last executing test programs: 11m50.102437986s ago: executing program 1 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x9}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11m49.807037172s ago: executing program 1 (id=26): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x10001043, r2, 0x0) renameat2(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r4 = fcntl$dupfd(r3, 0x406, r0) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef) 11m49.576028927s ago: executing program 1 (id=30): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0xfffffe74, 0x0}, 0x2}], 0x1, 0x10102, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 11m49.217090594s ago: executing program 1 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 11m48.984810669s ago: executing program 1 (id=36): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r4, r3, 0x0) 11m48.499285806s ago: executing program 1 (id=40): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x73a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11m48.205145052s ago: executing program 32 (id=40): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x73a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m29.021068612s ago: executing program 3 (id=1295): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbc1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) read$char_usb(r0, &(0x7f0000000380)=""/190, 0xbe) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="ba5368a5795d3e755dcb0bc5a3d508fd260f7ee2deb3b493", 0x0, 0x18) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 8m28.794832918s ago: executing program 3 (id=1300): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1a0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0097683d856f1ea0e8ae7a8600", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0ff00", "0000efffffffffffbfff00"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000000)={0x63, 0xfffffffffffffff7, 0x2, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4}) 8m28.54365054s ago: executing program 3 (id=1306): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 8m28.370741485s ago: executing program 3 (id=1308): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80003, 0x0) recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r1, 0x0, 0x0, 0x2042, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 8m26.616934483s ago: executing program 3 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 8m26.187322109s ago: executing program 3 (id=1321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x5, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @flat=@handle={0x73682a85, 0xa, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 8m11.166997078s ago: executing program 33 (id=1321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x5, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @flat=@handle={0x73682a85, 0xa, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m17.843540282s ago: executing program 5 (id=2417): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x81, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0x2, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffe00, {0x0, 0x0, 0x0, r5, {0x8}, {0xc}, {0x12, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0xc, 0x45, 0x7, 0x8, 0x18, 0x2, 0x4, 0x2, 0xf, 0x5, 0x4, 0x0, 0x8, 0x4, 0x10, 0x4], 0x1, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m17.370135732s ago: executing program 0 (id=2421): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000001900)={0x2020}, 0x206f) 4m17.344054888s ago: executing program 5 (id=2422): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_clone(0x80063000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x88) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0xfffffffd}}}}}, 0x0) 4m17.237748112s ago: executing program 4 (id=2424): syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m16.834279552s ago: executing program 5 (id=2427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x574}], @IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) 4m16.274890338s ago: executing program 5 (id=2430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x8000, 0xffff, 0xfffd, 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xd, 0x3}, {0xa}, {0x40d, 0x8003}, {0x1, 0x45}, {0x6, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000180)=""/14, 0x7f, 0xe, 0x1, 0x4}, 0x28) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000006fe5e40cf1b400b3d550000000109021200014300a00009ac89a779981c5f69ae8704a600000e010000b18beebab4057565a9f628e745d0f81c32b2aa46dc1ef09562673f433c236783701f38d44d398938eefe56fabeb98028f3b96d0ddbb2671db5"], 0x0) 4m16.108334253s ago: executing program 4 (id=2431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m14.919178126s ago: executing program 5 (id=2433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x21, 0x11, 0x10, 0x4, 0xe80, 0x7, 0x40}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 4m14.87771122s ago: executing program 4 (id=2434): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x8000000004) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x3}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m14.864011908s ago: executing program 0 (id=2436): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 4m13.433928004s ago: executing program 0 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x6, 0x1, 0xd, 0x7}, &(0x7f0000000280)=0x98) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m12.550570142s ago: executing program 2 (id=2440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getdents(0xffffffffffffffff, 0x0, 0x0) 4m11.46448066s ago: executing program 2 (id=2441): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000002a40)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r3, 0x2}, {r1, 0x100}, {r1, 0x80}], 0x3, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000200)={[0x6]}, 0x8) fcntl$setpipe(r0, 0x407, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r0, &(0x7f0000002440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x29, 0x4, 0xffffffffc8001048, 0xffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80, 0x3}}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x15}, {0x6, 0x40}]}) 4m11.315312678s ago: executing program 0 (id=2442): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 4m11.172364147s ago: executing program 0 (id=2443): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4m11.108406067s ago: executing program 4 (id=2444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x7001, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 4m11.102096496s ago: executing program 2 (id=2445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x1e0, 0xf0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x8, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 4m9.884350614s ago: executing program 2 (id=2446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), 0x0, 0xff27, 0x0) 4m9.883664704s ago: executing program 4 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) 4m9.842091398s ago: executing program 0 (id=2448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setresuid(0xee01, 0xee00, 0x0) setpriority(0x1, 0x0, 0x4) kcmp(r1, r0, 0x1, r2, 0xffffffffffffffff) 4m8.893274946s ago: executing program 2 (id=2449): r0 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) signalfd(r0, &(0x7f0000000240)={[0xc18]}, 0x8) 4m8.892005296s ago: executing program 4 (id=2450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) 4m7.990360252s ago: executing program 2 (id=2451): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x6) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4m7.97975011s ago: executing program 5 (id=2452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 3m52.69576409s ago: executing program 34 (id=2448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setresuid(0xee01, 0xee00, 0x0) setpriority(0x1, 0x0, 0x4) kcmp(r1, r0, 0x1, r2, 0xffffffffffffffff) 3m52.572366431s ago: executing program 35 (id=2450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) 3m52.471587926s ago: executing program 36 (id=2451): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x6) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3m52.332600496s ago: executing program 37 (id=2452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 16.694920311s ago: executing program 8 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 15.537569374s ago: executing program 8 (id=2884): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0x0, 0x208, 0xffffffff, 0x2f8, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 13.634152397s ago: executing program 8 (id=2885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 13.157010378s ago: executing program 9 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 10.160206506s ago: executing program 6 (id=2894): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0xfffff49b, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffdf2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9.040317256s ago: executing program 9 (id=2895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 8.443202624s ago: executing program 6 (id=2897): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6.944098982s ago: executing program 9 (id=2899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 5.631016296s ago: executing program 7 (id=2900): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0002}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) 5.537043919s ago: executing program 6 (id=2901): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000001500)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYBLOB="2c66fefb470f721c43121ffc27a11d06c5e375d3b012410fe2f581d9ab30ed7131b91b6b0f1e794ab538fc85c0e03ce4f240db8fb4df78f32f2a76bc249b005c9bf5f55e1b49ee2da6f492d1ce0125c401c16ee7b7a157a4953c188c2bec6580362f7990f88bb2a8bd1317c025029c13b5271b580b16cf04ff7dd9e16ff2dcee46633afb43c98a675be2f2b4d9ae978a89c2754836e7af8d9a55309f8c0000", @ANYRES8, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYBLOB="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", @ANYRESOCT], 0x5, 0xc29, &(0x7f00000008c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_socket_connect_nvme_tcp() sendmsg(r1, 0x0, 0x44040041) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2a, 0x347, &(0x7f0000000880)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$inet6_tcp(0xa, 0x1, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 4.334231653s ago: executing program 7 (id=2902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioprio_get$pid(0x3, 0x0) 4.2633948s ago: executing program 9 (id=2903): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=r4, @ANYRESDEC], 0x20) 3.14377009s ago: executing program 7 (id=2904): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) ioctl$COMEDI_LOCK(r0, 0x6405) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x1508, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x8}, 0x4, 0x1, 0x1, 0xc, 0x1b, 'syz1\x00', "2c2ab4d3dd31b49cf02ce9427abfe4621f75102e271e84246d9a56f9942b2dcd", "0160d107ad0330e39d3639a9419c926192c56afe282eee7e7d8094fef80304e5", [{0xfffd, 0x14a0, {0x1, 0x9}}, {0x3}, {0x9, 0x20, {0x0, 0x4}}, {0x3, 0x0, {0x1, 0x4}}, {0x9, 0x2, {0x2, 0x2}}, {0x1, 0x696a, {0x3, 0x8}}, {0x0, 0x6, {0x1, 0xfff}}, {0x89f6, 0x1, {0x7, 0x5}}, {0x6, 0x8, {0x3, 0x4}}, {0x401, 0x5, {0x3, 0x6}}, {0xb, 0xb0a0, {0x0, 0x3}}, {0x3, 0x9, {0x2, 0xd8e}}, {0x4, 0x9, {0x3, 0x3}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xe, 0x2, {0x0, 0xc}}, {0x4, 0x9, {0x3}}, {0x3, 0x1, {0x3, 0x8}}, {0x101, 0x5, {0x2, 0x6}}, {0x7, 0x1000, {0x2, 0x460}}, {0x20e, 0x5, {0x0, 0x7fff}}, {0xbc9, 0xb, {0x1, 0xff}}, {0x0, 0x1, {0x2, 0xb}}, {0x7, 0x401, {0x3, 0x5}}, {0x5, 0x10, {0x0, 0x10001}}, {0x8, 0x0, {0x3, 0xae}}, {0x80, 0x9, {0x2, 0x6}}, {0x7fc0, 0x7, {0x2, 0x3}}, {0x101, 0x101, {0x2, 0x3}}, {0x1, 0xfff9, {0x2, 0x4}}, {0x7, 0x400, {0x2}}, {0x9, 0xb0, {0x1, 0x4}}, {0x7ff, 0xb438, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x5}}, {0xa0e, 0x6, {0x1, 0x2}}, {0x4, 0x7, {0x2, 0x3}}, {0x9, 0x0, {0x0, 0x5}}, {0x768f, 0xd, {0x0, 0x1}}, {0x200, 0x0, {0x2, 0x4}}, {0x6, 0x2, {0x0, 0x8}}, {0xa8d8, 0x800, {0x2, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x2, 0x5, 0x39, 0x800, 0x6, 'syz1\x00', "9fc52f6daecb2651ede80bfbaf0169f27357dfaf59e3f49647fda1a9d37843fc", "559bbf6debe2ebfdd525ea32a68c5783d8996045641a1172c381199cf4a1a5d1", [{0x1800, 0x2, {0x3, 0x8bf1}}, {0x4, 0x5}, {0x8, 0x2, {0x3}}, {0x3, 0x8, {0x1, 0xd}}, {0x6, 0x2, {0x0, 0x5}}, {0x8, 0x7f, {0x3, 0x1}}, {0xffff, 0x7, {0x3, 0x2}}, {0x0, 0x9, {0x0, 0x1}}, {0x7, 0x8, {0x1, 0x3}}, {0x3, 0x3, {0x2, 0x7fffffff}}, {0x0, 0x6, {0x0, 0x3}}, {0x800, 0x0, {0x1, 0x8}}, {0xffff, 0x1, {0x1, 0x1}}, {0x60c2, 0x3, {0x1, 0x1ff}}, {0x3, 0x6, {0x2, 0xa0d}}, {0x4, 0x6, {0x0, 0x6}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x5}}, {0xb3, 0x8, {0x2, 0x4332d02f}}, {0x3, 0x29, {0x1, 0xfffffffa}}, {0x2, 0x0, {0x1, 0x100}}, {0x7, 0x2, {0x0, 0x101}}, {0xfff8, 0x6, {0x1, 0xc}}, {0x3ff, 0x6, {0x0, 0x2}}, {0xd, 0x5, {0x0, 0x7}}, {0x2, 0x7, {0x1, 0x800000}}, {0xa2, 0x4, {0x3, 0x1ff}}, {0x56, 0x7, {0x1, 0x87b2}}, {0x5, 0x5, {0x2}}, {0xffff, 0x800, {0x0, 0x100}}, {0x5, 0x1, {0x2, 0x101}}, {0x0, 0x5, {0x2, 0x7e70}}, {0x4, 0x9088, {0x3, 0xb31}}, {0x7fff, 0x2, {0x0, 0x2}}, {0x2, 0x535, {0x1, 0x7}}, {0x81, 0x9f, {0x0, 0x8d2}}, {0x25a0, 0xfc5b, {0x2, 0x1}}, {0x100, 0xfffb, {0x1}}, {0x9, 0x80, {0x0, 0x2}}, {0x9, 0x8, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xb249}, 0xe, 0x3, 0xffff, 0x3fe1, 0x1e, 'syz1\x00', "9adaa18042571dea59f5204a8800ce87b0b7e7afb9f4dc385a5a8ebf9f8dce8a", "79f5a09f8ca8fec775d971787dc27a5510fa497f9c6fbd78cc2f86f2f3a27f3b", [{0x8, 0x7, {0x1, 0x2c00}}, {0x100, 0x4180, {0x3, 0x1000}}, {0x4, 0x9, {0x0, 0x81}}, {0x100, 0x3, {0x0, 0x4}}, {0x9a, 0x0, {0x1}}, {0x7ff, 0xfff, {0x3, 0x100}}, {0x2c00, 0x0, {0x3, 0x9}}, {0x3, 0x3bbf, {0x0, 0x9}}, {0x7, 0x117, {0x2, 0x7fffffff}}, {0x2, 0x4, {0x0, 0x7}}, {0x76, 0x0, {0x0, 0x400}}, {0x81, 0x121, {0x3, 0x8e}}, {0x1, 0x0, {0x3, 0x6}}, {0x0, 0x4, {0x3, 0x9}}, {0xfffd, 0x4120}, {0x1ff, 0xa18c, {0x1, 0xa}}, {0x9, 0x0, {0x2, 0xd0000000}}, {0x3183, 0x400, {0x1, 0x8}}, {0xffff, 0x17f5, {0x0, 0x8c45}}, {0x46b, 0x3ff, {0x0, 0x41806f89}}, {0x1, 0x2, {0x0, 0x1}}, {0x7, 0x8, {0x3, 0x800000}}, {0x2, 0x200, {0x1, 0x3}}, {0x7, 0xa, {0x1, 0x6}}, {0x1, 0x5, {0x3, 0x926a}}, {0x5, 0x0, {0x3, 0x767}}, {0x6, 0x7f, {0x3, 0x3}}, {0x5, 0x1, {0x2}}, {0x6, 0x9, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x7}}, {0x3, 0x502, {0x0, 0x5}}, {0x9, 0x80, {0x3, 0x9}}, {0x6, 0xbe, {0x0, 0x4}}, {0x800, 0x4, {0x3, 0x8000}}, {0x7fff, 0xc}, {0xb, 0xfff8, {0x1, 0x2}}, {0x7, 0x7, {0x0, 0x3}}, {0x9, 0xdf, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0xffffffff}}, {0x3, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0xfe, 0x3, 0x9c25, 0x8, 0x26, 'syz0\x00', "4886d29e77655b438621e28bc67f52dab4cc155bac1840a853b099076563ea73", "2dac0df0cdd4197241fab61e2c24aa339c6bdcbc99501e276caf677cd82587c8", [{0x800, 0x7ff, {0x2, 0x1}}, {0x8, 0x7, {0x1, 0x5}}, {0xff68, 0x217f, {0x3, 0x7f}}, {0x5c, 0x5, {0x0, 0x6}}, {0x8001, 0x3, {0x1}}, {0x6, 0xa, {0x1, 0xf0000000}}, {0x81, 0xfffd, {0x2, 0x5}}, {0x1, 0x0, {0x2, 0xfae}}, {0x9, 0x8, {0xd14d209d1884419, 0x4}}, {0x50a2, 0x0, {0x0, 0x6}}, {0x9, 0x5, {0x3, 0x6}}, {0x1ce5, 0x1, {0x1, 0x8}}, {0x1, 0x4ce, {0x1, 0x1}}, {0xe317, 0x6, {0x1, 0x1a}}, {0x769d, 0x0, {0x0, 0x7fff}}, {0x5, 0x0, {0x0, 0xb4c9}}, {0x87f, 0x40, {0x3}}, {0x2, 0x100, {0x3, 0x5}}, {0x8, 0x9, {0x2, 0x5}}, {0x101, 0x6, {0x1, 0x6}}, {0x2, 0x101, {0x3, 0x40}}, {0x485e, 0x7, {0x0, 0x4}}, {0x5, 0x8000, {0x3, 0x3712}}, {0x3, 0xd8, {0x1, 0xc}}, {0x0, 0x3, {0x0, 0x875}}, {0xc, 0x200, {0x3, 0x8}}, {0x5, 0xfffa, {0x0, 0x7ff}}, {0x0, 0xcc1, {0x2, 0x2}}, {0x90fc, 0x9, {0x2, 0xffffffff}}, {0x7, 0x1, {0x2, 0x1}}, {0xa, 0x0, {0x3, 0xd}}, {0x9, 0xfffd, {0x2, 0x1}}, {0x9, 0x0, {0xd20c460d8476fc89, 0xfffffffd}}, {0xce, 0x0, {0x3, 0x9}}, {0x5, 0x4, {0x3, 0x7}}, {0x2e, 0x205a, {0x0, 0x1}}, {0x2, 0x3, {0x3, 0xc}}, {0x8, 0x8, {0x3, 0x7}}, {0x4, 0xb, {0x1, 0x4}}, {0xfff9, 0x0, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x5, 0x7, 0x4, 0xd, 0xe, 'syz1\x00', "378c9251613448636ec37d8d9dd05e6ec1013de1c3ad37742b3ae1f74d7a483d", "16b067138357e0909d50f56156f63a1595678155f0da62a386d9e43d80cc7ea1", [{0x101, 0x4, {0x0, 0x1}}, {0x7f, 0xad, {0x2, 0x7}}, {0xfffa, 0x3, {0x0, 