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1482.065399][T14904] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1483.824916][T14908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.934234][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1483.967374][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1484.002181][T14908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.018282][T14904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.373527][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1484.392197][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1484.451609][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.458790][ T8118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.551922][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1484.607245][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1484.641980][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.649190][ T8118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.672064][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1484.712326][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1484.742316][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1484.783503][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1484.850825][T14904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.037205][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1485.049982][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1485.062878][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1485.093609][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1487.032096][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.038835][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.667011][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1488.692822][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1488.742310][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.749585][ T8118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.791825][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1488.824974][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1488.852537][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.860508][ T8118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.921883][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1488.952791][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1488.985996][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1489.022672][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1489.152218][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1489.181795][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1489.224337][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1489.262253][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1489.291717][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1489.321840][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1489.395234][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1489.433166][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1489.796560][T15216] jffs2: notice: (15216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1489.945585][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1489.974769][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1491.424630][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1491.462341][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1491.501910][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1491.629102][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1491.682282][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1491.893339][ T8837] device hsr_slave_0 left promiscuous mode [ 1491.927538][ T8837] device hsr_slave_1 left promiscuous mode [ 1491.946577][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.930676][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.987795][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.011703][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.122312][ T8837] device bridge_slave_1 left promiscuous mode [ 1493.128814][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.176998][ T8837] device bridge_slave_0 left promiscuous mode [ 1493.223241][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.297418][ T8837] device hsr_slave_0 left promiscuous mode [ 1493.381684][ T8837] device hsr_slave_1 left promiscuous mode [ 1493.392190][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.492957][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.530238][ T8837] device bridge_slave_1 left promiscuous mode [ 1493.551517][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.582848][ T8837] device bridge_slave_0 left promiscuous mode [ 1493.589433][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.656123][ T9214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1493.681750][ T9214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1493.690922][ T9214] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1493.700946][ T9214] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1493.708789][ T9214] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1493.716252][ T9214] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1494.141807][ T8837] device veth1_macvtap left promiscuous mode [ 1494.148812][ T8837] device veth0_macvtap left promiscuous mode [ 1494.191520][ T8837] device veth1_vlan left promiscuous mode [ 1494.221392][ T8837] device veth0_vlan left promiscuous mode [ 1495.815956][ T9214] Bluetooth: hci5: command 0x0409 tx timeout [ 1496.511754][ T8837] bond1 (unregistering): Released all slaves [ 1497.678608][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1497.699243][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1497.709744][T14152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1497.722074][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1497.743641][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1497.750972][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1497.891390][ T9214] Bluetooth: hci5: command 0x041b tx timeout [ 1497.979442][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1498.012737][ T4289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1498.034285][ T4289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1498.044011][ T4289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1498.053943][ T4289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1498.076051][ T4289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1498.084567][ T4289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1498.226065][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1498.345385][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.507762][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.107828][ T9214] Bluetooth: hci3: command 0x0409 tx timeout [ 1501.107863][ T4289] Bluetooth: hci6: command 0x0409 tx timeout [ 1501.120921][ T9214] Bluetooth: hci5: command 0x040f tx timeout [ 1501.455223][ T8837] bond0 (unregistering): Released all slaves [ 1503.172238][ T9214] Bluetooth: hci5: command 0x0419 tx timeout [ 1503.175030][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 1503.179151][ T9214] Bluetooth: hci6: command 0x041b tx timeout [ 1503.510740][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1503.592486][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1505.062560][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.184203][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1505.252320][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 1505.259109][ T4289] Bluetooth: hci6: command 0x040f tx timeout [ 1505.714745][ T8837] bond0 (unregistering): Released all slaves [ 1505.907863][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1507.402927][ T4289] Bluetooth: hci6: command 0x0419 tx timeout [ 1507.409111][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 1509.875391][T15266] chnl_net:caif_netlink_parms(): no params data found [ 1509.926762][T15240] chnl_net:caif_netlink_parms(): no params data found [ 1509.966206][T15264] chnl_net:caif_netlink_parms(): no params data found [ 1510.598016][T15266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.639064][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.677123][T15266] device bridge_slave_0 entered promiscuous mode [ 1510.716316][T15240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.727116][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.748267][T15240] device