last executing test programs: 15m14.285995195s ago: executing program 32 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x898, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x868, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x854, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0x358219a5, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0xfffffffd, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7effffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc31, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x6, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x8, 0x6, 0x4, 0x1, 0x3, 0xb8, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x2d13, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x3, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd9, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x200034, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0xffff, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x1, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0xfe800000, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0xd, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x7, 0x7, 0x7, {0x4, 0x1, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcb, 0x1, 0x800, 0x8002}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x6, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x4, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0xb, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x1, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x7ffffffd, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x3202, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x80000000, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdff, 0x7, 0x9, 0x9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0xffff, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x81, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0xb, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x0, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x6ab0, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)='\'', 0x1}], 0x1}, 0x4) 15m12.181741063s ago: executing program 33 (id=853): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 15m11.227650192s ago: executing program 34 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 15m10.674261131s ago: executing program 35 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) 15m0.184068012s ago: executing program 36 (id=860): syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0xffffff63) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea", 0x38, 0x840, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000d00)}, {0x0}, {0x0}], 0x3, &(0x7f00000014c0)}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m45.785081174s ago: executing program 6 (id=1698): set_mempolicy(0x3, &(0x7f0000000000)=0x1004, 0x4) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./bus\x00', 0x40, &(0x7f0000000080)=ANY=[], 0x1, 0x5c4, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 9m45.181064785s ago: executing program 6 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xa003, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x15b5c080) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0x4) write$binfmt_misc(r5, 0x0, 0xfffffecc) close$binfmt(r5) vmsplice(r4, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0xd) 9m43.697635552s ago: executing program 6 (id=1709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x8080) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r9, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="f2", 0x14}], 0x1}, 0x4011) 9m33.012390803s ago: executing program 6 (id=1735): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r0, 0x208}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 9m32.712076168s ago: executing program 6 (id=1739): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000003c0)='.\x00', 0x1b4a47c, &(0x7f0000000740)=ANY=[], 0x5, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x61) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) 9m26.209561584s ago: executing program 6 (id=1759): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x168}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m25.804211275s ago: executing program 37 (id=1759): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x168}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m17.677568993s ago: executing program 8 (id=1786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r9, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="f2", 0x14}], 0x1}, 0x4011) 9m10.96568855s ago: executing program 8 (id=1797): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@netfilter={0xa, 0x0, 0x8, 0x1}}, 0x20) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m9.756806932s ago: executing program 8 (id=1800): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000402000004000000", @ANYRES8], 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0x56, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m9.442064918s ago: executing program 8 (id=1801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r2}, 0x18) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 9m8.151919485s ago: executing program 8 (id=1804): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x840) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, 0x0) 9m7.220182203s ago: executing program 8 (id=1807): unshare(0x4a000200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000ffff2bbd7000fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="715a030063180100280012800b000100697036746e6c00001800028014000200ff"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8080, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write(r1, 0x0, 0x0) 9m5.991812346s ago: executing program 7 (id=1809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xa003, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x15b5c080) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) capset(0x0, &(0x7f0000000400)={0x1, 0x3, 0x7fffffff, 0x1, 0x1, 0x514}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b45, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) close$binfmt(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0xd) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) getpeername$unix(r3, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000820) 9m4.895235383s ago: executing program 7 (id=1810): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000402000004000000", @ANYRES8], 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0x56, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m4.496404174s ago: executing program 7 (id=1811): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2194037642dfcca0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m4.238939097s ago: executing program 7 (id=1812): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700010400000000000400020006"], 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x2000000022, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x10}}, 0x10) ptrace$setregs(0xd, 0x0, 0x8c, &(0x7f00000002c0)="e44c9117") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r2, 0x540d) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m3.833588678s ago: executing program 7 (id=1813): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) unshare(0x20000400) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9m3.750880212s ago: executing program 7 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f00000002c0)='\x00@', 0x2}], 0x1}, 0x4) 8m51.76878154s ago: executing program 38 (id=1807): unshare(0x4a000200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000ffff2bbd7000fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="715a030063180100280012800b000100697036746e6c00001800028014000200ff"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8080, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write(r1, 0x0, 0x0) 8m48.366653705s ago: executing program 39 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f00000002c0)='\x00@', 0x2}], 0x1}, 0x4) 39.031472117s ago: executing program 9 (id=4228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x20000, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x9, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044014}, 0x44008090) 38.673636305s ago: executing program 9 (id=4230): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000d0100000010000043"], 0x28}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x43, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 38.658855836s ago: executing program 3 (id=4231): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 38.417019718s ago: executing program 9 (id=4234): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0xfd, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000040)="ab8063fae9217c4f77c6e4ccdf1a2c31c38cc970aace2cfe34dc0326637753623731b6c46b5e1ec7ab514ca63ae336e3ed08b0efd6552cac12", 0x39}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce9", 0x8c}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 38.2002404s ago: executing program 3 (id=4237): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1b", 0x7a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3cc", 0x4f}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a", 0x7d}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 38.032689539s ago: executing program 9 (id=4239): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 37.825597829s ago: executing program 3 (id=4242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 37.407259781s ago: executing program 3 (id=4245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000440)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) 37.293653217s ago: executing program 9 (id=4246): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21085c, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x4000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0xc, r0, 0x20, 0x0, 0x9, 0xfffffffffdffffff}) 36.83569465s ago: executing program 3 (id=4248): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8"], 0xca) 36.753669645s ago: executing program 9 (id=4249): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0xfd, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000040)="ab8063fae9217c4f77c6e4ccdf1a2c31c38cc970aace2cfe34dc0326637753623731b6c46b5e1ec7ab514ca63ae336e3ed08b0efd6552cac12", 0x39}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce9", 0x8c}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 36.290504889s ago: executing program 40 (id=4249): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0xfd, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000040)="ab8063fae9217c4f77c6e4ccdf1a2c31c38cc970aace2cfe34dc0326637753623731b6c46b5e1ec7ab514ca63ae336e3ed08b0efd6552cac12", 0x39}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce9", 0x8c}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 36.169073995s ago: executing program 3 (id=4256): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000fcffff0707000000", @ANYRES32, @ANYBLOB="000000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 34.315671981s ago: executing program 41 (id=4256): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000fcffff0707000000", @ANYRES32, @ANYBLOB="000000000000000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.675821397s