0x1}}, {0x3ff, 0xa, {0x2, 0x9}}, {0x2, 0x6, {0x3, 0x7f}}, {0x9, 0x9, {0x0, 0x9}}, {0x0, 0x9, {0x2, 0x5}}, {0x5, 0x3, {0x0, 0x5}}, {0x101, 0xfff, {0x3, 0x7fffffff}}, {0x3, 0x9, {0x3, 0x7}}, {0x4, 0xbf2, {0x3, 0x8}}, {0xa0, 0x9, {0x1, 0x3ff}}, {0x4, 0x3, {0x3, 0x3}}, {0x7, 0x401, {0x1, 0x31}}, {0x2, 0x5, {0x3, 0x6a9f}}, {0x9, 0x2, {0x1, 0x9}}, {0x8, 0x2, {0x0, 0xe}}, {0xfff9, 0xf982, {0x2, 0x1}}, {0x6, 0x9, {0x1, 0x8e9}}, {0xeb, 0x9001, {0x0, 0x6}}, {0xffff, 0xe1, {0xfb554788f9dac68d}}, {0x7f, 0x3, {0x0, 0x603}}, {0x6, 0x4, {0x3, 0x800}}, {0x5, 0x81, {0x3, 0x8}}, {0x8, 0x523e, {0x3, 0x2}}, {0x8, 0x9b6, {0x0, 0x4ec0}}, {0x5, 0x3, {0x2, 0x200}}, {0xecf, 0x4, {0x2, 0x2}}, {0x8, 0xffff, {0x0, 0x800}}, {0x6, 0xc000, {0x0, 0x2412}}, {0x9, 0x5, {0x0, 0x80}}, {0x9, 0x1, {0x2, 0x2}}, {0x1, 0xfffc, {0x1, 0xd}}, {0x7, 0x3, {0x1, 0x81}}, {0xa, 0x4, {0x2, 0x800}}, {0xde0f, 0x3, {0x0, 0x1}}, {0x3, 0x8, {0x1, 0xea26}}, {0xb999, 0x800, {0x7c48ba8a6319ef8e, 0x8}}, {0x2, 0x7, {0x2, 0x8}}, {0x0, 0x1ff, {0x4, 0xfff}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xff, 0x3, 0x1, 0x75c0, 0x12, 'syz1\x00', "27c357d600d6e0ce33e318b4a9445dc21dd01a1a893f7cafddf3ab22c7654ac5", "502e137d0dcce16db6a5db2b658b3e81cdce03f39f972ebf9d7668c80d5124b3", [{0x7ff, 0x8000, {0x1, 0x3}}, {0x6, 0x7, {0x0, 0x8000}}, {0x80, 0x3, {0x3, 0x2}}, {0x9, 0x10, {0x3, 0x8}}, {0x4, 0x5, {0x2, 0xfd2}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xffff, 0xf, {0x3, 0x4}}, {0x7db, 0x8001, {0x0, 0x40}}, {0x8, 0x100, {0x0, 0x3}}, {0x7, 0x80f, {0x2, 0x1ff}}, {0x9, 0x2, {0x3, 0xffffffbe}}, {0xcc66, 0x6, {0x9fc5eccf7c7a9e07, 0x4}}, {0x5, 0x6, {0x3, 0x3}}, {0xfffb, 0x6, {0x0, 0x1000}}, {0xb, 0x1, {0x0, 0x4}}, {0xf, 0xff, {0x2, 0x80000000}}, {0x2, 0x8, {0x3, 0xfffffffa}}, {0xc, 0x1000, {0x2, 0x9}}, {0x8, 0x9598, {0x3, 0x5}}, {0x5, 0x10, {0x1, 0x101}}, {0x9, 0x2, {0x1, 0x73d}}, {0xbf6e, 0x7ff, {0x0, 0x8e}}, {0x3, 0xa, {0x1, 0xfffffff7}}, {0x3, 0x1, {0x2, 0x9}}, {0x400, 0xf800, {0x2, 0x7}}, {0x4, 0x8000, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x6}}, {0x4, 0x5f83, {0x3, 0x3}}, {0x0, 0x3, {0x3, 0xc8}}, {0x9dc, 0xbdc, {0x2, 0x7}}, {0x41fa, 0xf, {0x1, 0x9a}}, {0x3, 0x5, {0x2, 0x144}}, {0xfffd, 0xe, {0x3, 0x10001}}, {0x9, 0xc, {0x2, 0xb}}, {0x0, 0xfff8, {0x1, 0x1}}, {0xa, 0x101, {0x3, 0xfff}}, {0x8, 0x7, {0x2, 0x1}}, {0xe, 0x0, {0x2, 0x7ff}}, {0x7f17, 0x6, {0x1, 0x81}}, {0x295, 0x11, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x40b4}, 0x40, 0xb, 0x2, 0x8, 0x15, 'syz0\x00', "d87f3eba32db69e75efbee28a08cc128db73a387206beb408720a810453e9647", "23e26a05842faf629ba616fe3e6072d5c3f9d05ecf26692ec898ccda1575db65", [{0x6, 0x8000, {0x0, 0x5}}, {0x5, 0x9, {0x0, 0xe0}}, {0x6, 0x200, {0x2, 0x5}}, {0x6cd6, 0x401, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0xfffffffc}}, {0x6fe1, 0x6, {0x0, 0x6}}, {0x0, 0x94, {0x2, 0x1}}, {0x1, 0x6, {0x3, 0x400}}, {0xf800, 0x100, {0x0, 0x6}}, {0x8, 0x200, {0x1}}, {0x3, 0x83, {0x3, 0x2}}, {0x831b, 0x5, {0x1, 0xc5d8}}, {0x2, 0xf, {0x3, 0x7}}, {0xe, 0x1ff, {0x1, 0x9}}, {0x5, 0x9}, {0x401, 0x3, {0x3, 0xf}}, {0x10, 0x5, {0x0, 0xff}}, {0xd454, 0x1000, {0x1, 0x5}}, {0x772, 0x6, {0x3, 0x4}}, {0x7ff, 0x8000, {0x3, 0x9}}, {0xde6e, 0x1, {0x2, 0x80}}, {0x0, 0x1, {0x0, 0x4}}, {0x4, 0x5, {0x0, 0x7fffffff}}, {0x4, 0x2, {0x2, 0x9}}, {0xbd82, 0x0, {0x2, 0x9}}, {0xfc01, 0x6, {0x3, 0x8}}, {0x1, 0x5b1c, {0x3, 0xffffcfd0}}, {0x5, 0x8, {0x1, 0x6}}, {0x9, 0x5, {0x1, 0xfffffffd}}, {0x3ff, 0x7, {0x2, 0x101}}, {0x7fff, 0x2, {0x0, 0x7}}, {0x7f, 0x4, {0x0, 0x5}}, {0x3a, 0x7, {0x1, 0x200000}}, {0x7fff, 0x5, {0x1, 0x6}}, {0x8, 0x8, {0x2, 0x8}}, {0xf, 0x5acf, {0x3}}, {0x5, 0x5, {0x0, 0xbec}}, {0x2, 0x1, {0x2, 0x3ff}}, {0x3e, 0xff96, {0x3, 0xa6e}}, {0xa, 0x4, {0x1, 0x100}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x5, 0xf7, 0x691, 0x1, 0x24, 'syz0\x00', "0ce49199bc82ed5d11140ca6c16756c2ac9e589211c032479334e80446a05786", "ca162a19c3255c23dca9a13f911ce4bb9a195787ca0713d9e9a9c7e8efc7ec5a", [{0x1, 0x7, {0x3, 0x2}}, {0x6, 0x401, {0x2, 0x6}}, {0x2eb, 0x9d27, {0x3, 0x8}}, {0x3, 0x56, {0x1, 0x4}}, {0x4, 0xa59d, {0x1, 0xe46}}, {0xfffd, 0xf77c, {0x0, 0xa}}, {0xfffc, 0x3eef, {0x2, 0x4}}, {0x7, 0x9, {0x1, 0x9}}, {0x2, 0xfff, {0x1, 0xfffffff7}}, {0x5, 0xffff, {0x1, 0xb03a}}, {0x7ff, 0xff, {0x0, 0x8}}, {0x5, 0x8, {0x0, 0x8001}}, {0x3, 0x2, {0x1, 0x4}}, {0x7, 0x401, {0x0, 0x7fffffff}}, {0x1, 0x5, {0x1, 0x7}}, {0x149, 0x6}, {0x8001, 0x8, {0x1, 0x7fff}}, {0x0, 0x4, {0x3}}, {0x4, 0x6, {0x1}}, {0x3, 0x9, {0x2, 0x2}}, {0x8e3, 0x7fff, {0x2, 0x38}}, {0xfffa, 0x1, {0x0, 0x8}}, {0x2, 0x3, {0x1, 0x77}}, {0x100, 0xec4, {0x387ab4415f93248f, 0x9}}, {0x3, 0x2, {0x1, 0x9}}, {0x4, 0x4, {0x3, 0xfff}}, {0x4, 0x1, {0x2}}, {0x101, 0xa, {0x2, 0x100}}, {0x6, 0x9, {0x2, 0x8}}, {0x365e, 0xffff, {0x2, 0x7}}, {0x4, 0x3, {0x3, 0x9}}, {0x7, 0xbd1, {0x2, 0x7}}, {0x2, 0x8000, {0x3, 0x5}}, {0x6, 0xff, {0x2, 0x7}}, {0x240, 0x7, {0x1, 0xc3}}, {0x4087, 0x10, {0x3, 0x2}}, {0xc, 0x800, {0x0, 0x367}}, {0xfff7, 0xf, {0x2, 0x1}}, {0x6, 0x1, {0x3, 0xc525}}, {0x0, 0x0, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x8, 0x1, 0x9, 0x7, 0x26, 'syz1\x00', "01b022b776924a7d9f233f423e0033e91c9774478cabe0f0514b59a9e1580c12", "9e2f42fbe6c1937e283d9f0581250ffe2b1e2c9e7055e984c83887ff46ba5fbf", [{0x4, 0x2143, {0x2, 0x7}}, {0x65a, 0x40, {0x3, 0x10000}}, {0x9711, 0x7, {0x0, 0xff}}, {0x9, 0x40, {0x1, 0x6}}, {0x0, 0x9, {0x3, 0x3}}, {0x800, 0x0, {0x2, 0x7}}, {0x3, 0x8000, {0x2, 0xffff0000}}, {0x6, 0xe9be, {0x2, 0xfffffffb}}, {0x4250, 0x5, {0x0, 0x1f}}, {0x5, 0x8001, {0x0, 0x7}}, {0x5, 0x2, {0x0, 0xffffffff}}, {0x7, 0xd, {0x3, 0xfffffff9}}, {0x150, 0x89a, {0x1, 0x9}}, {0x6, 0x5, {0x1, 0x6}}, {0x5, 0xc, {0x2, 0xfffffff7}}, {0x401, 0x81, {0x1, 0x101}}, {0x7ff, 0x3, {0x2, 0x7c}}, {0x6aae, 0x1, {0x2, 0x2}}, {0x5, 0x81, {0x4, 0x2}}, {0x2, 0x98f, {0x3, 0x2c1}}, {0x0, 0x9, {0x1, 0x1ff}}, {0x7f, 0x7, {0x0, 0x8}}, {0xff, 0x80, {0x3, 0x5}}, {0x8, 0x6, {0x1, 0x5}}, {0x40, 0x7, {0x1, 0x400}}, {0x1000, 0x7, {0x1, 0xb}}, {0x6, 0x101, {0x1, 0xf}}, {0x8, 0xfbb, {0x3, 0x1}}, {0x8, 0x6, {0x2, 0x8000}}, {0x9, 0x6, {0x3, 0x3ff}}, {0xf, 0xfffc, {0x2, 0x2c2}}, {0x9, 0x2, {0x2, 0x4}}, {0xff9d, 0x9, {0x3, 0x3}}, {0x5, 0xdcc, {0x2, 0xe}}, {0x9, 0x0, {0x2, 0xe}}, {0xb, 0x0, {0x1, 0x101}}, {0x40, 0x4, {0x1, 0x6}}, {0x9, 0x8, {0x2, 0xff}}, {0x9, 0x9, {0x2, 0x81}}, {0x3, 0x3, {0x2, 0x20002000}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000480)={0x119, 0x0, 'client0\x00', 0x0, "238ce6e7702b9338", "a62585ae77772caa7965bb840c7f2db4f3b148f5dc746d2d46fc3b04b44115e0", 0x1, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000002140)={{0x7, 0x8}, {0x8, 0x8}, 0x8, 0x3, 0x8}) syz_emit_ethernet(0x56, &(0x7f0000000340)={@link_local, @random="0000fc00f5d6", @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4e, 0x1, 0x4, [{@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0xe5, 0x3, 0x2}, @generic={0x86, 0x2}, @lsrr={0x83, 0x17, 0xb7, [@empty, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @private=0xa010101, @broadcast]}]}}, {0x11, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) 3.14270433s ago: executing program 9 (id=2905): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) pause() syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 2.987920991s ago: executing program 6 (id=2906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004c094) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 2.809584007s ago: executing program 7 (id=2907): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) unshare(0x2c020400) socket$inet6_mptcp(0xa, 0x1, 0x106) fsmount(r2, 0x0, 0x0) r3 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 2.657570388s ago: executing program 8 (id=2908): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000bd000000000000009500000000000000622e29cfa01e0b9114434b24fb8806c66b355a2d03d8d634438d2f55d655f5ea605e621e4784118dda8efb7ef39e77e7c4b31010149ec35435a813140af672a1c23e485f9ffdef026f97df63e28bc93e6c30cdc3787807260a6829f3aff2fdb1dbefe914fa680982e4b4ad4b45d030c1ec26b48d73ceb51b"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.725758964s ago: executing program 9 (id=2909): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x2) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/210, 0xd2}], 0x1) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.686076026s ago: executing program 6 (id=2910): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x4, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x0, r3}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 1.565217144s ago: executing program 7 (id=2911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) 1.484825639s ago: executing program 8 (id=2912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) 121.818223ms ago: executing program 7 (id=2913): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x80, 0x0}, 0x0, 0x8010, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 111.713491ms ago: executing program 8 (id=2914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfd, 0x2, @loopback}, 0x1c) 0s ago: executing program 6 (id=2915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioprio_get$pid(0x3, 0x0) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.0.1472'. [ 382.279861][ T5083] Bluetooth: hci1: command tx timeout [ 382.317159][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 382.739286][T10415] kvm: pic: non byte read [ 382.744961][T10415] kvm: pic: single mode not supported [ 382.745117][T10415] kvm: pic: non byte read [ 382.761257][T10415] kvm: pic: non byte read [ 382.766028][T10415] kvm: pic: non byte read [ 382.778088][T10415] kvm: pic: non byte read [ 382.783791][T10415] kvm: pic: single mode not supported [ 382.784091][T10415] kvm: pic: level sensitive irq not supported [ 382.792615][T10420] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 382.799880][T10415] kvm: pic: non byte read [ 382.819895][T10415] kvm: pic: level sensitive irq not supported [ 382.819971][T10415] kvm: pic: non byte read [ 382.835294][T10415] kvm: pic: single mode not supported [ 382.835374][T10415] kvm: pic: non byte read [ 382.846959][T10415] kvm: pic: non byte read [ 383.042976][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 383.159765][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 383.201892][T10431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.553300][T10443] ptrace attach of "./syz-executor exec"[10444] was attempted by "./syz-executor exec"[10443] [ 384.338980][ T8128] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 384.359324][ T5083] Bluetooth: hci1: command tx timeout [ 384.539268][ T8128] usb 6-1: Using ep0 maxpacket: 16 [ 384.560351][ T8128] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 384.574911][ T8128] usb 6-1: config 1 has no interface number 1 [ 384.581236][ T8128] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 384.609137][ T8128] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 384.622689][ T8128] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.637509][ T8128] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.647293][ T8128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.655732][ T8128] usb 6-1: Product: syz [ 384.660397][ T8128] usb 6-1: Manufacturer: syz [ 384.665057][ T8128] usb 6-1: SerialNumber: syz [ 384.708286][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.788052][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.074963][T10449] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.085665][T10449] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.095526][T10449] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.105769][T10449] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.140094][ T8128] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 385.324908][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1495'. [ 385.466240][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 385.545382][T10460] netlink: 340 bytes leftover after parsing attributes in process `syz.5.1496'. [ 385.639488][T10465] veth0_vlan: left promiscuous mode [ 385.661882][T10465] veth0_vlan: entered promiscuous mode [ 385.774034][ T8128] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 385.973241][ T8128] usb 6-1: USB disconnect, device number 2 [ 386.613272][T10482] (null): rxe_set_mtu: Set mtu to 1024 [ 386.746716][ T5083] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 387.913589][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.003273][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.032903][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.231050][T10482] infiniband syz2: set down [ 389.241186][T10482] infiniband syz2: added ip6_vti0 [ 389.265476][T10482] syz2: rxe_create_cq: returned err = -12 [ 389.276926][ T5862] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.287365][T10482] infiniband syz2: Couldn't create ib_mad CQ [ 389.299705][T10482] infiniband syz2: Couldn't open port 1 [ 389.408159][T10482] RDS/IB: syz2: added [ 389.417912][T10482] smc: adding ib device syz2 with port count 1 [ 389.429258][T10482] smc: ib device syz2 port 1 has pnetid [ 389.444377][ T5862] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.457819][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.517392][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1504'. [ 389.529478][T10489] lo: entered promiscuous mode [ 389.534847][T10489] lo: entered allmulticast mode [ 389.790954][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.799104][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 389.807423][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 389.960042][T10508] ceph: No mds server is up or the cluster is laggy [ 390.003464][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.257959][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.481892][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.648303][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.789222][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.842420][ T5083] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 390.858966][ T5083] Bluetooth: hci2: Injecting HCI hardware error event [ 390.869791][ T51] Bluetooth: hci2: hardware error 0x00 [ 390.962119][T10482] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.280452][T10519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 391.314616][T10525] bridge_slave_0: left allmulticast mode [ 391.333626][T10525] bridge_slave_0: left promiscuous mode [ 391.345824][T10519] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 391.361463][T10525] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.420684][T10525] bridge_slave_1: left allmulticast mode [ 391.452286][T10525] bridge_slave_1: left promiscuous mode [ 391.471797][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.533540][T10525] bond0: (slave bond_slave_0): Releasing backup interface [ 391.573274][T10525] bond0: (slave bond_slave_1): Releasing backup interface [ 391.663699][T10525] team0: Port device team_slave_0 removed [ 391.691560][T10525] team0: Port device team_slave_1 removed [ 391.705398][T10525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.713168][T10525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.724243][T10525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.732631][T10525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.086896][T10536] tmpfs: Bad value for 'nr_blocks' [ 392.919101][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 393.189072][ T8135] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 393.211925][T10552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 393.344644][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 393.397977][ T8135] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 393.408268][ T8135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.425881][ T8135] usb 6-1: config 0 descriptor?? [ 393.441662][ T8135] cp210x 6-1:0.0: cp210x converter detected [ 393.886268][ T8135] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 394.245393][ T8135] usb 6-1: cp210x converter now attached to ttyUSB0 [ 394.477853][ T8135] usb 6-1: USB disconnect, device number 3 [ 394.769780][ T8135] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.828122][ T8135] cp210x 6-1:0.0: device disconnected [ 394.900776][T10567] team0: Port device team_slave_0 removed [ 394.956494][T10573] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.283186][T10583] loop5: detected