bridge_slave_0 entered promiscuous mode [ 1511.509970][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.528601][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.562618][T15264] device bridge_slave_0 entered promiscuous mode [ 1512.584384][T15266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.600941][T15266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.609876][T15266] device bridge_slave_1 entered promiscuous mode [ 1512.670850][T15240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.678729][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.702635][T15240] device bridge_slave_1 entered promiscuous mode [ 1512.722551][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.729776][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.762724][T15264] device bridge_slave_1 entered promiscuous mode [ 1512.820212][T15266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.880500][T15240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.915929][T15266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.967981][T15240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.040734][T15264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.120087][T15264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.198811][T15266] team0: Port device team_slave_0 added [ 1513.281730][T15266] team0: Port device team_slave_1 added [ 1513.296092][T15240] team0: Port device team_slave_0 added [ 1513.397226][T15240] team0: Port device team_slave_1 added [ 1513.417831][T15264] team0: Port device team_slave_0 added [ 1513.452457][T15266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.459477][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.593498][T15266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.644721][T15264] team0: Port device team_slave_1 added [ 1513.923671][T15266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.931078][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.081772][T15266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.143593][T15240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.151200][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.248766][T15240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.343025][T15240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.358863][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.450123][T15240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.489309][T15264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.504224][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.593401][T15264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.677721][T15264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.718451][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.757782][T15264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.810495][T15266] device hsr_slave_0 entered promiscuous mode [ 1514.829291][T15266] device hsr_slave_1 entered promiscuous mode [ 1514.845912][T15266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.885300][T15266] Cannot create hsr debugfs directory [ 1514.910470][T15240] device hsr_slave_0 entered promiscuous mode [ 1514.952271][T15240] device hsr_slave_1 entered promiscuous mode [ 1514.991884][T15240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1515.021808][T15240] Cannot create hsr debugfs directory [ 1517.411113][T15264] device hsr_slave_0 entered promiscuous mode [ 1517.524358][T15264] device hsr_slave_1 entered promiscuous mode [ 1517.593984][T15264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.973800][T15264] Cannot create hsr debugfs directory [ 1523.212786][ T8837] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.329971][T15266] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1523.360287][T15266] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1523.450321][T15420] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1523.519630][T15266] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1523.566170][ T8837] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.599428][T15266] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1524.090209][ T8837] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.118015][ T8837] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.903160][T15266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.972361][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1528.002044][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1528.076335][T15266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.129182][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1528.163371][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1528.206574][T12173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.214354][T12173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.262879][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.292883][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.302431][T12173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.309861][T12173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.351857][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1528.410982][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.434877][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1528.454538][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1528.486387][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1528.536951][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1528.580434][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1528.622420][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1528.651796][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1528.661017][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1529.178673][ T8837] tipc: Left network mode [ 1529.194694][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1529.282212][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1529.314366][T15266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1529.375516][T15240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1529.452692][T15240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1529.563302][T15240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1533.275212][T15240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1534.730362][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1534.743451][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1534.760867][T15266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.241804][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2431'. [ 1539.193290][T15240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.542638][T15264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1539.965408][T15264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1540.072069][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1540.104038][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1540.172024][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1540.224079][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1541.078385][T15264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1541.132813][T15264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1542.229179][T15240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.543755][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1543.566537][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1543.651968][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.659758][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.721794][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1543.742008][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1543.761597][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.769130][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.795572][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1543.864060][T15266] device veth0_vlan entered promiscuous mode [ 1543.921433][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1543.952330][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1543.982566][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1544.055700][T15266] device veth1_vlan entered promiscuous mode [ 1544.306599][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1544.323005][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1544.352553][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1544.410799][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1544.505913][ T8837] device hsr_slave_0 left promiscuous mode [ 1544.636542][ T8837] device hsr_slave_1 left promiscuous mode [ 1544.671618][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.689063][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.742873][ T8837] device bridge_slave_1 left promiscuous mode [ 1544.749222][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.793087][ T8837] device bridge_slave_0 left promiscuous mode [ 1544.801031][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.948356][ T8837] device hsr_slave_0 left promiscuous mode [ 1545.009780][ T8837] device hsr_slave_1 left promiscuous mode [ 1545.060697][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.090205][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.433160][ T8837] device bridge_slave_1 left promiscuous mode [ 1545.441578][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.469815][ T8837] device bridge_slave_0 left promiscuous mode [ 1545.480996][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.514928][ T8837] device hsr_slave_0 left promiscuous mode [ 1545.543315][ T8837] device hsr_slave_1 left promiscuous mode [ 1545.562810][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.581454][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.757815][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.025515][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.403932][ T8837] device bridge_slave_1 left promiscuous mode [ 1546.410821][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.463675][ T8837] device bridge_slave_0 left promiscuous mode [ 1546.470035][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.940703][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.993996][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.128279][ T8837] device veth1_macvtap left promiscuous mode [ 1547.228813][ T8837] device veth0_macvtap left promiscuous mode [ 1547.241387][ T8837] device veth1_vlan left promiscuous mode [ 1547.248047][ T8837] device veth0_vlan left promiscuous mode [ 1550.740219][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1550.859957][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1550.994467][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.122636][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.520506][ T8837] bond0 (unregistering): Released all slaves [ 1552.249214][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1552.260031][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1552.269395][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1552.280691][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1552.300416][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1552.308666][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1552.532700][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1552.761816][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1552.869439][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.041081][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.543525][ T8837] bond0 (unregistering): Released all slaves [ 1555.242089][T14152] Bluetooth: hci1: command 0x0409 tx timeout [ 1555.250635][ T26] audit: type=1326 audit(1787994565.410:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.1.2450" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc19f9e159 code=0x0 [ 1556.450539][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1556.529400][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1556.627986][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.721717][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1557.251572][T14152] Bluetooth: hci1: command 0x041b tx timeout [ 1557.782485][ T8837] bond0 (unregistering): Released all slaves [ 1557.942072][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1557.967277][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1558.032790][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1558.206948][T15264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.821749][T14152] Bluetooth: hci1: command 0x040f tx timeout [ 1560.088086][T15621] chnl_net:caif_netlink_parms(): no params data found [ 1561.891552][T14152] Bluetooth: hci1: command 0x0419 tx timeout [ 1562.175050][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1562.188148][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1562.198437][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1562.216601][ T9214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1562.225848][ T9214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1562.233939][ T9214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1562.306833][T14152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1562.318428][T14152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1562.340951][T14152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1562.381553][T14152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1562.391318][T14152] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1562.409840][T14152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1563.242339][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.249710][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.283924][T15621] device bridge_slave_0 entered promiscuous mode [ 1563.347978][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.362906][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.382300][T15621] device bridge_slave_1 entered promiscuous mode [ 1563.487610][T15621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.518168][T15621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.884083][T14152] Bluetooth: hci4: command 0x0409 tx timeout [ 1564.884671][ T9214] Bluetooth: hci5: command 0x0409 tx timeout [ 1564.902545][ T26] audit: type=1326 audit(1787994575.090:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.0.2458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e19d9e159 code=0x0 [ 1565.002607][T15621] team0: Port device team_slave_0 added [ 1565.044278][T15663] chnl_net:caif_netlink_parms(): no params data found [ 1565.068062][T15621] team0: Port device team_slave_1 added [ 1565.299104][T15621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.321437][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.451337][T15621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.507591][T15667] chnl_net:caif_netlink_parms(): no params data found [ 1565.555486][T15621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.606445][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.802821][T15621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.940368][T15663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.033474][T15663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.051453][T15663] device bridge_slave_0 entered promiscuous mode [ 1566.121601][T15663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.129766][T15663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.164424][T15663] device bridge_slave_1 entered promiscuous mode [ 1566.253487][T15621] device hsr_slave_0 entered promiscuous mode [ 1566.295347][T15621] device hsr_slave_1 entered promiscuous mode [ 1566.311448][T15621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1566.334202][T15621] Cannot create hsr debugfs directory [ 1566.424974][T15663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.485389][T15663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.512489][T15667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.059512][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.060808][ T9214] Bluetooth: hci4: command 0x041b tx timeout [ 1567.067409][T14152] Bluetooth: hci5: command 0x041b tx timeout [ 1567.109089][T15667] device bridge_slave_0 entered promiscuous mode [ 1567.165372][T15667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.399952][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.410790][T15667] device bridge_slave_1 entered promiscuous mode [ 1567.454286][T15663] team0: Port device team_slave_0 added [ 1567.537140][T15663] team0: Port device team_slave_1 added [ 1569.091475][T14152] Bluetooth: hci5: command 0x040f tx timeout [ 1569.091505][ T9214] Bluetooth: hci4: command 0x040f tx timeout [ 1569.282388][T15667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.477679][T15667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.560589][T15663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.613132][T15663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.653766][T15663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.680818][T15663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.711582][T15663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.758327][T15663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.977597][T15667] team0: Port device team_slave_0 added [ 1570.045189][T15667] team0: Port device team_slave_1 added [ 1570.101381][T15667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.131779][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.198595][T15667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.111547][ T26] audit: type=1326 audit(1787994582.000:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e19d9e159 code=0x0 [ 1571.213884][T14152] Bluetooth: hci5: command 0x0419 tx timeout [ 1571.220625][T14152] Bluetooth: hci4: command 0x0419 tx timeout [ 1571.320425][T15663] device hsr_slave_0 entered promiscuous mode [ 1571.381201][T15663] device hsr_slave_1 entered promiscuous mode [ 1571.392478][T15663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1571.551356][T15663] Cannot create hsr debugfs directory [ 1571.558094][T15667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.571329][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.671743][T15667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.899932][T15748] ubi0: attaching mtd0 [ 1571.958145][T15748] ubi0: scanning is finished [ 1571.971585][T15748] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1572.156432][T15667] device hsr_slave_0 entered promiscuous mode [ 1572.185927][T15667] device hsr_slave_1 entered promiscuous mode [ 1572.223960][T15748] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1572.233327][T15667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1572.251136][T15667] Cannot create hsr debugfs directory [ 1572.818162][T15621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1572.945624][T15621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1572.983384][T15621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1573.093432][T15621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1574.418903][T15621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.593665][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1574.632447][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1574.663235][T15621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.485245][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1576.502368][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1577.445788][ T26] audit: type=1326 audit(1787994587.600:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15766 comm="syz.0.2474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e19d9e159 code=0x0 [ 1577.492946][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.500781][ T8847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.765680][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1577.783049][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1577.808462][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1577.842623][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.850111][ T8847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.870620][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1578.201218][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1578.246848][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1578.262980][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1578.305267][T15621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1578.382928][T15621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1579.083236][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1579.160749][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1579.252257][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1579.270366][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1579.282639][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1579.432004][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1579.451336][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1579.645837][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1579.667771][T15781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2476'. [ 1580.129670][ T8837] device hsr_slave_0 left promiscuous mode [ 1580.141921][ T8837] device hsr_slave_1 left promiscuous mode [ 1580.149713][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.164010][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.177916][ T8837] device bridge_slave_1 left promiscuous mode [ 1580.197432][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.219415][ T8837] device bridge_slave_0 left promiscuous mode [ 1580.232809][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.265460][ T8837] device hsr_slave_0 left promiscuous mode [ 1580.286243][ T8837] device hsr_slave_1 left promiscuous mode [ 1580.301428][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.314902][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.324239][ T8837] device bridge_slave_1 left promiscuous mode [ 1580.330897][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.340570][ T8837] device bridge_slave_0 left promiscuous mode [ 1580.367177][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.386102][ T8837] device hsr_slave_0 left promiscuous mode [ 1580.395164][ T8837] device hsr_slave_1 left promiscuous mode [ 1580.409434][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.428072][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.454838][ T8837] device bridge_slave_1 left promiscuous mode [ 1580.471756][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.501859][ T8837] device bridge_slave_0 left promiscuous mode [ 1580.510542][T15792] ubi0: attaching mtd0 [ 1580.515435][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.536503][T15792] ubi0: scanning is finished [ 1580.553945][T15792] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1580.605820][ T8837] device veth1_vlan left promiscuous mode [ 1580.621542][ T8837] device veth0_vlan left promiscuous mode [ 1580.718735][T15792] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1581.590048][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1581.740920][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1581.822343][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.183398][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.448994][ T8837] bond0 (unregistering): Released all slaves [ 1585.694072][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1585.930529][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1586.295166][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.561512][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1587.672645][ T26] audit: type=1326 audit(1787994598.560:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15805 comm="syz.1.2482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc19f9e159 code=0x0 [ 1587.923783][ T8837] bond0 (unregistering): Released all slaves [ 1588.315439][ T8837] team0 (unregistering): Port device team_slave_1 removed [ 1588.385089][ T8837] team0 (unregistering): Port device team_slave_0 removed [ 1588.598519][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.703453][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.719511][ T8837] bond0 (unregistering): Released all slaves [ 1589.857551][T15663] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1589.891783][T15817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2485'. [ 