ago: executing program 2 (id=4389): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000080000000000000000085"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.477601337s ago: executing program 1 (id=4391): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa4666bbcc6ca80ec", 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5f49c64823fa5472ce8f93627cf3e8e24e23437c78443fdbf5127970b5b11290ccf407f1ebc06f0fe54a6770bfd5c806f22b890b75e2844cc77696eb115f1be20312044be6b0aeab130a9ce0abcbf038afdb2575cb3943d77d0e6c0f217730d8aec201b7d235d1ffb7608a3f1f73b72af1a58c709e420f5a882c9089df362e595e1bac2da54764ebe798db45e81e9b33878bdc0f7ecf1b657c2b8f4d1d2ed1e5dd05601326ec472bcb2a46cbadea8fd7e1d8fa41b7f908fc96eb20d7b0b07480208e5d9e2bbac061cac9429d04c973a0483ee181c0c6af8d736eadf0b5748cf8e8188c08cbda54a2404e061b1e28d075d9518dfcc503cb1735a26505c8799dff779cc168be1b4b08ab52a68785f040a5352105d69fafb28167e07e8965c8469c96733e3e3220354f7665794b1293c85e48cd87219b1bc2529217c394d80265227a688d4409ceeeb94c7e4cf2e5736", 0x21e}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.205599432s ago: executing program 2 (id=4394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.205310332s ago: executing program 0 (id=4395): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@delchain={0x54, 0x65, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff1}, {0x5, 0xffff}, {0xfff1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x89}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x891}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xc}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8849}, 0x448d4) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0xc, 0x2}}}, 0x7e}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.097538468s ago: executing program 4 (id=4396): r0 = open(0x0, 0x8480, 0x31) openat2(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe}, 0x0, 0x0) 3.969949494s ago: executing program 5 (id=4397): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.773948104s ago: executing program 2 (id=4398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.990472125s ago: executing program 0 (id=4399): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfffbfffd, 0x2, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x4, 0x203}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000200)='G', 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 2.989740735s ago: executing program 5 (id=4400): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d", 0x65}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.957429666s ago: executing program 1 (id=4401): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.944280237s ago: executing program 4 (id=4402): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841", 0x3a}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a8551", 0x6a}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.644181782s ago: executing program 1 (id=4403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.643481433s ago: executing program 4 (id=4404): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150200000000000020001280080001006873720014", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 2.573430356s ago: executing program 0 (id=4405): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000080000000000000000085"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.564507437s ago: executing program 5 (id=4406): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$P9_RRENAME(r1, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, &(0x7f00000003c0)=0x84) 2.372844697s ago: executing program 1 (id=4407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000001228290081e949b93897bc3b0000000000007d01ff0200"], 0xfdef) 2.253497043s ago: executing program 5 (id=4408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff1, 0xb}, {0xa, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.243638373s ago: executing program 0 (id=4409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001780)=""/248, 0xf8}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x2}, 0xd}], 0x1, 0x10022, 0x0) 2.225204105s ago: executing program 4 (id=4410): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.993659586s ago: executing program 2 (id=4411): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0) 1.771481408s ago: executing program 2 (id=4412): timer_create(0x8, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f00db519448fb81bc5b679ee056627a2db04ff8cbb222978edd412f1f50417f6f06deda57e25215b8663a5d6be143c7ad027d0754dcf6ad7b19a8cef08a790e33"], 0x0, 0x54}, 0x28) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204000, &(0x7f0000000600), 0x1, 0x592, &(0x7f00000014c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x7, 0x6, 0xf, 0x6, 0xfffffff0, 0x9}) 1.697777362s ago: executing program 1 (id=4413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.690931492s ago: executing program 4 (id=4414): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.590644157s ago: executing program 5 (id=4415): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f000000cac0), 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 525.921802ms ago: executing program 2 (id=4416): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d", 0x65}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 461.683835ms ago: executing program 0 (id=4417): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 429.659277ms ago: executing program 5 (id=4418): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 389.398249ms ago: executing program 4 (id=4419): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$P9_RRENAME(r1, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, &(0x7f00000003c0)=0x84) 109.649434ms ago: executing program 1 (id=4420): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000008000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 0 (id=4421): socket$inet6_tcp(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered disabled state [ 844.810130][ T4641] team0 (unregistering): Port device team_slave_1 removed [ 845.017114][ T4641] team0 (unregistering): Port device team_slave_0 removed [ 845.091598][ T4641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.176598][ T4641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.565263][ T4641] bond0 (unregistering): Released all slaves [ 845.740392][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2122'. [ 845.764050][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2121'. [ 846.027797][T13360] team0: Port device team_slave_0 added [ 846.074863][T13360] team0: Port device team_slave_1 added [ 846.342707][T13360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.358040][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.465164][T13360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.619116][T13360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.629154][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.772402][T13360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.312816][T13360] device hsr_slave_0 entered promiscuous mode [ 847.339158][T13360] device hsr_slave_1 entered promiscuous mode [ 847.363006][T13360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 847.405481][T13360] Cannot create hsr debugfs directory [ 847.912886][T13608] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 848.191284][T13278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 848.383777][T13278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 848.578477][T13278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 848.626392][T13278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 848.913508][T13627] loop9: detected capacity change from 0 to 8192 [ 849.494748][T13278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.981474][T13278] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.087637][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.125434][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.433512][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.456083][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.495973][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.503328][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.547962][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 850.740258][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.758418][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.835513][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.845585][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.060568][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.094753][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 851.137711][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 851.164838][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.226600][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 851.304847][T13676] overlayfs: missing 'lowerdir' [ 851.349769][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 851.363733][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.392761][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 851.423825][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 851.535471][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 851.619908][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 851.794659][T13278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.419407][T13360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 853.565254][ T4641] device hsr_slave_0 left promiscuous mode [ 853.582079][ T4641] device hsr_slave_1 left promiscuous mode [ 853.632900][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.656437][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.677579][ T4641] device bridge_slave_1 left promiscuous mode [ 853.695242][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.734925][ T4641] device bridge_slave_0 left promiscuous mode [ 853.755228][ T4641] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.487451][ T4641] team0 (unregistering): Port device team_slave_1 removed [ 854.629643][ T4641] team0 (unregistering): Port device team_slave_0 removed [ 854.880140][ T4641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.029026][ T4641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.557124][ T4641] bond0 (unregistering): Released all slaves [ 855.717981][T13360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 855.780123][T13360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 855.783811][ T27] audit: type=1326 audit(1776936174.687:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 855.835745][T13360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 855.928571][ T27] audit: type=1326 audit(1776936174.737:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.051965][ T27] audit: type=1326 audit(1776936174.737:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.159932][ T27] audit: type=1326 audit(1776936174.737:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.255936][ T27] audit: type=1326 audit(1776936174.737:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893715d04e code=0x7ffc0000 [ 856.351734][ T27] audit: type=1326 audit(1776936174.737:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.376694][T13278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.441636][T13360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.475962][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 856.495305][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 856.507939][ T27] audit: type=1326 audit(1776936174.737:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.558299][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 856.588815][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.605527][ T27] audit: type=1326 audit(1776936174.737:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.694335][T13360] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.734418][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 856.759023][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 856.814392][ T27] audit: type=1326 audit(1776936174.737:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.885755][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 856.915140][ T27] audit: type=1326 audit(1776936174.737:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.9.