capacity change from 0 to 256 [ 397.176843][T10600] siw: device registration error -23 [ 397.691877][T10610] tmpfs: Bad value for 'mpol' [ 397.713392][T10610] mmap: syz.0.1544 (10610): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 403.191513][ T6195] kernel read not supported for file inotify (pid: 6195 comm: kworker/0:5) [ 404.106442][T10735] netlink: 'syz.5.1585': attribute type 1 has an invalid length. [ 404.243385][T10735] bond1: entered promiscuous mode [ 404.248584][T10735] bond1: entered allmulticast mode [ 404.290198][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'. [ 404.325492][T10735] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 404.363039][T10735] bond1: (slave bridge1): making interface the new active one [ 404.508588][T10735] bridge1: entered promiscuous mode [ 404.532209][T10735] bridge1: entered allmulticast mode [ 404.582609][T10735] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 404.682731][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1585'. [ 404.723057][T10737] bond1: left promiscuous mode [ 404.746848][T10737] bridge1: left promiscuous mode [ 404.762567][T10737] bond1: left allmulticast mode [ 404.779133][T10737] bridge1: left allmulticast mode [ 404.799424][T10737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.970765][T10764] (null): rxe_set_mtu: Set mtu to 512 [ 405.977189][T10764] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 408.495779][T10805] bridge_slave_1: left allmulticast mode [ 408.529036][T10805] bridge_slave_1: left promiscuous mode [ 408.541717][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.599890][T10805] bridge_slave_0: left allmulticast mode [ 408.605608][T10805] bridge_slave_0: left promiscuous mode [ 408.650184][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.239612][T10821] ip6_vti0 speed is unknown, defaulting to 1000 [ 410.269530][T10823] veth0_vlan: left promiscuous mode [ 410.279945][T10823] veth0_vlan: entered promiscuous mode [ 410.308717][T10822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.331152][T10822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.435716][T10816] netlink: 'syz.2.1620': attribute type 10 has an invalid length. [ 410.448317][T10816] team0: Port device dummy0 added [ 410.856926][T10830] team0: Port device team_slave_0 removed [ 410.901871][T10830] team0: Port device team_slave_1 removed [ 410.926808][T10830] bond1: (slave veth0_virt_wifi): Releasing active interface [ 410.963438][T10830] bond1: (slave veth3): Releasing active interface [ 411.001991][T10830] bond3: (slave ip6gretap1): Releasing backup interface [ 411.031631][T10830] ip6gretap1: left allmulticast mode [ 411.577383][T10825] syz.5.1612 (10825): drop_caches: 2 [ 413.149083][T10857] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.654457][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 413.654473][ T28] audit: type=1326 audit(1772768229.725:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x0 [ 413.997409][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1624'. [ 414.084251][T10875] lo: entered promiscuous mode [ 414.096366][T10875] lo: entered allmulticast mode [ 414.350389][T10877] syzkaller0: entered promiscuous mode [ 414.355956][T10877] syzkaller0: entered allmulticast mode [ 421.158419][ T28] audit: type=1326 audit(1772768237.185:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.258006][ T28] audit: type=1326 audit(1772768237.185:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.363877][ T28] audit: type=1326 audit(1772768237.185:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.450661][ T28] audit: type=1326 audit(1772768237.185:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.541028][ T28] audit: type=1326 audit(1772768237.185:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.570103][ T28] audit: type=1326 audit(1772768237.185:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.601621][ T28] audit: type=1326 audit(1772768237.185:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.647805][ T28] audit: type=1326 audit(1772768237.185:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.705589][ T28] audit: type=1326 audit(1772768237.185:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.742992][ T28] audit: type=1326 audit(1772768237.185:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 421.769236][T10917] IPVS: Scheduler module ip_vs_ not found [ 422.404671][T10930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1647'. [ 422.461607][T10935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1647'. [ 422.682072][T10935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1647'. [ 422.897529][T10936] loop5: detected capacity change from 0 to 512 [ 422.991271][T10936] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 423.038889][T10936] EXT4-fs (loop5): group descriptors corrupted! [ 425.399916][ T5862] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 425.588914][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 425.597004][ T5862] usb 6-1: config 222 has an invalid interface number: 31 but max is 0 [ 425.610805][ T5862] usb 6-1: config 222 has no interface number 0 [ 425.617248][ T5862] usb 6-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 425.633908][ T5862] usb 6-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 425.646177][ T5862] usb 6-1: config 222 interface 31 has no altsetting 0 [ 425.665522][ T5862] usb 6-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 425.678660][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.690625][ T5862] usb 6-1: Product: syz [ 425.694945][ T5862] usb 6-1: Manufacturer: syz [ 425.711224][ T5862] usb 6-1: SerialNumber: syz [ 425.728261][T10987] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 426.159979][ T5862] ldusb 6-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 426.202294][ T5862] usb 6-1: USB disconnect, device number 4 [ 426.977506][ T5862] ldusb 6-1:222.31: LD USB Device #0 now disconnected [ 428.473298][T11039] ax25_connect(): syz.5.1678 uses autobind, please contact jreuter@yaina.de [ 428.747127][T11033] IPVS: Scheduler module ip_vs_ not found [ 429.422713][T11059] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.776098][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1685'. [ 429.788620][T11059] lo: entered promiscuous mode [ 429.793742][T11059] lo: entered allmulticast mode [ 430.458269][T11071] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 431.362433][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 431.416110][T11077] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.425428][T11077] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.434418][T11077] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.443358][T11077] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.500549][T11075] IPVS: Scheduler module ip_vs_ not found [ 431.541531][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 432.648044][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 432.688060][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 433.438158][T11099] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.595743][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 434.624788][T11114] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.633584][T11114] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.641890][T11114] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.650232][T11114] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.691648][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 435.189706][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 435.205837][T11099] lo: entered promiscuous mode [ 435.211314][T11099] lo: entered allmulticast mode [ 437.195419][T11171] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 437.221917][T11171] CIFS mount error: No usable UNC path provided in device string! [ 437.221917][T11171] [ 437.232500][T11171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 437.935490][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 438.065193][T11179] overlayfs: failed to clone upperpath [ 438.084164][T11175] bridge0: port 1(veth0_to_bond) entered blocking state [ 438.122911][T11175] bridge0: port 1(veth0_to_bond) entered disabled state [ 438.149178][T11175] veth0_to_bond: entered allmulticast mode [ 438.157367][T11175] veth0_to_bond: entered promiscuous mode [ 440.300989][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 440.406846][T11207] team1: entered promiscuous mode [ 440.454478][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.462063][T11207] team1: entered allmulticast mode [ 440.467336][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.549588][T11268] team0: Device bond0 is already an upper device of the team interface [ 443.569598][T11268] netlink: 'syz.2.1755': attribute type 16 has an invalid length. [ 443.577739][T11268] netlink: 'syz.2.1755': attribute type 17 has an invalid length. [ 443.865906][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 444.321229][T11294] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 446.769280][T11331] xt_TCPMSS: Only works on TCP SYN packets [ 447.364579][T11343] netlink: 'syz.2.1783': attribute type 4 has an invalid length. [ 447.386436][T11339] loop5: detected capacity change from 0 to 2048 [ 447.851436][T11339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.139915][T11339] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.294890][T11339] fs-verity: sha512 using implementation "sha512-avx2" [ 448.507825][T10260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.603216][T11355] syz_tun: entered allmulticast mode [ 448.612173][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 448.643780][T11355] syz_tun (unregistering): left allmulticast mode [ 449.305512][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1786'. [ 452.371148][T11395] overlayfs: failed to clone upperpath [ 452.592265][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 452.592282][ T28] audit: type=1804 audit(1772768268.665:271): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1802" name="file0" dev="ramfs" ino=31485 res=1 errno=0 [ 453.424176][T11410] overlayfs: failed to clone upperpath [ 456.201798][T11430] ip6_vti0 speed is unknown, defaulting to 1000 [ 460.357412][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 460.383349][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 460.495073][T11477] netlink: 'syz.4.1827': attribute type 10 has an invalid length. [ 460.554759][T11479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1828'. [ 460.714344][T11479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1828'. [ 461.325563][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 461.569158][T11490] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 461.587593][T11490] ref_ctr increment failed for inode: 0x929 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078b38980 [ 461.606675][T11489] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 461.616491][T11489] ref_ctr decrement failed for inode: 0x929 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078b38980 [ 461.704783][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 461.822890][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'. [ 461.844299][T11496] bond0: (slave team0): Releasing backup interface [ 461.858458][T11496] team0: Port device dummy0 removed [ 461.866005][T11496] bond0: (slave bond_slave_0): Releasing backup interface [ 461.881930][T11496] bond0: (slave bond_slave_1): Releasing backup interface [ 461.908402][T11496] team0: Port device team_slave_1 removed [ 461.939399][T11496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.953795][T11496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.967704][T11496] bond2: (slave macvlan0): Releasing active interface [ 461.985974][T11496] bond0: (slave wlan1): Releasing backup interface [ 461.998185][T11496] bond1: (slave ip6erspan0): Releasing active interface [ 462.013993][T11496] bond5: (slave bond6): Releasing backup interface [ 462.029757][T11496] bond5: (slave bond6): the permanent HWaddr of slave - 0e:36:0e:b7:6e:b9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 462.051263][T11496] bond5: (slave gretap1): making interface the new active one [ 462.066275][T11496] bond5: (slave gretap1): Releasing backup interface [ 462.079868][T11496] bond7: (slave ip6gretap1): Releasing backup interface [ 462.097631][T11496] bond8: (slave ip6gretap2): Releasing backup interface [ 462.125539][T11496] bond9: (slave ip6gretap3): Releasing active interface [ 462.135982][T11496] ip6gretap3: left promiscuous mode [ 462.146338][T11496] ip6gretap3: left allmulticast mode [ 462.186090][T11495] vlan2: entered promiscuous mode [ 462.198225][T11495] bridge0: entered promiscuous mode [ 462.209942][T11495] vlan2: entered allmulticast mode [ 462.232350][T11499] block device autoloading is deprecated and will be removed. [ 462.279075][T11495] bridge0: entered allmulticast mode [ 462.309106][T11502] block device autoloading is deprecated and will be removed. [ 464.293455][T11534] loop5: detected capacity change from 0 to 128 [ 464.355204][T11534] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.369943][T11534] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 464.518684][T10260] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.759718][T11558] ip6_vti0 speed is unknown, defaulting to 1000 [ 470.353440][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 471.271643][T11577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1861'. [ 471.301926][T11577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1861'. [ 471.742997][T11607] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.994698][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'. [ 472.012792][T11612] loop5: detected capacity change from 0 to 512 [ 473.201497][T11624] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 473.345613][T11624] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 473.440296][T11624] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 473.477273][T11624] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 473.491235][T11624] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 473.513288][T11624] bond10: (slave geneve2): making interface the new active one [ 473.539543][T11624] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 474.993568][T11649] vlan1: entered promiscuous mode [ 475.030209][T11649] bridge0: entered promiscuous mode [ 475.035701][T11649] vlan1: entered allmulticast mode [ 475.076526][T11649] bridge0: entered allmulticast mode [ 475.109003][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 475.215925][T11654] bridge_slave_0: left allmulticast mode [ 475.239194][T11654] bridge_slave_0: left promiscuous mode [ 475.257293][T11654] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.359917][T11654] bridge_slave_1: left allmulticast mode [ 475.382298][T11654] bridge_slave_1: left promiscuous mode [ 475.417157][T11654] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.445440][T11654] bond0: (slave bond_slave_0): Releasing backup interface [ 475.494781][T11654] bond0: (slave bond_slave_1): Releasing backup interface [ 475.529442][T11654] team0: Port device team_slave_1 removed [ 475.535861][T11654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.569084][T11654] bond1: (slave erspan1): Releasing active interface [ 475.592416][T11654] bond3: (slave ip6gretap0): Releasing active interface [ 475.605829][T11654] ip6gretap0: left promiscuous mode [ 475.612075][T11654] ip6gretap0: left allmulticast mode [ 475.650257][T11654] bond4: (slave veth11): Releasing backup interface [ 475.670516][T11654] veth11: left promiscuous mode [ 478.521057][T11712] vlan2: entered promiscuous mode [ 478.701699][T11712] bridge0: entered promiscuous mode [ 478.703263][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 479.488019][T11712] vlan2: entered allmulticast mode [ 479.508969][T11712] bridge0: entered allmulticast mode [ 479.602071][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 479.781790][T11712] bond1: (slave bridge1): Releasing active interface [ 480.570410][T11729] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 480.621929][T11729] 8021q: adding VLAN 0 to HW filter on device bond5 [ 480.718399][T11729] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 480.780984][T11729] bond5: entered allmulticast mode [ 480.828537][T11736] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 480.977277][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1916'. [ 481.232044][T11743] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.307684][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 483.478534][T11769] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 483.539861][T11769] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 483.550645][T11769] bond11: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 483.563966][T11769] bond11: (slave vxcan1): making interface the new active one [ 483.572800][T11769] bond11: (slave vxcan1): Enslaving as an active interface with an up link [ 483.595848][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 483.609294][T11769] bond11 (unregistering): (slave vxcan1): Releasing backup interface [ 483.628452][T11769] bond11 (unregistering): Released all slaves [ 483.977970][T11778] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.457131][T11821] vlan3: entered promiscuous mode [ 487.464062][T11821] bridge0: entered promiscuous mode [ 487.475271][T11821] vlan3: entered allmulticast mode [ 487.482590][T11821] bridge0: entered allmulticast mode [ 487.510830][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 487.565127][T11823] veth0_to_bond: left allmulticast mode [ 487.575051][T11823] veth0_to_bond: left promiscuous mode [ 487.597327][T11823] bridge0: port 1(veth0_to_bond) entered disabled state [ 493.059417][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 493.082459][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1969'. [ 493.141505][ T8119] Process accounting resumed [ 495.074219][T11942] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1983'. [ 495.334549][T11947] Invalid ELF header magic: != ELF [ 495.474919][T11951] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.744860][T11962] overlayfs: failed to clone lowerpath [ 497.210576][T11998] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2005'. [ 498.161623][T12008] ip6_vti0 speed is unknown, defaulting to 1000 [ 499.289521][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 500.755346][T12043] ip_vti0: Master is either lo or non-ether device [ 502.010153][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.016563][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.249014][T12078] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.501950][T12176] veth0_vlan: left promiscuous mode [ 509.675080][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 509.997844][T12184] bridge8: entered promiscuous mode [ 510.019504][T12184] bridge8: entered allmulticast mode [ 510.050560][T12184] team0: Port device bridge8 added [ 510.109760][T12184] bridge0: port 1(team0) entered blocking state [ 510.119321][T12184] bridge0: port 1(team0) entered disabled state [ 510.137216][T12184] team0: entered allmulticast mode [ 510.150790][T12184] team0: entered promiscuous mode [ 510.215406][T12184] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.228535][T12184] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.237949][T12184] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.278962][T12184] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.307998][T12184] geneve2: entered promiscuous mode [ 510.319015][T12184] geneve2: entered allmulticast mode [ 510.397617][T12184] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.427284][T12184] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.458887][T12184] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.488247][T12184] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.590036][T12195] af_packet: tpacket_rcv: packet too big, clamped from 202 to 4294967272. macoff=96 [ 510.839233][T12201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2069'. [ 511.212799][T12208] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.2074'. [ 511.774091][T12224] veth0_vlan: left promiscuous mode [ 511.922593][T12203] overlayfs: failed to resolve './file2': -2 [ 512.736477][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 514.507015][T12260] batadv_slave_0: entered promiscuous mode [ 514.525063][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 514.773671][T12260] batadv_slave_0 (unregistering): left promiscuous mode [ 514.969099][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'. [ 515.316953][T12277] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.035905][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2107'. [ 516.248284][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2107'. [ 518.818634][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 519.027184][T12318] bond0 (unregistering): Released all slaves [ 519.760555][T12338] netlink: 'syz.2.2122': attribute type 39 has an invalid length. [ 519.814324][T12336] team0: Mode changed to "loadbalance" [ 519.861062][T12341] vlan0: entered promiscuous mode [ 519.946628][T12341] team0: Port device vlan0 added [ 520.015001][T12336] tipc: Started in network mode [ 520.032791][T12336] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 520.058891][T12336] tipc: Enabled bearer , priority 0 [ 521.169260][ T8119] tipc: Node number set to 11578026 [ 522.384764][T12366] tipc: Enabling of bearer rejected, already enabled [ 522.406401][T12366] tipc: Enabled bearer , priority 0 [ 522.474955][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 525.210195][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2138'. [ 525.897381][ T51] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 526.022641][ T28] audit: type=1326 audit(1772768342.095:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 526.093392][ T28] audit: type=1326 audit(1772768342.095:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5dcef9c799 code=0x7fc00000 [ 526.257028][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 526.342119][T12422] netlink: 'syz.2.2149': attribute type 5 has an invalid length. [ 526.354865][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'. [ 526.549528][T12426] bond12: entered allmulticast mode [ 526.569391][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 526.663270][T12428] bridge6: entered allmulticast mode [ 526.691475][T12428] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 526.733134][T12430] netlink: 'syz.5.2152': attribute type 1 has an invalid length. [ 526.781296][T12430] bond2: entered promiscuous mode [ 526.786708][T12430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.816532][T12431] bond2: (slave bridge2): making interface the new active one [ 526.824354][T12431] bridge2: entered promiscuous mode [ 526.831007][T12431] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 526.841331][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 526.872764][T12426] bridge7: entered allmulticast mode [ 526.878601][T12426] bond12: (slave bridge7): Enslaving as an active interface with a down link [ 526.894487][T12432] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 526.907641][T12432] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 528.261960][T12450] sch_fq: defrate 0 ignored. [ 529.411169][T12469] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 529.666461][T12473] bond5: (slave gretap2): making interface the new active one [ 529.681514][T12473] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 530.344304][T12475] overlayfs: failed to clone lowerpath [ 530.400885][T12475] overlayfs: failed to clone lowerpath [ 530.442359][T12475] overlayfs: failed to clone upperpath [ 530.595507][T12469] vlan3: entered allmulticast mode [ 530.623785][T12469] bond5: entered allmulticast mode [ 530.644073][T12469] gretap2: entered allmulticast mode [ 530.665131][T12469] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 530.988226][T12483] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 531.972422][ T28] audit: type=1326 audit(1772768348.045:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c45f9c799 code=0x7ffc0000 [ 532.047921][ T28] audit: type=1326 audit(1772768348.045:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c45f9c799 code=0x7ffc0000 [ 532.983647][ T28] audit: type=1326 audit(1772768348.045:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5c45f58bec code=0x7ffc0000 [ 533.328592][ T28] audit: type=1326 audit(1772768348.045:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5c45f58c4e code=0x7ffc0000 [ 533.715633][ T28] audit: type=1326 audit(1772768348.045:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c45f9c42b code=0x7ffc0000 [ 534.025056][ T28] audit: type=1326 audit(1772768348.065:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c45f9c799 code=0x7ffc0000 [ 534.049481][ T28] audit: type=1326 audit(1772768348.065:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c45f9c799 code=0x7ffc0000 [ 534.218511][ T28] audit: type=1326 audit(1772768348.065:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c45f9c799 code=0x7ffc0000 [ 534.343790][ T28] audit: type=1326 audit(1772768348.065:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c45f9c799 code=0x7ffc0000 [ 534.602745][ T28] audit: type=1326 audit(1772768348.065:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.5.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c45f5cfce code=0x7ffc0000 [ 535.384392][T12522] bridge6: entered promiscuous mode [ 535.411775][T12522] bridge6: entered allmulticast mode [ 535.451468][T12522] team0: Port device bridge6 added [ 535.476443][T12528] bridge0: port 1(team0) entered blocking state [ 535.496000][T12528] bridge0: port 1(team0) entered disabled state [ 535.514718][T12528] team0: entered allmulticast mode [ 535.544028][T12528] team0: entered promiscuous mode [ 535.702947][T12532] --map-set only usable from mangle table [ 536.021561][T12530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.308842][T12530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.352864][T12530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.388988][T12530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.397856][T12530] geneve2: entered promiscuous mode [ 536.408837][T12530] geneve2: entered allmulticast mode [ 536.437120][T12530] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.451495][T12530] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.508782][T12530] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.812006][T12530] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.895088][T12541] netlink: 'syz.0.2182': attribute type 7 has an invalid length. [ 538.908285][T12556] xt_policy: output policy not valid in PREROUTING and INPUT [ 539.679738][T12560] fuse: Bad value for 'fd' [ 543.319359][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 543.344844][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2199'. [ 545.965845][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 546.287706][ T8134] kernel write not supported for file bpf-prog (pid: 8134 comm: kworker/0:14) [ 546.901667][T12649] xt_nat: multiple ranges no longer supported [ 548.014136][T12659] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.877053][T12663] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 549.974161][T12663] bond13: entered promiscuous mode [ 549.987274][T12663] 8021q: adding VLAN 0 to HW filter on device bond13 [ 550.053400][T12667] bond13: (slave bridge8): making interface the new active one [ 550.080099][T12667] bridge8: entered promiscuous mode [ 550.086670][T12667] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 550.144660][T12668] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 550.161376][T12668] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 550.543552][T12680] openvswitch: netlink: Message has 4 unknown bytes. [ 551.415773][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 551.505508][T12683] bridge9: port 1(veth7) entered blocking state [ 551.522013][T12683] bridge9: port 1(veth7) entered disabled state [ 551.528971][T12683] veth7: entered allmulticast mode [ 551.537218][T12683] veth7: entered promiscuous mode [ 551.549486][T12683] bridge9: port 1(veth7) entered blocking state [ 551.555905][T12683] bridge9: port 1(veth7) entered forwarding state [ 551.578330][T10043] bridge9: port 1(veth7) entered disabled state [ 551.623661][T12688] bridge9: port 2(veth9) entered blocking state [ 551.631389][T12688] bridge9: port 2(veth9) entered disabled state [ 551.637963][T12688] veth9: entered allmulticast mode [ 551.650260][T12688] veth9: entered promiscuous mode [ 551.656255][T12688] bridge9: port 2(veth9) entered blocking state [ 551.662721][T12688] bridge9: port 2(veth9) entered forwarding state [ 551.690862][T10043] bridge9: port 2(veth9) entered disabled state [ 552.519423][T12694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.320951][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2232'. [ 556.392170][T12718] bridge10: port 1(veth11) entered blocking state [ 556.420295][T12718] bridge10: port 1(veth11) entered disabled state [ 556.506975][T12718] veth11: entered allmulticast mode [ 556.602774][T12718] veth11: entered promiscuous mode [ 557.220447][T12728] bridge10: port 2(veth13) entered blocking state [ 557.268025][T12728] bridge10: port 2(veth13) entered disabled state [ 557.302388][T12728] veth13: entered allmulticast mode [ 557.315348][T12728] veth13: entered promiscuous mode [ 559.272816][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 559.272833][ T28] audit: type=1326 audit(1772768375.345:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.357169][ T28] audit: type=1326 audit(1772768375.345:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.406299][ T28] audit: type=1326 audit(1772768375.345:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.459903][ T28] audit: type=1326 audit(1772768375.345:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.508516][ T28] audit: type=1326 audit(1772768375.345:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.532849][ T28] audit: type=1326 audit(1772768375.345:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.578877][ T28] audit: type=1326 audit(1772768375.345:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.659981][ T28] audit: type=1326 audit(1772768375.375:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.703033][ T28] audit: type=1326 audit(1772768375.375:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 559.749590][ T28] audit: type=1326 audit(1772768375.375:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a9f9c799 code=0x7ffc0000 [ 561.620570][T12804] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2258'. [ 561.636299][T12804] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2258'. [ 561.647651][T12804] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2258'. [ 561.696782][T12806] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 561.780079][T12806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 562.021497][T12810] bond6: (slave gretap3): making interface the new active one [ 562.034565][T12810] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 562.110620][T12815] openvswitch: netlink: Message has 4 unknown bytes. [ 563.327158][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.334054][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.061962][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2272'. [ 567.241318][T12872] xt_TCPMSS: Only works on TCP SYN packets [ 568.791301][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 568.791317][ T28] audit: type=1326 audit(1772768384.855:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 568.970057][ T28] audit: type=1326 audit(1772768384.855:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 569.077517][ T28] audit: type=1326 audit(1772768384.865:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 569.134149][ T28] audit: type=1326 audit(1772768384.865:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 569.161814][ T28] audit: type=1326 audit(1772768384.865:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 569.189860][ T28] audit: type=1326 audit(1772768384.865:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 569.392066][ T28] audit: type=1326 audit(1772768384.865:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 569.780516][ T28] audit: type=1326 audit(1772768384.905:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 569.969369][ T28] audit: type=1326 