1589.948578][T15663] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1590.011047][T15663] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1590.048544][T15663] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1590.185261][T15667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1590.865818][T15667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1590.887268][T15667] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1590.941301][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1590.986767][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1591.076029][T15621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.102759][T15667] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1591.373032][T15663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.652182][T15663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.491676][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1592.513569][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1592.558579][T15667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.630997][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1592.672497][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1592.722026][T12173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.729490][T12173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.192488][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1593.611736][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1593.632093][T12173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.639658][T12173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.681946][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1593.702029][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1593.717429][T15667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.785773][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1593.822153][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1593.830439][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1593.876886][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1593.930412][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1593.994460][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1594.014905][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1594.024671][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1594.035594][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.042987][T12178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.085084][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1594.116099][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1594.140811][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.148810][T12178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1594.181803][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1594.190985][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1594.223283][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1594.254265][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1594.316842][T15663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1594.352414][T15663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1594.450235][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1594.528757][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1594.682334][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1594.691711][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1594.700828][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1594.729833][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1594.744600][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1594.754376][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1594.767211][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1594.800545][T15667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1594.822696][T15667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1594.854206][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1594.923043][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1595.002015][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1595.084488][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1595.142788][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1595.192557][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1596.865892][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1597.570084][ T26] audit: type=1326 audit(1787994608.460:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15849 comm="syz.0.2492" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e19d9e159 code=0x0 [ 1597.619806][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1597.659625][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1597.682567][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1597.752453][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1597.760508][T12173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1597.870526][T15621] device veth0_vlan entered promiscuous mode [ 1597.996937][T15621] device veth1_vlan entered promiscuous mode [ 1598.162199][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1598.202456][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1598.267316][T15621] device veth0_macvtap entered promiscuous mode [ 1598.311676][T15663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.319009][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1598.329953][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1598.385643][T15621] device veth1_macvtap entered promiscuous mode [ 1598.402956][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1598.422380][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1598.490233][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1598.541287][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.611477][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1598.661675][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.702950][T15621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.743265][T12159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1598.772796][T12159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1598.814991][T12159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1598.862299][T12159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1598.872807][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.911364][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.951370][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.991590][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.051828][T15621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.064376][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.102782][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1599.113766][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1599.153876][T15621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.181370][T15621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.190412][T15621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.223635][T15621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.300087][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1599.332209][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1599.380725][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1599.413730][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1599.459557][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1599.482521][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1599.516075][T15667] device veth0_vlan entered promiscuous mode [ 1599.604419][T15667] device veth1_vlan entered promiscuous mode [ 1599.724009][ T8829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.761634][ T8829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.856951][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1599.875190][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1599.902523][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1599.939561][T15667] device veth0_macvtap entered promiscuous mode [ 1599.970096][T15892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2495'. [ 1599.993053][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1600.008652][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1600.779541][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1600.793423][T15667] device veth1_macvtap entered promiscuous mode [ 1600.802288][ T5881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.810417][ T5881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.915271][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1601.018566][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.081455][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.092598][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.128924][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.140728][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.178448][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.212555][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.236074][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1601.273308][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1601.302921][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1601.320758][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1601.430042][T15906] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 