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f893719c819 code=0x7ffc0000 [ 856.938792][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 857.026280][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.034225][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.119252][T13278] device veth0_vlan entered promiscuous mode [ 857.217626][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 857.239938][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 857.274503][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 857.316338][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.324547][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.353445][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 857.394783][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 857.452850][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 857.507171][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 857.558803][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 857.615902][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 857.703014][T13278] device veth1_vlan entered promiscuous mode [ 857.721965][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 857.754693][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 857.787614][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 857.818687][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 857.863610][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 857.913675][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 857.933935][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 857.957340][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 858.221100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 858.321699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 858.653235][T13360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 858.827941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 858.856385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 858.924409][T13278] device veth0_macvtap entered promiscuous mode [ 858.984739][T13278] device veth1_macvtap entered promiscuous mode [ 859.049160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 859.087372][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 859.162252][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.194777][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.245182][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.289717][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.497374][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.594019][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.691019][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.781062][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.883576][T13278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.984975][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.087157][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.146314][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.214760][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.276860][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.344541][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.443104][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.525044][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.595416][T13278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.661266][T13278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.743041][T13278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.803986][T13278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.854706][T13278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.987468][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 861.016904][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 861.046165][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 861.065783][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 861.325398][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.333400][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.388933][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 861.423618][ T4641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.455012][ T4641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.463082][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 861.778224][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 861.788512][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 861.821171][T13360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.952521][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.988493][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 862.082924][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 862.083757][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 862.084725][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 862.085922][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 862.090017][T13360] device veth0_vlan entered promiscuous mode [ 862.147179][T13360] device veth1_vlan entered promiscuous mode [ 862.231086][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 862.232114][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 862.244137][T13360] device veth0_macvtap entered promiscuous mode [ 862.330273][T13360] device veth1_macvtap entered promiscuous mode [ 862.377243][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.377277][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.377289][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.377305][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.377318][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.382391][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.382700][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.382742][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.382790][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.382806][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.404636][T13360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.404798][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 862.406275][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 862.407025][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 862.407742][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 862.426314][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.426341][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.426356][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.426372][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.426385][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.426727][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.426750][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.426766][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.426782][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.426798][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.432619][T13360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.432766][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 862.434207][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 862.471439][T13360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.471547][T13360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.471580][T13360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.471612][T13360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.735483][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.735512][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.926774][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 863.605232][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.605262][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.605576][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 867.479540][T13883] 9pnet_fd: Insufficient options for proto=fd [ 870.099779][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.107479][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.832171][T14014] loop5: detected capacity change from 0 to 512 [ 874.870119][T14014] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 875.116156][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.2223: iget: bad extra_isize 58 (inode size 256) [ 875.149465][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2223: error while reading EA inode 11 err=-117 [ 875.166204][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.2223: iget: bad extra_isize 58 (inode size 256) [ 875.187628][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2223: error while reading EA inode 11 err=-117 [ 875.210137][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.2223: iget: bad extra_isize 58 (inode size 256) [ 875.259541][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2223: error while reading EA inode 18 err=-117 [ 875.277170][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.2223: iget: bad extra_isize 58 (inode size 256) [ 875.295302][T14014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2223: error while reading EA inode 18 err=-117 [ 875.310595][T14014] EXT4-fs (loop5): 1 orphan inode deleted [ 875.316589][T14014] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 877.137499][ T7422] EXT4-fs (loop5): unmounting filesystem. [ 879.329287][T14078] loop5: detected capacity change from 0 to 16 [ 879.424887][T14078] erofs: (device loop5): mounted with root inode @ nid 36. [ 879.488730][T14078] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -25 in[58, 4038] out[2639] [ 879.605732][T14078] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 881.147975][T14125] device syzkaller0 entered promiscuous mode [ 881.490439][T14132] device syzkaller0 entered promiscuous mode [ 887.386854][T14193] device syzkaller0 entered promiscuous mode [ 887.545298][ T4282] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 887.765549][ T4282] usb 4-1: Using ep0 maxpacket: 16 [ 887.776863][ T4282] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 887.820777][ T4282] usb 4-1: config 0 has no interface number 0 [ 887.855566][ T4282] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 887.903900][ T4282] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 887.957098][ T4282] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 888.002056][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.079953][ T4282] usb 4-1: Product: syz [ 888.084411][ T4282] usb 4-1: Manufacturer: syz [ 888.109226][ T4282] usb 4-1: SerialNumber: syz [ 888.128894][ T4282] usb 4-1: config 0 descriptor?? [ 888.145778][T14189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 888.156891][T14189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 888.381151][T14189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 888.410765][T14189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 888.644042][ T4282] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 889.861805][ T4282] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 889.937982][ T4282] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 889.987641][ T4282] asix: probe of 4-1:0.34 failed with error -71 [ 890.029045][ T4282] usb 4-1: USB disconnect, device number 8 [ 892.325319][ T4315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 892.541884][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 892.597026][ T4315] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 892.648605][ T4315] usb 4-1: config 0 has no interface number 0 [ 892.676761][ T4315] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 892.712034][ T4315] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 892.766316][ T4315] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 892.806436][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.824266][ T4315] usb 4-1: Product: syz [ 892.829283][ T4315] usb 4-1: Manufacturer: syz [ 892.834052][ T4315] usb 4-1: SerialNumber: syz [ 892.870878][ T4315] usb 4-1: config 0 descriptor?? [ 892.889084][T14308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 892.912687][T14308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 893.154471][T14308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 893.165259][T14308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 893.383994][ T4315] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 894.140875][T14363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 894.595548][ T4315] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 894.637285][ T4315] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 894.678418][ T4315] asix: probe of 4-1:0.34 failed with error -71 [ 894.712169][ T4315] usb 4-1: USB disconnect, device number 9 [ 895.940901][ T4661] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.074658][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 896.447565][ T4661] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.354696][ T4661] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.266430][ T4661] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.346368][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2344'. [ 904.848973][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2365'. [ 906.225643][ T4661] device hsr_slave_0 left promiscuous mode [ 906.277120][ T4661] device hsr_slave_1 left promiscuous mode [ 906.323014][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.369355][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.420328][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.493027][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.555948][ T4661] device bridge_slave_1 left promiscuous mode [ 906.598200][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.667929][ T4661] device bridge_slave_0 left promiscuous mode [ 906.758952][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.215601][ T4661] device veth1_macvtap left promiscuous mode [ 907.222418][ T4661] device veth0_macvtap left promiscuous mode [ 907.300511][ T4661] device veth1_vlan left promiscuous mode [ 907.385133][ T4661] device veth0_vlan left promiscuous mode [ 909.637561][ T4661] team0 (unregistering): Port device team_slave_1 removed [ 909.699329][ T4661] team0 (unregistering): Port device team_slave_0 removed [ 909.766612][ T4661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.831346][ T4661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.350699][ T4661] bond0 (unregistering): Released all slaves [ 910.465748][T14572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2359'. [ 910.505357][T14611] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 910.571370][T14615] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 910.597843][T14615] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 910.657180][T14616] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 910.668227][T14617] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2378'. [ 914.403307][T14697] netlink: 'syz.9.2403': attribute type 1 has an invalid length. [ 914.504669][T14697] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 914.520024][T14697] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 914.654558][T14703] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 914.709238][T14701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2398'. [ 914.731808][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2403'. [ 914.785905][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2403'. [ 917.274589][T14760] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 917.422730][T14765] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 917.591975][T14769] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 917.646958][T14769] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 917.763646][T14771] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 917.826822][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 917.845142][T14765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'. [ 917.913392][T14753] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2417'. [ 920.819760][T14861] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 922.694776][T14910] netlink: 1820 bytes leftover after parsing attributes in process `syz.1.2455'. [ 931.539674][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.546117][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.012765][T15150] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 936.898621][T15156] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 936.962855][T15156] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 937.171233][T15159] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 937.211436][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 943.865555][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 944.858295][T15297] device syzkaller0 entered promiscuous mode [ 945.693741][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2559'. [ 947.222446][T15312] loop1: detected capacity change from 0 to 40427 [ 947.295722][T15312] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 948.536865][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2571'. [ 948.954171][T15377] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 948.975080][T11627] Bluetooth: hci1: command 0x0406 tx timeout [ 952.662966][T15459] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 952.770191][T15464] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 952.785662][T15464] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 952.879468][T15459] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 953.080617][T15479] device syzkaller0 entered promiscuous mode [ 953.963769][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 954.404499][T15527] device syzkaller0 entered promiscuous mode [ 955.308619][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2632'. [ 955.576893][T15563] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2633'. [ 956.559204][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2648'. [ 956.646898][T11627] block nbd0: Receive control failed (result -1) [ 957.986453][T15644] ax25_connect(): syz.5.2660 uses autobind, please contact jreuter@yaina.de [ 958.361656][T15665] fuse: Bad value for 'group_id' [ 958.831280][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2672'. [ 959.376625][T15704] netlink: 'syz.3.2678': attribute type 1 has an invalid length. [ 959.512130][T15708] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 959.531387][T15708] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 959.691101][T15716] fuse: Bad value for 'group_id' [ 959.732734][T15704] bond3: (slave bridge5): Enslaving as an active interface with a down link [ 960.921532][T15757] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 961.107163][T15765] fuse: Bad value for 'group_id' [ 963.938247][T15838] netlink: 'syz.5.2720': attribute type 1 has an invalid length. [ 964.140305][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2724'. [ 964.154553][T15844] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 964.169882][T15844] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 964.250068][T15851] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 964.404776][T15857] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 965.785683][T15900] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 966.210965][T15924] netlink: 'syz.0.2745': attribute type 1 has an invalid length. [ 966.331278][T15926] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 966.431430][T15926] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 966.511655][T15924] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 966.551165][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 966.683291][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 966.767115][T11627] block nbd1: Receive control failed (result -1) [ 967.583675][T15972] netlink: 'syz.0.2758': attribute type 10 has an invalid length. [ 967.761118][T15972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.786453][T15972] team0: Port device bond0 added [ 968.925717][T16014] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 969.061381][T16017] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 969.096838][T16017] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 969.205637][T15994] syz.9.2764 (15994) used greatest stack depth: 19984 bytes left [ 969.345594][T16014] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 969.365110][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 970.865314][T16069] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 971.412139][T16089] netlink: 'syz.9.2789': attribute type 1 has an invalid length. [ 971.498709][T16093] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 971.511082][T16093] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 971.618782][T16089] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 971.702292][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2789'. [ 972.597596][T16130] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 975.293174][T16195] fuse: Unknown parameter 'grou00000000000000000000' [ 975.597061][T16187] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2814'. [ 975.962449][T16216] device syzkaller0 entered promiscuous mode [ 978.047192][T16279] fuse: Unknown parameter 'group_i00000000000000000000' [ 978.670760][T16290] netlink: 'syz.1.2844': attribute type 1 has an invalid length. [ 978.703171][T16290] netlink: 'syz.1.2844': attribute type 2 has an invalid length. [ 979.676295][T16316] fuse: Unknown parameter 'group_id00000000000000000000' [ 