audit(1772768384.915:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 570.039713][ T28] audit: type=1326 audit(1772768384.915:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5dcef9c799 code=0x7ffc0000 [ 570.909045][T12926] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 572.343315][T12944] VFS: Mount too revealing [ 572.816326][T12958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2299'. [ 573.848069][T12966] xt_nat: multiple ranges no longer supported [ 576.770256][T13006] xt_nat: multiple ranges no longer supported [ 577.350076][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2315'. [ 581.153456][T13031] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.617280][T13074] VFS: Mount too revealing [ 583.687454][T13083] xt_TCPMSS: Only works on TCP SYN packets [ 584.567840][T13086] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 584.867370][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 584.887750][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 588.083446][T13117] overlayfs: failed to clone upperpath [ 588.135168][T13118] overlayfs: failed to resolve './file1': -2 [ 589.427572][T13136] xt_TCPMSS: Only works on TCP SYN packets [ 597.378724][T13217] overlayfs: failed to clone upperpath [ 597.416899][T13217] overlayfs: failed to resolve './file1': -2 [ 598.910323][ T4473] tipc: Disabling bearer [ 598.937975][ T4473] tipc: Left network mode [ 602.450674][T13298] netlink: 'syz.4.2400': attribute type 1 has an invalid length. [ 602.603667][T13298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 602.733426][T13304] bond7: (slave gretap4): making interface the new active one [ 602.753218][T13304] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 602.804721][T13304] syz.4.2400 (13304) used greatest stack depth: 19464 bytes left [ 604.116219][ T4473] hsr_slave_0: left promiscuous mode [ 604.192442][ T4473] hsr_slave_1: left promiscuous mode [ 604.199962][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.232434][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.280411][ T4473] bridge_slave_1: left allmulticast mode [ 604.286413][ T4473] bridge_slave_1: left promiscuous mode [ 604.317322][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.738495][T13339] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 606.052947][ T4473] bridge_slave_0: left allmulticast mode [ 606.072352][ T4473] bridge_slave_0: left promiscuous mode [ 606.090466][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.156847][ T4473] bond5 (unregistering): Released all slaves [ 606.332441][ T4473] bond4 (unregistering): (slave veth3): Releasing active interface [ 606.597390][ T4473] bond4 (unregistering): Released all slaves [ 606.635696][ T4473] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 606.694905][ T4473] bond3 (unregistering): Released all slaves [ 606.939292][ T4473] bond2 (unregistering): Released all slaves [ 606.955441][ T4473] bond1 (unregistering): Released all slaves [ 607.485502][ T4473] team0 (unregistering): Port device team_slave_1 removed [ 607.543610][ T4473] team0 (unregistering): Port device team_slave_0 removed [ 607.606234][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.668134][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.047815][ T4473] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 608.058118][ T4473] bond0 (unregistering): Released all slaves [ 608.421341][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 608.595182][T13377] netlink: 'syz.0.2419': attribute type 1 has an invalid length. [ 608.619989][T13377] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2419'. [ 608.988385][T13392] overlayfs: failed to clone upperpath [ 609.151626][ T4473] IPVS: stop unused estimator thread 0... [ 609.234618][T13396] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.480052][T13411] netlink: 'syz.5.2427': attribute type 1 has an invalid length. [ 609.562930][T13411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.712206][T13413] bond3: (slave gretap1): making interface the new active one [ 609.755898][T13413] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 610.084468][T13428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.169374][T13462] xt_socket: unknown flags 0x50 [ 614.877985][T13485] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 615.484941][T13501] xt_ecn: cannot match TCP bits for non-tcp packets [ 633.142866][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.150181][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.062919][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 635.075923][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 635.098881][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 635.110553][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 635.121446][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 635.130935][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 635.183705][T13555] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 635.199546][T13555] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 635.210227][T13555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 635.229252][T13555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 635.255215][T13555] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 635.262818][T13555] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 635.293530][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.380777][T13559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.396160][T13549] ip6_vti0 speed is unknown, defaulting to 1000 [ 635.458943][T13559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.510679][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.523129][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 635.525093][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 635.544745][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.544892][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 635.568880][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 635.583570][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 635.630019][T13555] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 635.639335][T13555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.706694][ T4473] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.002544][ T4473] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.045590][T13562] ip6_vti0 speed is unknown, defaulting to 1000 [ 636.096318][ T4473] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.182669][ T4473] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 636.365291][T13553] ip6_vti0 speed is unknown, defaulting to 1000 [ 636.567637][T13549] chnl_net:caif_netlink_parms(): no params data found [ 636.615000][ T4473] tipc: Disabling bearer [ 636.627411][ T4473] tipc: Left network mode [ 636.955653][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 637.205515][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.213196][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.221885][T13549] bridge_slave_0: entered allmulticast mode [ 637.229613][T13549] bridge_slave_0: entered promiscuous mode [ 637.239178][T13559] Bluetooth: hci4: command tx timeout [ 637.254885][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.263689][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.271885][T13549] bridge_slave_1: entered allmulticast mode [ 637.279531][T13549] bridge_slave_1: entered promiscuous mode [ 637.400664][T13559] Bluetooth: hci5: command tx timeout [ 637.511081][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.532571][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.639067][T13559] Bluetooth: hci3: command tx timeout [ 637.679503][T13562] chnl_net:caif_netlink_parms(): no params data found [ 637.719943][T13559] Bluetooth: hci1: command tx timeout [ 637.732106][T13549] team0: Port device team_slave_0 added [ 637.860790][T13549] team0: Port device team_slave_1 added [ 638.089433][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.109368][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.136483][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.151077][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.158170][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.184888][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.318260][T13562] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.332946][T13562] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.342750][T13562] bridge_slave_0: entered allmulticast mode [ 638.350551][T13562] bridge_slave_0: entered promiscuous mode [ 638.378233][T13553] chnl_net:caif_netlink_parms(): no params data found [ 638.425980][T13549] hsr_slave_0: entered promiscuous mode [ 638.433267][T13549] hsr_slave_1: entered promiscuous mode [ 638.440052][T13549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.447665][T13549] Cannot create hsr debugfs directory [ 638.465428][T13562] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.474738][T13562] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.486615][T13562] bridge_slave_1: entered allmulticast mode [ 638.494349][T13562] bridge_slave_1: entered promiscuous mode [ 638.563592][T13557] chnl_net:caif_netlink_parms(): no params data found [ 638.631112][T13562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.701603][T13562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.922427][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.929823][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.937105][T13553] bridge_slave_0: entered allmulticast mode [ 638.945551][T13553] bridge_slave_0: entered promiscuous mode [ 638.967236][ T4473] veth13: left allmulticast mode [ 638.972653][ T4473] veth13: left promiscuous mode [ 638.977734][ T4473] bridge10: port 2(veth13) entered disabled state [ 638.987428][ T4473] veth11: left allmulticast mode [ 638.997043][ T4473] veth11: left promiscuous mode [ 639.003833][ T4473] bridge10: port 1(veth11) entered disabled state [ 639.012812][ T4473] veth9: left allmulticast mode [ 639.017689][ T4473] veth9: left promiscuous mode [ 639.022774][ T4473] bridge9: port 2(veth9) entered disabled state [ 639.032430][ T4473] veth7: left allmulticast mode [ 639.037344][ T4473] veth7: left promiscuous mode [ 639.042482][ T4473] bridge9: port 1(veth7) entered disabled state [ 639.068210][ T4473] hsr_slave_0: left promiscuous mode [ 639.077268][ T4473] hsr_slave_1: left promiscuous mode [ 639.319340][T13559] Bluetooth: hci4: command tx timeout [ 639.342612][ T4473] bond13 (unregistering): (slave bridge8): Releasing backup interface [ 639.351976][ T4473] bridge8 (unregistering): left promiscuous mode [ 639.488735][T13559] Bluetooth: hci5: command tx timeout [ 639.563312][ T4473] bond13 (unregistering): Released all slaves [ 639.589524][ T4473] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 639.598075][ T4473] bridge7 (unregistering): left allmulticast mode [ 639.667470][ T4473] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 639.676674][ T4473] bridge6 (unregistering): left allmulticast mode [ 639.720062][T13559] Bluetooth: hci3: command tx timeout [ 639.734419][ T4473] bond12 (unregistering): Released all slaves [ 639.798826][T13559] Bluetooth: hci1: command tx timeout [ 639.814452][ T4473] bond11 (unregistering): Released all slaves [ 639.885760][ T4473] bond10 (unregistering): (slave geneve2): Releasing active interface [ 639.902444][ T4473] bond10 (unregistering): Released all slaves [ 640.161537][ T4473] bond9 (unregistering): Released all slaves [ 640.438009][ T4473] bond8 (unregistering): Released all slaves [ 640.546252][ T4473] bond7 (unregistering): Released all slaves [ 640.782129][ T4473] bond6 (unregistering): Released all slaves [ 640.965357][ T4473] bond5 (unregistering): Released all slaves [ 641.054543][ T4473] bond4 (unregistering): Released all slaves [ 641.069577][ T4473] bond3 (unregistering): Released all slaves [ 641.313069][ T4473] bond2 (unregistering): Released all slaves [ 641.405073][T13559] Bluetooth: hci4: command tx timeout [ 641.515684][ T4473] bond1 (unregistering): Released all slaves [ 641.558833][T13559] Bluetooth: hci5: command tx timeout [ 641.805276][T13559] Bluetooth: hci3: command tx timeout [ 641.887388][T13559] Bluetooth: hci1: command tx timeout [ 642.744359][ T4473] bond0 (unregistering): Released all slaves [ 642.784142][T13562] team0: Port device team_slave_0 added [ 642.797082][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.806489][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.821162][T13553] bridge_slave_1: entered allmulticast mode [ 642.848111][T13553] bridge_slave_1: entered promiscuous mode [ 642.933289][T13562] team0: Port device team_slave_1 added [ 643.062275][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.071959][T13557] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.079922][T13557] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.087216][T13557] bridge_slave_0: entered allmulticast mode [ 643.096305][T13557] bridge_slave_0: entered promiscuous mode [ 643.111278][T13562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.130864][T13562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.157541][T13562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.170931][T13562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.178109][T13562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.204216][T13562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.244078][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.254420][T13557] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.262889][T13557] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.272351][T13557] bridge_slave_1: entered allmulticast mode [ 643.280224][T13557] bridge_slave_1: entered promiscuous mode [ 643.405654][T13553] team0: Port device team_slave_0 added [ 643.486039][T13553] team0: Port device team_slave_1 added [ 643.491826][T13559] Bluetooth: hci4: command tx timeout [ 643.513384][T13557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.628520][T13557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.648036][T13559] Bluetooth: hci5: command tx timeout [ 643.668536][T13562] hsr_slave_0: entered promiscuous mode [ 643.684505][T13562] hsr_slave_1: entered promiscuous mode [ 643.693924][T13562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.707777][T13562] Cannot create hsr debugfs directory [ 643.715514][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.731724][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.758316][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.833686][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.841536][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.868904][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.888711][T13559] Bluetooth: hci3: command tx timeout [ 643.910707][T13557] team0: Port device team_slave_0 added [ 643.955975][ T4473] IPVS: stop unused estimator thread 0... [ 643.963803][T13559] Bluetooth: hci1: command tx timeout [ 643.983021][T13557] team0: Port device team_slave_1 added [ 644.124192][T13549] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 644.152249][T13557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.160111][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.199164][T13557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.231568][T13557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.238575][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.284703][T13557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.324329][T13549] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 644.342704][T13549] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 644.416969][T13549] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 644.490743][T13553] hsr_slave_0: entered promiscuous mode [ 644.497920][T13553] hsr_slave_1: entered promiscuous mode [ 644.504491][T13553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.512185][T13553] Cannot create hsr debugfs directory [ 644.533873][T13557] hsr_slave_0: entered promiscuous mode [ 644.542865][T13557] hsr_slave_1: entered promiscuous mode [ 644.549355][T13557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.556968][T13557] Cannot create hsr debugfs directory [ 645.075142][T13562] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 645.174635][T13562] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 