1601.888140][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.934598][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.952319][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.744988][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.794561][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.881531][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.953421][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.999456][T15663] device veth0_vlan entered promiscuous mode [ 1603.055803][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.078966][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.102626][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1604.562070][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1604.622062][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1604.692719][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1604.728121][T15667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.777348][T15667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.822644][T15667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.894265][T15667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.188019][T15663] device veth1_vlan entered promiscuous mode [ 1605.537711][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1605.572732][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1605.606504][T15663] device veth0_macvtap entered promiscuous mode [ 1605.612589][ T8847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.638717][ T8847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.679925][T15663] device veth1_macvtap entered promiscuous mode [ 1605.717694][T12159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1605.730343][T12159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1605.778965][T12159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1606.557694][ T8837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.567429][ T8837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.575454][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1606.660763][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2503'. [ 1606.739841][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.773547][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.818086][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.849369][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.881561][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.925547][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.958657][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.023070][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.076594][T15663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.130569][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1607.830300][ T26] audit: type=1326 audit(1787994618.720:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e19d9e159 code=0x0 [ 1607.872457][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1607.899609][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.925532][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.937923][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.949793][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.961178][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.978558][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.991063][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.007647][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.043096][T15663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.057329][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1608.102294][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1608.157164][T15663] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.250997][T15663] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.385470][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.393658][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.317817][ T4260] general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN [ 1610.330620][ T4260] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 1610.339898][ T4260] CPU: 0 PID: 4260 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1610.349156][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1610.365548][ T4260] Workqueue: kafsd afs_process_async_call [ 1610.372544][ T4260] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 1610.378331][ T4260] Code: c0 40 a1 c1 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 75 ad 87 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4c 77 99 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 1610.402855][ T4260] RSP: 0018:ffffc90003db7960 EFLAGS: 00010202 [ 1610.411765][ T4260] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff96c1a103 [ 1610.422948][ T4260] RDX: ffff88807924de3c RSI: ffffffff8a8c29a0 RDI: 0000000000000098 [ 1610.434723][ T4260] RBP: ffffc90003db7ac0 R08: ffffffff89647426 R09: 000000000000000b [ 1610.445961][ T4260] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 1610.458324][ T4260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1610.470099][ T4260] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1610.480138][ T4260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1610.488255][ T4260] CR2: 00007fbc19feb840 CR3: 000000007d3e2000 CR4: 00000000003506f0 [ 1610.497738][ T4260] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1610.507588][ T4260] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1610.516315][ T4260] Call Trace: [ 1610.520604][ T4260] [ 1610.523872][ T4260] ? afs_put_call+0x28b/0x480 [ 1610.529850][ T4260] ? rcu_is_watching+0x11/0xa0 [ 1610.535185][ T4260] ? afs_extract_data+0x33e/0x650 [ 1610.543080][ T4260] ? rxrpc_kernel_abort_call+0x26/0x70 [ 1610.550683][ T4260] ? mutex_lock_nested+0x10/0x10 [ 1610.558749][ T4260] ? afs_extract_data+0x33e/0x650 [ 1610.564693][ T4260] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1610.571383][ T4260] ? afs_send_simple_reply+0x300/0x300 [ 1610.578023][ T4260] ? iov_iter_kvec+0x4a/0x1f0 [ 1610.583937][ T4260] rxrpc_kernel_abort_call+0x26/0x70 [ 1610.590617][ T4260] afs_deliver_to_call+0x6ab/0x1200 [ 1610.598068][ T4260] ? lockdep_hardirqs_on+0x94/0x140 [ 1610.604255][ T4260] ? afs_wait_for_call_to_complete+0xc20/0xc20 [ 1610.611963][ T4260] afs_process_async_call+0x7e/0xe0 [ 1610.618615][ T4260] ? process_one_work+0x7b4/0x1160 [ 1610.623866][ T4260] process_one_work+0x8ab/0x1160 [ 1610.629202][ T4260] ? worker_detach_from_pool+0x240/0x240 [ 1610.637870][ T4260] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1610.645709][ T4260] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1610.652914][ T4260] ? wq_worker_running+0x97/0x190 [ 1610.658679][ T4260] worker_thread+0xaf5/0x12a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1610.666078][ T4260] kthread+0x29d/0x330 [ 1610.672388][ T4260] ? worker_clr_flags+0x1a0/0x1a0 [ 1610.678414][ T4260] ? kthread_blkcg+0xd0/0xd0 [ 1610.683901][ T4260] ret_from_fork+0x1f/0x30 [ 1610.689612][ T4260] [ 1610.693334][ T4260] Modules linked in: [ 1610.954948][T15663] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.013069][T15663] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.353898][ T4260] ---[ end trace 0000000000000000 ]--- [ 1611.361552][ T4260] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 1611.368930][ T4260] Code: c0 40 a1 c1 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 75 ad 87 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4c 77 99 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 1611.393710][ T4260] RSP: 0018:ffffc90003db7960 EFLAGS: 00010202 [ 1611.402433][ T4260] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff96c1a103 [ 1611.405286][T15962] binder: BINDER_SET_CONTEXT_MGR already set [ 1611.414810][ T4260] RDX: ffff88807924de3c RSI: ffffffff8a8c29a0 RDI: 0000000000000098 [ 1611.414838][ T4260] RBP: ffffc90003db7ac0 R08: ffffffff89647426 R09: 000000000000000b [ 1611.414852][ T4260] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 1611.414866][ T4260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1611.414878][ T4260] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1611.414896][ T4260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1611.414911][ T4260] CR2: 000020000000f000 CR3: 000000007d3e2000 CR4: 00000000003506f0 [ 1611.414931][ T4260] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1611.414943][ T4260] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1611.415015][ T4260] Kernel panic - not syncing: Fatal exception [ 1611.422922][ T4260] Kernel Offset: disabled [ 1611.511671][ T4260] Rebooting in 86400 seconds..