981.208196][T16362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2862'. [ 981.266901][T16342] loop3: detected capacity change from 0 to 40427 [ 981.328515][T16342] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 981.726437][T16373] fuse: Unknown parameter 'group_id00000000000000000000' [ 983.360330][T16417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2877'. [ 983.458618][T16420] fuse: Unknown parameter 'group_id00000000000000000000' [ 985.004810][T16474] fuse: Bad value for 'user_id' [ 985.414518][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2894'. [ 985.815798][T16487] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 986.311659][T16512] fuse: Bad value for 'user_id' [ 987.134216][T16540] netlink: 'syz.5.2912': attribute type 1 has an invalid length. [ 987.160484][T16540] netlink: 'syz.5.2912': attribute type 2 has an invalid length. [ 987.298833][T16545] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 987.514801][T16555] fuse: Bad value for 'user_id' [ 988.100338][T16576] netlink: 'syz.9.2924': attribute type 1 has an invalid length. [ 988.147619][T16576] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 988.178653][T16576] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 988.354840][T16584] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 988.396494][T16587] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2924'. [ 988.618536][T16598] fuse: Bad value for 'fd' [ 989.643001][T16638] fuse: Bad value for 'fd' [ 990.194067][T16654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 990.245508][T16654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 990.273577][T16654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 991.763177][T16698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.893184][T16699] netdevsim netdevsim9: Direct firmware load for . failed with error -2 [ 991.940140][T16699] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 991.993919][T16698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.311720][T16698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.551421][T16698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.782969][T16698] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.868713][T16698] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.926690][T16698] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.952494][T16698] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.983026][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.989539][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.283963][T16749] fuse: Bad value for 'fd' [ 993.317677][T16746] device syzkaller1 entered promiscuous mode [ 993.523853][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2975'. [ 994.334640][T16787] fuse: Bad value for 'fd' [ 994.515586][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2988'. [ 995.336609][T16826] device syzkaller0 entered promiscuous mode [ 995.512973][T16835] fuse: Invalid rootmode [ 995.724760][T16844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3002'. [ 996.613814][T16878] fuse: Invalid rootmode [ 997.051928][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3015'. [ 997.841850][T16925] fuse: Invalid rootmode [ 998.257256][T16907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'. [ 1001.950566][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3054'. [ 1002.027053][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3054'. [ 1002.073447][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3054'. [ 1002.116131][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3054'. [ 1002.892953][T17065] netlink: 'syz.5.3061': attribute type 1 has an invalid length. [ 1002.972750][T17067] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1003.067073][T17067] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1003.273990][T17065] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 1003.329984][T17076] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1003.681975][T17089] device syzkaller0 entered promiscuous mode [ 1008.145026][T17142] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 1008.214116][T17142] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1008.339469][T17142] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1008.464418][T17149] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 1008.528342][T17150] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1008.763704][T17125] loop1: detected capacity change from 0 to 40427 [ 1008.811824][T17125] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1009.796841][T17170] device syzkaller0 entered promiscuous mode [ 1010.382662][T17187] fuse: Unknown parameter 'user_i00000000000000000000' [ 1011.520017][T17189] loop1: detected capacity change from 0 to 40427 [ 1011.575456][T17189] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1012.487947][T17236] device syzkaller0 entered promiscuous mode [ 1014.634306][T17299] device syzkaller0 entered promiscuous mode [ 1016.559172][T17326] netlink: 'syz.5.3126': attribute type 1 has an invalid length. [ 1016.668571][T17327] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1016.701852][T17327] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1016.808837][T17328] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 1016.850932][T17331] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3126'. [ 1017.101410][T17356] device syzkaller0 entered promiscuous mode [ 1017.832780][T17383] fuse: Bad value for 'fd' [ 1019.178587][T17409] device syzkaller0 entered promiscuous mode [ 1019.222097][T17415] fuse: Bad value for 'fd' [ 1019.408774][T17416] netlink: 'syz.9.3150': attribute type 1 has an invalid length. [ 1019.820815][T17419] bond6: (slave bridge5): making interface the new active one [ 1019.877162][T17419] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1021.502528][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3167'. [ 1021.804446][T17491] netlink: 'syz.3.3170': attribute type 1 has an invalid length. [ 1022.004284][T17492] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1022.076544][T17492] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1022.248625][T17496] bond5: (slave bridge7): Enslaving as an active interface with a down link [ 1022.473413][T17510] fuse: Bad value for 'fd' [ 1023.155171][T17495] loop9: detected capacity change from 0 to 40427 [ 1023.196166][T17495] F2FS-fs (loop9): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1024.079178][T17553] fuse: Unknown parameter '0x0000000000000003' [ 1024.089967][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1025.337915][T17573] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 1025.606548][T17575] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1025.803819][T17575] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1025.993174][T17578] bond6: (slave bridge8): Enslaving as an active interface with a down link [ 1027.335787][T17617] fuse: Unknown parameter '0x0000000000000003' [ 1027.549500][T17589] loop5: detected capacity change from 0 to 40427 [ 1027.592333][T17589] F2FS-fs (loop5): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1029.696981][T17661] netlink: 'syz.5.3213': attribute type 1 has an invalid length. [ 1030.016859][T17664] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1030.055264][T17672] fuse: Unknown parameter '0x0000000000000003' [ 1030.083980][T17664] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1030.508193][T17667] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 1031.914196][T17732] fuse: Unknown parameter '0x0000000000000003' [ 1033.631033][T17756] netlink: 'syz.9.3233': attribute type 1 has an invalid length. [ 1033.941493][T17758] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1034.066035][T17758] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1034.452059][T17761] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 1035.730641][T17818] 9pnet_fd: Insufficient options for proto=fd [ 1035.770367][T17817] device syzkaller0 entered promiscuous mode [ 1036.347269][T17839] netlink: 'syz.3.3252': attribute type 1 has an invalid length. [ 1036.662022][T17842] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1036.720636][T17842] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1036.769904][T17846] bond7: (slave bridge9): Enslaving as an active interface with a down link [ 1037.431291][T17882] 9pnet_fd: Insufficient options for proto=fd [ 1038.016569][T17897] device syzkaller0 entered promiscuous mode [ 1038.911196][T17928] netlink: 'syz.9.3274': attribute type 1 has an invalid length. [ 1038.970842][T17928] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1039.103859][T17928] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1041.066265][T18005] netlink: 'syz.5.3293': attribute type 1 has an invalid length. [ 1041.086860][T18006] 9pnet_fd: Insufficient options for proto=fd [ 1041.269168][T18008] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1041.286757][T18008] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1041.464069][T18005] bond8: (slave bridge7): Enslaving as an active interface with a down link [ 1042.446925][T18055] tipc: Failed to remove unknown binding: 66,0,0/0:1346622676/1346622678 [ 1042.482930][T18055] tipc: Failed to remove unknown binding: 66,0,0/0:1346622676/1346622677 [ 1042.502309][T18058] tipc: Failed to remove unknown binding: 66,0,0/0:1346622676/1346622678 [ 1042.524599][T18058] tipc: Failed to remove unknown binding: 66,0,0/0:1346622676/1346622677 [ 1042.531012][T18059] 9pnet_fd: Insufficient options for proto=fd [ 1043.299947][T18086] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 1043.467050][T18091] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1043.487901][T18091] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1043.643951][T18086] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 1043.991199][T18122] 9pnet_fd: Insufficient options for proto=fd [ 1044.169083][T18124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3327'. [ 1044.661844][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1044.687166][T18138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1044.737763][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1044.791728][T18138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1045.176525][T18159] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3340'. [ 1045.601126][T18172] netlink: 'syz.3.3343': attribute type 1 has an invalid length. [ 1045.763984][T18175] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1045.881327][T18175] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1046.013695][T18172] bond8: (slave bridge10): Enslaving as an active interface with a down link [ 1046.921476][T18212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3354'. [ 1048.778112][T18283] 9pnet_fd: Insufficient options for proto=fd [ 1049.142923][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3377'. [ 1050.274086][T18329] 9pnet_fd: Insufficient options for proto=fd [ 1050.582233][T18336] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3391'. [ 1050.803534][T18342] fuse: Unknown parameter 'fd0x0000000000000003' [ 1051.049856][T18309] loop1: detected capacity change from 0 to 40427 [ 