645.245297][T13562] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 645.310360][T13562] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 645.543426][T13549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.576804][T13553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 645.616840][T13553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 645.634257][ T4473] tipc: Disabling bearer [ 645.649732][ T4473] tipc: Disabling bearer [ 645.655388][ T4473] tipc: Left network mode [ 645.683822][T13553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 645.694879][T13553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 645.734799][T13549] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.788259][T10039] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.795474][T10039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.967534][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.974734][T10039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.137785][T13557] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 646.158242][T13557] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 646.275587][T13557] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 646.345413][T13557] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 646.569944][ T4473] bond5: (slave gretap2): Releasing active interface [ 646.576712][ T4473] gretap2 (unregistering): left allmulticast mode [ 646.616040][ T4473] bond6: (slave gretap3): Releasing active interface [ 646.656578][ T4473] bond7: (slave gretap4): Releasing active interface [ 646.687501][T13562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.900788][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.025724][T13562] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.074450][T10055] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.081647][T10055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.126255][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.133486][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.173176][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.213146][T13549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.327714][T13557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.434018][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.441272][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.530576][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.537777][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.648304][T13557] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.741129][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.748345][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.806690][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.813946][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.932438][ T4473] team0: left allmulticast mode [ 647.937379][ T4473] team0: left promiscuous mode [ 647.969720][ T4473] bridge0: port 1(team0) entered disabled state [ 648.015368][ T4473] hsr_slave_0: left promiscuous mode [ 648.022116][ T4473] hsr_slave_1: left promiscuous mode [ 648.332275][ T4473] bond7 (unregistering): Released all slaves [ 648.597392][ T4473] bond6 (unregistering): Released all slaves [ 648.637849][ T4473] team0 (unregistering): Port device bridge6 removed [ 648.684023][ T4473] bond5 (unregistering): Released all slaves [ 648.833808][ T4473] bond4 (unregistering): Released all slaves [ 648.849469][ T4473] bond3 (unregistering): Released all slaves [ 648.867114][ T4473] bond2 (unregistering): Released all slaves [ 648.889189][ T4473] bond0 (unregistering): Released all slaves [ 649.204336][ T4473] bond1 (unregistering): Released all slaves [ 651.022278][T13562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.089576][T13549] veth0_vlan: entered promiscuous mode [ 651.182617][T13549] veth1_vlan: entered promiscuous mode [ 651.335124][ T4473] IPVS: stop unused estimator thread 0... [ 651.377758][T13549] veth0_macvtap: entered promiscuous mode [ 651.454560][T13549] veth1_macvtap: entered promiscuous mode [ 651.561235][T13549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.595710][T13549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.658433][T13549] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.688720][T13549] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.697504][T13549] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.713739][T13549] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.817945][T13557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.852672][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.037647][T10055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.070733][T10055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.232575][T10039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.248197][T13562] veth0_vlan: entered promiscuous mode [ 652.270918][T10039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.332148][T13562] veth1_vlan: entered promiscuous mode [ 652.471704][T13562] veth0_macvtap: entered promiscuous mode [ 652.510653][T13562] veth1_macvtap: entered promiscuous mode [ 652.586488][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.628680][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.657789][T13562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.784699][T13562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.810019][T13562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.830445][T13562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.888279][T13562] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.910973][T13562] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.948230][T13562] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.969415][T13562] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.112413][T13553] veth0_vlan: entered promiscuous mode [ 653.186945][T13553] veth1_vlan: entered promiscuous mode [ 653.216218][T13557] veth0_vlan: entered promiscuous mode [ 653.305082][T13557] veth1_vlan: entered promiscuous mode [ 653.460589][T10055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.468458][T10055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.511648][T13553] veth0_macvtap: entered promiscuous mode [ 653.535514][T13557] veth0_macvtap: entered promiscuous mode [ 653.547444][T13557] veth1_macvtap: entered promiscuous mode [ 653.594586][T13764] netlink: 'syz.7.2458': attribute type 10 has an invalid length. [ 653.647853][T13764] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 653.745141][T13553] veth1_macvtap: entered promiscuous mode [ 653.763492][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.776033][T13557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.790859][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.816295][T13557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.865396][T13557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.898768][T13557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.931692][T13557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.976933][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.012028][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.025201][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.036254][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.056483][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.075620][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.095466][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.141586][T13557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.169257][T13557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.187936][T13557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.208038][T13557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.219928][T13557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.235369][T13557] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.244259][T13557] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.254441][T13557] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.263426][T13557] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.305401][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.320358][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.348249][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.366715][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.388906][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.408837][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.430908][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.502639][T13553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.527573][T13553] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.537128][T13553] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.558382][T13553] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.584577][T13782] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 655.611355][T13782] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 655.715388][T10041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.735467][T10041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.784075][T10045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.808241][T10045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.927861][T10045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.957281][T10045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.007504][T10041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.019432][T10041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.291398][T10041] wlan1: Trigger new scan to find an IBSS to join [ 656.675480][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2455'. [ 660.117410][T13846] loop8: detected capacity change from 0 to 256 [ 660.280101][ T55] wlan1: Trigger new scan to find an IBSS to join [ 660.309771][T13855] loop6: detected capacity change from 0 to 1024 [ 660.368442][T13855] EXT4-fs: Ignoring removed orlov option [ 660.475978][T13855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.717942][T13553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.845740][T13871] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2479'. [ 662.072868][ T4473] wlan1: Creating new IBSS network, BSSID be:99:0f:a1:4a:12 [ 662.281244][T13881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.321805][T13881] batadv_slave_0: entered promiscuous mode [ 663.508107][T13891] netlink: 'syz.6.2485': attribute type 4 has an invalid length. [ 664.889885][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2487'. [ 664.983594][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2487'. [ 665.030636][T13904] vxcan1: entered promiscuous mode [ 665.056507][T13904] vxcan1: entered allmulticast mode [ 665.520089][T13916] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 667.047003][T13935] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2494'. [ 667.098540][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2494'. [ 667.119627][T13935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2494'. [ 667.142844][T13949] loop6: detected capacity change from 0 to 256 [ 667.258718][T13949] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 668.949119][ T8129] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 669.035330][T13980] Cannot find add_set index 0 as target [ 669.182513][ T8129] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 669.280468][ T8125] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 669.366051][ T8129] usb 8-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 669.776308][ T8129] usb 8-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 669.786370][ T8129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.794619][ T8129] usb 8-1: Product: syz [ 669.799225][ T8129] usb 8-1: Manufacturer: syz [ 669.804868][ T8129] usb 8-1: SerialNumber: syz [ 669.810694][ T8125] usb 10-1: config 0 descriptor has 1 excess byte, ignoring [ 669.818092][ T8125] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 669.831378][ T8125] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 669.862211][ T8125] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 669.884315][ T8125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.593347][ T8142] usb 8-1: USB disconnect, device number 2 [ 670.624314][ T8125] usb 10-1: Product: syz [ 670.629260][ T8125] usb 10-1: Manufacturer: syz [ 670.634656][ T8125] usb 10-1: SerialNumber: syz [ 670.671812][ T8125] usb 10-1: config 0 descriptor?? [ 670.741528][ T8125] usb 10-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 8, bSynchAddress 00 [ 670.920435][T13976] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2502'. [ 671.518787][ T8125] usb 10-1: USB disconnect, device number 2 [ 672.510095][T14018] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.556858][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2513'. [ 672.603903][T14024] batadv_slave_1: entered promiscuous mode [ 672.692603][T14024] batadv_slave_1: left promiscuous mode [ 672.830164][T14029] x_tables: duplicate entry at hook 3 [ 672.846612][T14029] netlink: 'syz.7.2514': attribute type 16 has an invalid length. [ 672.922659][T14029] netlink: 'syz.7.2514': attribute type 17 has an invalid length. [ 673.273754][T14029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.791267][T14057] netlink: 'syz.9.2517': attribute type 27 has an invalid length. [ 675.486580][ T8120] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 675.719504][ T8120] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.738780][ T8120] usb 8-1: config 0 has no interfaces? [ 675.752339][ T8120] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 675.768376][ T8120] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.782356][ T8120] usb 8-1: Product: syz [ 675.795424][ T8120] usb 8-1: Manufacturer: syz [ 675.808865][ T8120] usb 8-1: SerialNumber: syz [ 675.834465][ T8120] usb 8-1: config 0 descriptor?? [ 675.860023][T14057] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.867703][T14057] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.153108][T14067] loop7: detected capacity change from 0 to 512 [ 676.222229][T14067] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 676.264545][T14067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 676.277390][T14067] System zones: 1-12 [ 676.288713][T14067] EXT4-fs (loop7): 1 truncate cleaned up [ 676.559662][T14067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.383380][T14057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.447574][T14057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.841902][T14057] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.851064][T14057] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.860758][T14057] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.870068][T14057] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.038764][T14087] netlink: 'syz.6.2523': attribute type 9 has an invalid length. [ 678.048865][T14091] usb 8-1: USB disconnect, device number 3 [ 678.544437][T14106] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 678.603459][T13549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.626349][T14108] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 681.176453][T14145] loop8: detected capacity change from 0 to 128 [ 681.224001][T14145] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 681.280928][T14145] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 682.499936][T13557] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 682.636651][T14163] loop7: detected capacity change from 0 to 512 [ 682.895609][T14163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.914578][T14167] netlink: 'syz.8.2537': attribute type 16 has an invalid length. [ 682.961068][T14163] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.040783][T14167] netlink: 'syz.8.2537': attribute type 17 has an invalid length. [ 683.685233][T14163] __quota_error: 45 callbacks suppressed [ 683.685254][T14163] Quota error (device loop7): do_check_range: Getting dqdh_next_free 256 out of range 0-6 [ 683.702326][T14163] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 683.713121][T14163] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.2538: Failed to acquire dquot type 0 [ 683.741163][T14167] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.754403][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.231452][T13549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.887658][T14210] ipt_REJECT: TCP_RESET invalid for non-tcp [ 686.315232][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.322856][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.422352][T14223] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2547'. [ 688.629278][T14233] loop6: detected capacity change from 0 to 512 [ 688.644840][T14233] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 688.678913][T14091] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 688.723584][T14233] EXT4-fs (loop6): 1 truncate cleaned up [ 688.733080][T14233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.879167][ T8126] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 688.925834][ T8130] IPVS: starting estimator thread 0... [ 689.063227][T13553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.079555][T14238] IPVS: using max 21 ests per chain, 50400 per kthread [ 689.118745][ T8126] usb 9-1: Using ep0 maxpacket: 32 [ 689.212024][ T8126] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 689.395756][ T8126] usb 9-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 689.619064][ T8126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.647916][ T8126] usb 9-1: Product: syz [ 689.658091][ T8126] usb 9-1: Manufacturer: syz [ 689.677069][ T8126] usb 9-1: SerialNumber: syz [ 689.715997][ T8126] usb 9-1: config 0 descriptor?? [ 689.731855][T14230] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 689.782404][ T8126] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 689.914679][T14091] usb 10-1: unable to get BOS descriptor or descriptor too short [ 689.938963][T14091] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 689.946707][T14091] usb 10-1: can't read configurations, error -71 [ 690.210514][T14253] xt_TCPMSS: Only works on TCP SYN packets [ 691.428167][ T8126] usb 9-1: USB disconnect, device number 2 [ 691.521070][T14257] loop7: detected capacity change from 0 to 16 [ 691.616896][T14257] erofs: (device loop7): mounted with root inode @ nid 36. [ 691.697115][T13704] udevd[13704]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.720861][T14257] sch_fq: defrate 0 ignored. [ 693.241662][T14278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.466384][T14280] bond_slave_0: entered promiscuous mode [ 695.472983][T14280] bond_slave_1: entered promiscuous mode [ 695.586019][T14280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 695.601646][T14280] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 695.799577][T10047] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 695.844885][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2564'. [ 699.299963][T14323] UBIFS error (pid: 14323): cannot open "ubifs", error -22 [ 700.828653][ T28] audit: type=1326 audit(2000000028.420:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 700.910590][T14345] loop7: detected capacity change from 0 to 2048 [ 700.941960][ T28] audit: type=1326 audit(2000000028.420:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 701.041245][ T28] audit: type=1326 audit(2000000028.420:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 701.111247][T14345] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 701.128706][ T28] audit: type=1326 audit(2000000028.420:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 701.151879][ T28] audit: type=1326 audit(2000000028.420:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 701.174508][ T28] audit: type=1326 audit(2000000028.420:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 701.197214][ T28] audit: type=1326 audit(2000000028.420:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 701.220203][ T28] audit: type=1326 audit(2000000028.420:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6fd99c502 code=0x7ffc0000 [ 701.248111][ T28] audit: type=1326 audit(2000000028.470:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6fd95cfce code=0x7ffc0000 [ 701.285709][T14358] netlink: 'syz.9.2578': attribute type 4 has an invalid length. [ 701.294385][ T28] audit: type=1326 audit(2000000028.500:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff6fd99c5c7 code=0x7ffc0000 [ 701.444290][T13549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 704.368884][T14385] netlink: 'syz.7.2585': attribute type 1 has an invalid length. [ 704.591352][T14385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.633417][T14387] loop8: detected capacity change from 0 to 2048 [ 704.633515][T14390] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2585'. [ 704.737720][T14390] bond1: entered promiscuous mode [ 704.768134][T14390] bond1: entered allmulticast mode [ 704.829173][T14396] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 704.951777][T14385] bond1: (slave dummy0): making interface the new active one [ 704.996251][T14385] dummy0: entered promiscuous mode [ 705.026282][T14385] dummy0: entered allmulticast mode [ 705.053383][T14385] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 705.100205][T14387] debugfs: Directory 'netdev:nicvf0' with parent 'phy21' already present! [ 705.560721][T14408] netlink: 'syz.7.2589': attribute type 21 has an invalid length. [ 708.372604][T14440] loop7: detected capacity change from 0 to 2048 [ 708.457346][T14440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.076369][T14458] ip6_vti0 speed is unknown, defaulting to 1000 [ 709.866167][T14464] syzkaller0: entered promiscuous mode [ 709.972124][T14464] syzkaller0: entered allmulticast mode [ 711.841857][T14485] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 712.026368][T14485] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 712.116066][T14485] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 714.988828][ T8133] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 715.171508][ T8133] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.213125][ T8133] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 715.244667][ T8133] usb 8-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 715.293576][ T8133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.328366][ T8133] usb 8-1: config 0 descriptor?? [ 715.631998][ T8135] usb 8-1: USB disconnect, device number 4 [ 715.956789][T10039] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.023699][T14540] loop6: detected capacity change from 0 to 2048 [ 716.108530][T14540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 716.196975][T10039] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.052708][T10039] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.137745][T14543] ip6_vti0 speed is unknown, defaulting to 1000 [ 717.541201][T10039] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.599961][T14549] bond_slave_1: entered promiscuous mode [ 717.644962][T14549] bond_slave_1: left promiscuous mode [ 717.957490][T13555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.992047][T13555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 718.002125][T13555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 718.021494][T13555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 718.029781][T13555] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 718.037352][T13555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 719.018008][T14558] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.155202][T13555] Bluetooth: hci0: command tx timeout [ 720.405323][T14590] loop7: detected capacity change from 0 to 256 [ 721.163241][T14590] FAT-fs (loop7): Directory bread(block 64) failed [ 721.170082][T14590] FAT-fs (loop7): Directory bread(block 65) failed [ 721.176831][T14590] FAT-fs (loop7): Directory bread(block 66) failed [ 721.183618][T14590] FAT-fs (loop7): Directory bread(block 67) failed [ 721.196631][T14590] FAT-fs (loop7): Directory bread(block 68) failed [ 721.204394][T14590] FAT-fs (loop7): Directory bread(block 69) failed [ 721.211187][T14590] FAT-fs (loop7): Directory bread(block 70) failed [ 721.218245][T14590] FAT-fs (loop7): Directory bread(block 71) failed [ 721.224979][T14590] FAT-fs (loop7): Directory bread(block 72) failed [ 721.231641][T14590] FAT-fs (loop7): Directory bread(block 73) failed [ 721.830369][T14602] netlink: 'syz.7.2623': attribute type 10 has an invalid length. [ 721.838371][T14602] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2623'. [ 722.121224][T14602] team0: Port device geneve0 added [ 722.170755][T14606] netlink: 'syz.6.2624': attribute type 1 has an invalid length. [ 722.201293][T13555] Bluetooth: hci0: command tx timeout [ 722.874157][T14606] bond1: entered promiscuous mode [ 722.884173][T14606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.975610][T14612] bond1: (slave bridge1): making interface the new active one [ 722.987590][T14612] bridge1: entered promiscuous mode [ 723.035463][T14612] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 724.119097][T14558] chnl_net:caif_netlink_parms(): no params data found [ 724.188167][T14627] loop6: detected capacity change from 0 to 16 [ 724.247906][T14627] erofs: (device loop6): mounted with root inode @ nid 36. [ 724.275406][T14089] IPVS: starting estimator thread 0... [ 724.281312][T13555] Bluetooth: hci0: command tx timeout [ 724.398764][T14631] IPVS: using max 18 ests per chain, 43200 per kthread [ 724.423994][T14632] bond1: (slave ip6gretap1): making interface the new active one [ 724.436928][T14632] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 724.950671][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.005017][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.014149][T14558] bridge_slave_0: entered allmulticast mode [ 725.049354][T14558] bridge_slave_0: entered promiscuous mode [ 725.066610][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.100009][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.119032][T14558] bridge_slave_1: entered allmulticast mode [ 725.194324][T14558] bridge_slave_1: entered promiscuous mode [ 725.335929][T10039] hsr_slave_0: left promiscuous mode [ 725.343878][T10039] hsr_slave_1: left promiscuous mode [ 725.356318][T10039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.373150][T10039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.383538][T10039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.393114][T10039] bridge_slave_1: left allmulticast mode [ 725.413513][T10039] bridge_slave_1: left promiscuous mode [ 725.440180][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.470770][T10039] bridge_slave_0: left allmulticast mode [ 725.498839][T10039] bridge_slave_0: left promiscuous mode [ 725.504737][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.658313][T10039] bond_slave_0: left promiscuous mode [ 725.664504][T10039] bond_slave_1: left promiscuous mode [ 725.702197][T10039] veth1_macvtap: left promiscuous mode [ 725.709804][T10039] veth0_macvtap: left promiscuous mode [ 725.715515][T10039] veth1_vlan: left promiscuous mode [ 725.754880][T10039] veth0_vlan: left promiscuous mode [ 726.122269][T10039] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 726.133080][T10039] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 726.370303][T13555] Bluetooth: hci0: command tx timeout [ 726.442361][T10039] bond1 (unregistering): Released all slaves [ 727.276112][T10039] team0 (unregistering): Port device team_slave_1 removed [ 727.347660][T10039] team0 (unregistering): Port device team_slave_0 removed [ 727.417762][T10039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.487197][T10039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.996397][T10039] bond0 (unregistering): Released all slaves [ 728.123247][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.135821][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.147460][T14661] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2636'. [ 728.195138][T14663] tipc: Enabling of bearer rejected, failed to enable media [ 728.306641][T14670] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.325268][T14558] team0: Port device team_slave_0 added [ 728.351315][T14558] team0: Port device team_slave_1 added [ 728.462218][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.497129][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.589003][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.730012][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.737455][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.112809][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.585092][T14558] hsr_slave_0: entered promiscuous mode [ 729.600327][T14558] hsr_slave_1: entered promiscuous mode [ 729.722456][T14013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.234296][T14709] loop7: detected capacity change from 0 to 1024 [ 731.961663][T14708] hfsplus: found bad thread record in catalog [ 732.161774][T10039] hfsplus: b-tree write err: -5, ino 25 [ 732.168469][T10039] hfsplus: b-tree write err: -5, ino 4 [ 732.174774][T10039] hfsplus: b-tree write err: -5, ino 2 [ 734.239958][T14558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 734.294564][T14558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 734.397626][T14558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 734.425741][T14558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 736.399264][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.465540][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.505221][T10045] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.512495][T10045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.597733][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.605028][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.118659][T14758] netlink: 'syz.6.2655': attribute type 1 has an invalid length. [ 739.241246][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.249188][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.782718][T14775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.840195][T14775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.226492][T14775] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.245294][T14775] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.263927][T14775] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.280041][T14775] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.145559][T14785] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 742.155346][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 742.155361][ T28] audit: type=1800 audit(2000000069.730:490): pid=14785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2659" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 742.208100][T14785] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 742.242933][T14785] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 742.271616][T14558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.682445][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.688990][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.739417][T14558] veth0_vlan: entered promiscuous mode [ 747.766513][T14558] veth1_vlan: entered promiscuous mode [ 747.829501][T14852] UBIFS error (pid: 14852): cannot open "./file0", error -22 [ 748.437559][T14558] veth0_macvtap: entered promiscuous mode [ 748.542724][T14558] veth1_macvtap: entered promiscuous mode [ 748.627964][T14558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.665828][T14558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.765683][T14558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.847201][T14558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.894877][T14558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.923455][T14558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.934827][T14558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.943728][T14558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.952574][T14558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.961486][T14558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.084656][T14861] ipt_REJECT: ECHOREPLY no longer supported. [ 749.796195][T10047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.829075][T10047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.918419][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.961835][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.007709][T14873] ip6_vti0 speed is unknown, defaulting to 1000 [ 753.573876][T14910] vlan2: entered promiscuous mode [ 753.615017][T14910] bond0: entered promiscuous