1051.080662][T18309] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1052.146026][T18369] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3404'. [ 1052.215816][T18373] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 1052.357721][T18381] 9pnet_fd: Insufficient options for proto=fd [ 1052.495596][T18378] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1052.631793][T18378] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1052.671457][T18394] Bluetooth: MGMT ver 1.22 [ 1052.780395][T18373] bond9: (slave bridge11): Enslaving as an active interface with a down link [ 1053.291703][T18413] device dummy0 entered promiscuous mode [ 1053.310348][T18413] device bridge0 entered promiscuous mode [ 1053.326111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1053.713210][T18423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1054.418585][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.425073][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.608790][T18417] loop9: detected capacity change from 0 to 40427 [ 1054.668040][T18417] F2FS-fs (loop9): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1055.592370][T18464] netlink: 'syz.5.3429': attribute type 1 has an invalid length. [ 1055.757284][T18467] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1055.803754][T18476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1055.827249][T18467] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1055.908270][T18472] bond9: (slave bridge8): Enslaving as an active interface with a down link [ 1056.521819][T18503] device dummy0 entered promiscuous mode [ 1056.539525][T18503] device dummy0 left promiscuous mode [ 1057.687023][T18512] loop3: detected capacity change from 0 to 40427 [ 1057.720151][T18512] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1059.419239][T18534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.426846][T18534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.263388][T18534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.330291][T18534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.860860][T18534] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.869955][T18534] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.884430][T18534] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.896750][T18534] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.024541][T18556] device dummy0 entered promiscuous mode [ 1061.032138][T18556] device dummy0 left promiscuous mode [ 1061.726164][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3463'. [ 1061.749068][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3463'. [ 1061.783258][T18629] device team0 entered promiscuous mode [ 1061.803992][T18629] device team_slave_0 entered promiscuous mode [ 1061.822853][T18629] device team_slave_1 entered promiscuous mode [ 1061.851299][T18629] device ip6gretap0 entered promiscuous mode [ 1061.873008][T18629] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1061.904165][T18629] Cannot create hsr debugfs directory [ 1061.928780][T18629] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1061.954982][T18629] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1062.674029][T18653] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 1062.837329][T18657] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1062.897705][T18657] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1063.013208][T18653] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 1063.814659][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3479'. [ 1063.859001][T18697] bond0: Device is already in use. [ 1064.805406][T18730] netlink: 'syz.5.3490': attribute type 1 has an invalid length. [ 1064.950548][T18732] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1064.962628][T18732] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1065.059796][T18730] bond10: (slave bridge9): Enslaving as an active interface with a down link [ 1065.789123][T18766] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3501'. [ 1065.856777][T18769] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1065.905848][T18769] team0: Port device bond11 added [ 1066.145313][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1066.224801][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1066.275446][T18780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1066.549737][T18774] device hsr_slave_1 left promiscuous mode [ 1067.637035][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1067.693660][T18830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1069.424818][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3540'. [ 1069.464916][T18887] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3540'. [ 1069.505783][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3540'. [ 1069.548598][T18887] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3540'. [ 1070.553882][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565c8800: rx timeout, send abort [ 1070.607993][T18884] loop3: detected capacity change from 0 to 40427 [ 1070.654123][T18884] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1071.055057][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565cbc00: rx timeout, send abort [ 1071.064488][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565c8800: abort rx timeout. Force session deactivation [ 1071.573632][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565cbc00: abort rx timeout. Force session deactivation [ 1072.330419][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1072.600587][T18936] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 1072.654016][T18936] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1072.686950][T18936] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1072.870222][T18947] bond6: (slave bridge7): Enslaving as an active interface with a down link [ 1073.625667][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1073.928392][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1073.983808][T18979] netlink: 'syz.3.3569': attribute type 4 has an invalid length. [ 1074.596192][T18996] device dummy0 entered promiscuous mode [ 1074.613468][T18996] device dummy0 left promiscuous mode [ 1074.690782][T19002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3579'. [ 1076.239892][T19041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3592'. [ 1076.879759][T19027] loop9: detected capacity change from 0 to 40427 [ 1076.908378][T19027] F2FS-fs (loop9): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1078.421662][T19087] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1078.628233][T19090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.635542][T19090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.930160][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3605'. [ 1078.963831][T19098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3605'. [ 1078.988882][T19100] device dummy0 entered promiscuous mode [ 1079.019344][T19100] device bridge0 entered promiscuous mode [ 1079.039624][T19100] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1079.059293][T19100] Cannot create hsr debugfs directory [ 1079.070996][T19100] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1079.121038][T19103] device syzkaller0 entered promiscuous mode [ 1079.153744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1079.357456][T19109] netlink: 'syz.9.3610': attribute type 1 has an invalid length. [ 1079.479607][T19114] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1079.597939][T19114] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1079.662851][T19109] bond9: (slave bridge7): Enslaving as an active interface with a down link [ 1080.523731][T19135] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1080.884211][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1080.923230][T19149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1081.215227][T19157] device syzkaller1 entered promiscuous mode [ 1082.511023][T19192] 9pnet_fd: Insufficient options for proto=fd [ 1082.662007][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1082.696916][T19198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1083.981350][T19239] 9pnet_fd: Insufficient options for proto=fd [ 1084.289531][T19215] loop3: detected capacity change from 0 to 40427 [ 1084.330885][T19215] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1085.756260][T19281] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1086.033570][T19295] 9pnet_fd: Insufficient options for proto=fd [ 1086.118090][T19299] device dummy0 entered promiscuous mode [ 1086.216726][T19299] device ip6gretap0 entered promiscuous mode [ 1086.252126][T19299] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1086.296457][T19299] Cannot create hsr debugfs directory [ 1086.322507][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1087.020187][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1087.052689][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1087.087697][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1087.115014][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1087.363719][T19297] loop1: detected capacity change from 0 to 40427 [ 1087.398299][T19297] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1088.403479][T19348] 9pnet_fd: Insufficient options for proto=fd [ 1088.987910][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1089.873515][T19397] 9pnet_fd: Insufficient options for proto=fd [ 1090.506109][T19381] loop1: detected capacity change from 0 to 40427 [ 1090.579277][T19381] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1092.135474][T19444] 9pnet_fd: Insufficient options for proto=fd [ 1093.056871][T19474] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1093.086940][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1093.099178][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1093.108526][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1093.118020][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1093.140744][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1093.150259][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1093.666654][T19475] chnl_net:caif_netlink_parms(): no params data found [ 1093.916106][T19475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.965286][T19475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.010339][T19475] device bridge_slave_0 entered promiscuous mode [ 1094.041807][T19518] bridge0: port 3(syz_tun) entered blocking state [ 1094.064758][T19518] bridge0: port 3(syz_tun) entered disabled state [ 1094.105937][T19518] device syz_tun entered promiscuous mode [ 1094.119112][T19518] bridge0: port 3(syz_tun) entered blocking state [ 1094.125747][T19518] bridge0: port 3(syz_tun) entered forwarding state [ 1094.161018][T19475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.178471][T19475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.203469][T19475] device bridge_slave_1 entered promiscuous mode [ 1094.346569][T19475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.414057][T19475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.558150][T19475] team0: Port device team_slave_0 added [ 1094.567696][T19475] team0: Port device team_slave_1 added [ 1094.701625][T19475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.745027][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.839026][T19475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.877900][T19475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.904924][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.014922][T19475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.215068][T11627] Bluetooth: hci3: command 0x0409 tx timeout [ 1095.317117][T19475] device hsr_slave_0 entered promiscuous mode [ 1095.335899][T19475] device hsr_slave_1 entered promiscuous mode [ 1095.364626][T19475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.399424][T19475] Cannot create hsr debugfs directory [ 1096.184481][T19475] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.439900][T19475] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.566401][T19573] device dummy0 entered promiscuous mode [ 1096.604773][T19573] device ip6gretap0 entered promiscuous mode [ 1096.645653][T19573] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1096.653400][T19573] Cannot create hsr debugfs directory [ 1096.703653][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1096.822187][T19475] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.864080][T19578] device veth0 entered promiscuous mode [ 1096.887471][T19577] device veth0 left promiscuous mode [ 1096.915005][T19581] tipc: Started in network mode [ 1096.920082][T19581] tipc: Node identity fff, cluster identity 10 [ 1096.947754][T19581] tipc: Node number set to 4095 [ 1096.955632][T19581] tipc: Cannot configure node identity twice [ 1097.162515][T19475] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.295056][T11627] Bluetooth: hci3: command 0x041b tx timeout [ 1097.725348][T19475] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1097.795707][T19475] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1097.832903][T19475] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1097.879181][T19475] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1098.141880][T19614] tipc: Started in network mode [ 1098.158304][T19614] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1098.190571][T19614] tipc: Enabled bearer , priority 10 [ 1098.238043][T19475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.313012][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1098.336525][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1098.395990][T19475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.439278][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1098.462658][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1098.511995][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.519202][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.633718][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1098.661149][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1098.688044][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1098.712153][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.719515][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.743529][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1098.759736][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1098.783106][T19627] device ip6tnl1 entered promiscuous mode [ 1098.945178][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1098.967783][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1098.978662][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1099.008843][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1099.038575][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1099.060086][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1099.134560][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1099.168208][T19475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1099.200141][T19475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1099.217737][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1099.240800][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1099.323667][ T4310] tipc: Node number set to 4269801488 [ 1099.375108][T11627] Bluetooth: hci3: command 0x040f tx timeout [ 1100.054083][T19657] bridge0: port 3(syz_tun) entered blocking state [ 1100.105100][T19657] bridge0: port 3(syz_tun) entered disabled state [ 1100.136447][T19657] device syz_tun entered promiscuous mode [ 1100.368240][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1100.386968][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1100.397759][T19475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.667088][T19672] device syzkaller0 entered promiscuous mode [ 1101.421645][T19689] netlink: 'syz.0.3773': attribute type 1 has an invalid length. [ 1101.455057][T11627] Bluetooth: hci3: command 0x0419 tx timeout [ 1101.474203][T19689] netlink: 'syz.0.3773': attribute type 2 has an invalid length. [ 1102.185505][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1102.239755][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1102.309564][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1102.370308][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1102.396636][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1102.445861][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1102.487518][T19475] device veth0_vlan entered promiscuous mode [ 1102.547253][T19475] device veth1_vlan entered promiscuous mode [ 1102.684330][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1102.713894][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1102.751495][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1102.816203][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1102.902641][T19475] device veth0_macvtap entered promiscuous mode [ 1102.975748][T19475] device veth1_macvtap entered promiscuous mode [ 1103.036316][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3786'. [ 1103.053506][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3786'. [ 1103.102142][T19735] device team0 entered promiscuous mode [ 1103.125473][T19735] device team_slave_0 entered promiscuous mode [ 1103.157902][T19735] device team_slave_1 entered promiscuous mode [ 1103.170496][T19735] device team0 left promiscuous mode [ 1103.195051][T19735] device team_slave_0 left promiscuous mode [ 1103.215235][T19735] device team_slave_1 left promiscuous mode [ 1103.254299][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1103.280629][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1103.322459][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.355024][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.396757][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.434962][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.452801][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.476840][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.499200][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.519351][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.550087][T19475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.575965][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1103.586279][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1103.619524][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.684822][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.724168][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.751348][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.815681][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.869902][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.903961][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.941470][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.983834][T19475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.042848][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1104.114396][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1104.171766][T19475] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.190888][T19475] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.217406][T19475] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.267558][T19475] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.432777][T19749] device syzkaller0 entered promiscuous mode [ 1107.861538][ T4641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.902207][ T4641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.944150][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1107.993295][ T4641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.032458][ T4641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.055357][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1109.493696][T19841] device syzkaller0 entered promiscuous mode [ 1109.653794][T10671] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.700698][T11627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1109.714309][T11627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1109.725574][T11627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1109.733750][T11627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1109.741473][T11627] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1109.749033][T11627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1110.009123][T10671] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.359363][T19875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1111.862219][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 1113.181535][T10671] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.406439][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1113.423962][T10671] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.538326][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1113.566543][T19885] 8021q: VLANs not supported on hsr0 [ 1113.939245][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 1114.505430][T19857] chnl_net:caif_netlink_parms(): no params data found [ 1114.664092][T19927] device syzkaller0 entered promiscuous mode [ 1115.290956][T19857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.318761][T19857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.339968][T19857] device bridge_slave_0 entered promiscuous mode [ 1115.439537][T19857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.454290][T19857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.463535][T19857] device bridge_slave_1 entered promiscuous mode [ 1115.618873][T19857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.828375][T10671] bond1: (slave gretap1): Releasing active interface [ 1115.853455][T19857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.867290][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.873749][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.025013][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 1116.071384][T19857] team0: Port device team_slave_0 added [ 1116.080315][T19974] netlink: 'syz.0.3845': attribute type 12 has an invalid length. [ 1116.167955][T19857] team0: Port device team_slave_1 added [ 1116.505663][T19857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.512974][T19857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.631269][T19857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.682869][T19857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.705088][T19857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.822992][T19857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.032755][T10671] device