mode [ 753.622761][T14910] bond_slave_0: entered promiscuous mode [ 753.629195][T14910] bond_slave_1: entered promiscuous mode [ 756.779179][T14932] netlink: 'syz.6.2684': attribute type 2 has an invalid length. [ 756.969705][T14937] netlink: 'syz.6.2684': attribute type 2 has an invalid length. [ 758.000239][ T28] audit: type=1326 audit(2000000085.600:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.155066][ T28] audit: type=1326 audit(2000000085.600:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.208744][ T28] audit: type=1326 audit(2000000085.630:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.277021][ T28] audit: type=1326 audit(2000000085.630:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.366810][ T28] audit: type=1326 audit(2000000085.650:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.419469][ T28] audit: type=1326 audit(2000000085.650:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.448863][ T28] audit: type=1326 audit(2000000085.650:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.475847][ T28] audit: type=1326 audit(2000000085.650:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.519246][ T28] audit: type=1326 audit(2000000085.650:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 758.575461][ T28] audit: type=1326 audit(2000000085.650:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fd99c799 code=0x7ffc0000 [ 759.990748][T14954] Bluetooth: hci5: command 0x0406 tx timeout [ 759.996857][T14954] Bluetooth: hci4: command 0x0406 tx timeout [ 760.005260][T14954] Bluetooth: hci1: command 0x0406 tx timeout [ 762.521904][ T5800] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 762.531741][ T5800] Bluetooth: hci0: Injecting HCI hardware error event [ 762.541457][T13559] Bluetooth: hci0: hardware error 0x00 [ 764.285317][T15017] kvm: kvm [15016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x243 [ 764.803952][T15017] kvm: kvm [15016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xaf51 [ 765.318684][T13559] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 770.029505][T15079] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2717'. [ 775.322876][T15130] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 777.286280][T15154] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2731'. [ 782.057898][T15219] loop7: detected capacity change from 0 to 2048 [ 782.075976][T15219] UDF-fs: bad mount option "nmæ¨äõÄÆÙ" or missing value [ 782.362683][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 782.362699][ T28] audit: type=1326 audit(2000000109.960:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 782.516537][ T28] audit: type=1326 audit(2000000109.960:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 782.545536][ T28] audit: type=1326 audit(2000000109.960:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 783.140610][ T28] audit: type=1326 audit(2000000109.970:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 783.189827][ T28] audit: type=1326 audit(2000000109.970:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 783.462392][ T28] audit: type=1326 audit(2000000109.998:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 783.520666][ T28] audit: type=1326 audit(2000000109.998:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 783.554364][ T28] audit: type=1326 audit(2000000109.998:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 783.768527][ T28] audit: type=1326 audit(2000000109.998:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 784.256661][ T28] audit: type=1326 audit(2000000109.998:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15220 comm="syz.8.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 787.143321][T15291] loop7: detected capacity change from 0 to 1024 [ 787.169101][T15291] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 787.722777][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 787.723152][ T28] audit: type=1326 audit(2000000114.974:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570e79c799 code=0x7ffc0000 [ 788.613091][ T28] audit: type=1326 audit(2000000114.974:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570e79c799 code=0x7ffc0000 [ 788.713787][ T28] audit: type=1326 audit(2000000115.086:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f570e79c799 code=0x7ffc0000 [ 788.802623][ T28] audit: type=1326 audit(2000000115.086:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570e79c799 code=0x7ffc0000 [ 788.926447][ T28] audit: type=1326 audit(2000000115.086:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570e79c799 code=0x7ffc0000 [ 788.999506][T15303] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 789.027485][ T28] audit: type=1326 audit(2000000115.096:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f570e79c799 code=0x7ffc0000 [ 789.057444][T15303] ref_ctr increment failed for inode: 0x1c1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032043900 [ 789.076449][T15308] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 789.089659][T15308] ref_ctr decrement failed for inode: 0x1c1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032043900 [ 789.221036][T15316] tipc: Started in network mode [ 789.249544][T15316] tipc: Node identity 7f000001, cluster identity 4711 [ 789.292851][T15316] tipc: Enabling of bearer rejected, failed to enable media [ 789.355781][T15316] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2775'. [ 789.410857][T15320] syzkaller0: entered promiscuous mode [ 789.449226][T15320] syzkaller0: entered allmulticast mode [ 789.479548][T15316] tipc: Enabling of bearer rejected, failed to enable media [ 790.076703][T15330] netlink: 'syz.6.2769': attribute type 12 has an invalid length. [ 790.084860][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2769'. [ 790.108773][T15330] bond0: option primary_reselect: invalid value (158) [ 790.686647][T15352] loop8: detected capacity change from 0 to 2048 [ 790.759831][T15352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.080648][ T28] audit: type=1326 audit(2000000120.905:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.8.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 794.576297][T15400] loop7: detected capacity change from 0 to 2048 [ 794.628983][ T28] audit: type=1326 audit(2000000120.905:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.8.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 794.721474][T15400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.797955][ T28] audit: type=1326 audit(2000000120.914:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.8.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 795.527848][ T28] audit: type=1326 audit(2000000120.914:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.8.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 795.775235][ T28] audit: type=1326 audit(2000000120.914:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.8.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ff9c799 code=0x7ffc0000 [ 796.880669][T15421] ipt_REJECT: ECHOREPLY no longer supported. [ 797.870641][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2788'. [ 798.406338][T15436] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 798.563858][T15443] netlink: 'syz.7.2791': attribute type 1 has an invalid length. [ 798.709016][T15443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 798.769159][T15443] vlan2: entered promiscuous mode [ 798.800538][T15443] bond2: entered promiscuous mode [ 798.805902][T15443] vlan2: entered allmulticast mode [ 798.891408][T15443] bond2: entered allmulticast mode [ 804.455885][T15489] netlink: 201392 bytes leftover after parsing attributes in process `syz.8.2799'. [ 808.548119][ T28] audit: type=1107 audit(2000000134.459:600): pid=15539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 810.171561][T15540] syz.7.2810 (15540) used greatest stack depth: 17864 bytes left [ 810.278271][T15557] netlink: 'syz.6.2811': attribute type 3 has an invalid length. [ 811.329562][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.336761][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.508536][T15626] loop7: detected capacity change from 0 to 2048 [ 818.268157][T15482] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 819.678978][T15641] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 822.431175][T15662] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 824.578048][T15694] atomic_op ffff88802f693198 conn xmit_atomic 0000000000000000 [ 828.275358][T15726] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 828.315420][T15723] netlink: 'syz.9.2844': attribute type 1 has an invalid length. [ 829.091550][T15728] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 829.391625][T15728] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 829.457689][T15728] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 829.512044][T15728] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 829.558295][T15728] bond2: (slave geneve2): making interface the new active one [ 829.566863][T15728] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 829.644666][T15729] bridge_slave_0: left allmulticast mode [ 829.705267][T15729] bridge_slave_0: left promiscuous mode [ 829.760776][T15729] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.894658][T15729] bridge_slave_1: left allmulticast mode [ 829.913182][T15729] bridge_slave_1: left promiscuous mode [ 830.670288][T15729] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.730157][T15729] bond0: (slave bond_slave_0): Releasing backup interface [ 830.770289][T15729] bond0: (slave bond_slave_1): Releasing backup interface [ 830.893998][T15729] team0: Port device team_slave_0 removed [ 832.312169][T15729] team0: Port device team_slave_1 removed [ 832.418288][T15729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.458786][T15729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.621520][T15729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.629740][T15729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.663972][T15729] bond1: (slave bridge1): Releasing backup interface [ 832.677237][T15729] bridge1: left promiscuous mode [ 832.690210][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2844'. [ 832.716150][T15731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.774118][T15726] netlink: 'syz.6.2845': attribute type 10 has an invalid length. [ 832.793356][T15726] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 832.807521][T15726] bond0: (slave wlan1): refused to change device type [ 832.829234][T15737] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2845'. [ 833.100350][T15737] bond0 (unregistering): Released all slaves [ 835.057387][T13559] Bluetooth: hci5: unexpected event for opcode 0x080d [ 835.865637][T15797] loop7: detected capacity change from 0 to 164 [ 839.405700][T13559] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 839.415134][T13559] Bluetooth: hci5: Injecting HCI hardware error event [ 839.435064][T13559] Bluetooth: hci5: hardware error 0x00 [ 841.803080][T13559] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 842.646763][T15862] xt_cluster: node mask cannot exceed total number of nodes [ 843.777390][T15878] SET target dimension over the limit! [ 846.946258][T15914] ip6_vti0 speed is unknown, defaulting to 1000 [ 848.778864][T15934] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.2882'. [ 848.788810][T15934] openvswitch: netlink: ct_state flags 00030000 unsupported [ 851.383115][T15944] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 853.380903][T15956] MTD: Attempt to mount non-MTD device "./file0" [ 853.388652][T15956] ./file0: Can't open blockdev [ 863.213084][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2904'. [ 867.018537][ T11] ------------[ cut here ]------------ [ 867.024847][ T11] WARNING: CPU: 1 PID: 11 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 867.034899][ T11] Modules linked in: [ 867.039023][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 867.046443][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.056644][ T11] Workqueue: iou_exit io_ring_exit_work [ 867.062299][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 867.068062][ T11] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 867.088029][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 867.094202][ T11] RAX: ffffffff8a7c8a87 RBX: ffff88807ecd4000 RCX: ffff88801a273c00 [ 867.102773][ T11] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 867.110792][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 867.119089][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 867.127149][ T11] R13: ffff88807ecd4288 R14: 000000010000da7b R15: 000000010000da7f [ 867.135354][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 867.144346][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 867.151092][ T11] CR2: 00002000001d4000 CR3: 00000000664a4000 CR4: 00000000003506e0 [ 867.159198][ T11] Call Trace: [ 867.162517][ T11] [ 867.165500][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 867.171445][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 867.176705][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 867.182580][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 867.188618][ T11] process_scheduled_works+0xa5d/0x15d0 [ 867.194257][ T11] ? worker_attach_to_pool+0x380/0x380 [ 867.200528][ T11] ? assign_work+0x3d2/0x5d0 [ 867.205204][ T11] worker_thread+0xa55/0xfc0 [ 867.210330][ T11] kthread+0x2fa/0x390 [ 867.214447][ T11] ? pr_cont_work+0x560/0x560 [ 867.219180][ T11] ? kthread_blkcg+0xd0/0xd0 [ 867.223943][ T11] ret_from_fork+0x48/0x80 [ 867.228409][ T11] ? kthread_blkcg+0xd0/0xd0 [ 867.233080][ T11] ret_from_fork_asm+0x11/0x20 [ 867.237922][ T11] [ 867.240983][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 867.248291][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 867.255694][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.265786][ T11] Workqueue: iou_exit io_ring_exit_work [ 867.271378][ T11] Call Trace: [ 867.274690][ T11] [ 867.277657][ T11] dump_stack_lvl+0x18c/0x250 [ 867.282390][ T11] ? show_regs_print_info+0x20/0x20 [ 867.287637][ T11] ? load_image+0x400/0x400 [ 867.292210][ T11] panic+0x2dc/0x730 [ 867.296167][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 867.300726][ T11] ? ret_from_fork_asm+0x11/0x20 [ 867.305718][ T11] __warn+0x2e0/0x470 [ 867.309746][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 867.314902][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 867.320061][ T11] report_bug+0x2be/0x4f0 [ 867.324437][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 867.329578][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 867.334712][ T11] ? io_ring_exit_work+0x3a9/0x820 [ 867.339852][ T11] handle_bug+0xcf/0x120 [ 867.344144][ T11] exc_invalid_op+0x1a/0x50 [ 867.348695][ T11] asm_exc_invalid_op+0x1a/0x20 [ 867.353576][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 867.359328][ T11] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 867.378968][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 867.385059][ T11] RAX: ffffffff8a7c8a87 RBX: ffff88807ecd4000 RCX: ffff88801a273c00 [ 867.393062][ T11] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 867.401067][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 867.409067][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 867.417078][ T11] R13: ffff88807ecd4288 R14: 000000010000da7b R15: 000000010000da7f [ 867.425187][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 867.430345][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 867.436209][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 867.441437][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 867.447236][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 867.452986][ T11] process_scheduled_works+0xa5d/0x15d0 [ 867.458585][ T11] ? worker_attach_to_pool+0x380/0x380 [ 867.464084][ T11] ? assign_work+0x3d2/0x5d0 [ 867.468722][ T11] worker_thread+0xa55/0xfc0 [ 867.473361][ T11] kthread+0x2fa/0x390 [ 867.477449][ T11] ? pr_cont_work+0x560/0x560 [ 867.482151][ T11] ? kthread_blkcg+0xd0/0xd0 [ 867.486763][ T11] ret_from_fork+0x48/0x80 [ 867.491216][ T11] ? kthread_blkcg+0xd0/0xd0 [ 867.495828][ T11] ret_from_fork_asm+0x11/0x20 [ 867.500649][ T11] [ 867.504255][ T11] Kernel Offset: disabled [ 867.508711][ T11] Rebooting in 86400 seconds..