dummy0 left promiscuous mode [ 1117.062449][T10671] device bridge0 left promiscuous mode [ 1117.169637][T10671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.194143][T10671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.210606][T10671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.228717][T10671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.254589][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.277560][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.689638][T10671] team0 (unregistering): Port device bond11 removed [ 1117.700085][T10671] bond11 (unregistering): Released all slaves [ 1117.725232][T10671] bond10 (unregistering): (slave bridge9): Releasing active interface [ 1117.786304][T10671] bond10 (unregistering): Released all slaves [ 1117.811513][T10671] bond9 (unregistering): (slave bridge8): Releasing active interface [ 1117.868814][T10671] bond9 (unregistering): Released all slaves [ 1117.912501][T10671] bond8 (unregistering): (slave bridge7): Releasing active interface [ 1117.969536][T10671] bond8 (unregistering): Released all slaves [ 1117.992883][T10671] bond7 (unregistering): (slave bridge6): Releasing active interface [ 1118.047847][T10671] bond7 (unregistering): Released all slaves [ 1118.081130][T10671] bond6 (unregistering): (slave bridge5): Releasing active interface [ 1118.096552][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 1118.138818][T10671] bond6 (unregistering): Released all slaves [ 1118.161796][T10671] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1118.218705][T10671] bond5 (unregistering): Released all slaves [ 1118.246626][T10671] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1118.297678][T10671] bond4 (unregistering): Released all slaves [ 1118.330164][T10671] bond3 (unregistering): (slave veth3): Releasing active interface [ 1118.510853][T10671] bond3 (unregistering): Released all slaves [ 1118.559658][T10671] bond2 (unregistering): Released all slaves [ 1118.617856][T10671] bond1 (unregistering): Released all slaves [ 1119.283916][T10671] team0 (unregistering): Port device team_slave_1 removed [ 1119.352220][T10671] team0 (unregistering): Port device team_slave_0 removed [ 1119.411841][T10671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.477489][T10671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.972811][T10671] bond0 (unregistering): Released all slaves [ 1120.128553][T19995] device syzkaller0 entered promiscuous mode [ 1123.320152][T20012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3852'. [ 1123.329344][T20012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3852'. [ 1123.344049][T20012] device bond0 entered promiscuous mode [ 1123.350192][T20012] device bond_slave_0 entered promiscuous mode [ 1123.357210][T20012] device bond_slave_1 entered promiscuous mode [ 1123.364820][T20012] device bond0 left promiscuous mode [ 1123.370529][T20012] device bond_slave_0 left promiscuous mode [ 1123.376978][T20012] device bond_slave_1 left promiscuous mode [ 1123.409670][T19857] device hsr_slave_0 entered promiscuous mode [ 1123.418075][T19857] device hsr_slave_1 entered promiscuous mode [ 1123.454755][T19857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.475625][T19857] Cannot create hsr debugfs directory [ 1125.148248][T19857] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1125.197412][T19857] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1125.209861][T20070] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3864'. [ 1125.254932][T20070] netlink: 'syz.9.3864': attribute type 1 has an invalid length. [ 1125.267052][T19857] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1125.307587][T19857] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1125.574551][T19857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.797928][T19857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.825091][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1125.842155][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1125.892921][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1125.923313][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1125.961882][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.969259][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.032300][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1126.078282][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1126.112877][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1126.143095][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.150388][ T4661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.187823][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1126.241887][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1126.264571][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3868'. [ 1126.556277][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1126.587221][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1126.626105][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1126.668986][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1126.706058][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1126.770884][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1126.790034][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1126.820501][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1126.876048][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1126.914654][T19857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1126.940416][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1126.962480][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1127.270674][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1127.301738][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1127.402209][T20120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1128.278386][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3879'. [ 1128.302234][T20144] device bond0 entered promiscuous mode [ 1128.392799][T20144] device bond_slave_0 entered promiscuous mode [ 1128.429478][T20144] device bond_slave_1 entered promiscuous mode [ 1128.457225][T20144] device bond0 left promiscuous mode [ 1128.475485][T20144] device bond_slave_0 left promiscuous mode [ 1128.496034][T20144] device bond_slave_1 left promiscuous mode [ 1128.627117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1128.645035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1128.658228][T19857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.923507][T20165] __nla_validate_parse: 1 callbacks suppressed [ 1128.923528][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1128.969506][T20165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1129.346801][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1129.371824][T20165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1130.313172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1130.350836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1130.490984][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1130.510757][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1130.543516][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1130.573022][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1130.621936][T19857] device veth0_vlan entered promiscuous mode [ 1130.667520][T19857] device veth1_vlan entered promiscuous mode [ 1130.788084][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1130.810368][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1130.866118][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1130.893428][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1130.923223][T20215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1131.159829][T19857] device veth0_macvtap entered promiscuous mode [ 1131.213972][T19857] device veth1_macvtap entered promiscuous mode [ 1131.327123][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.394959][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.445141][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.484891][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.505804][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.540956][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.575093][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.605019][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.646702][T19857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.654293][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1131.666557][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1131.727018][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1131.756773][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1131.805958][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.866772][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.918332][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.973303][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.015559][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.041171][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.065158][T19857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.111943][T19857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.144186][T19857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.228057][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1132.277166][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1132.308480][T19857] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.335155][T19857] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.374512][T19857] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.409517][T19857] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.571299][T20243] device syzkaller0 entered promiscuous mode [ 1136.375353][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.383340][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.421889][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.537374][ T4661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.554534][ T4661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.619046][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1136.937248][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1137.027745][T20308] device syzkaller0 entered promiscuous mode [ 1137.401482][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1138.172815][T20341] netlink: 'syz.0.3916': attribute type 12 has an invalid length. [ 1138.204188][T20338] device syzkaller0 entered promiscuous mode [ 1142.290685][T20335] device syzkaller1 entered promiscuous mode [ 1142.345103][T20374] device dummy0 entered promiscuous mode [ 1142.352233][T20374] device ip6gretap0 entered promiscuous mode [ 1142.372091][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1142.769542][T20422] netlink: 'syz.0.3929': attribute type 11 has an invalid length. [ 1143.694399][T20446] device syzkaller0 entered promiscuous mode [ 1143.722545][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3940'. [ 1143.739747][T20453] loop3: detected capacity change from 0 to 512 [ 1143.750107][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3940'. [ 1143.786242][T20454] device team0 entered promiscuous mode [ 1143.786421][T20453] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1143.792658][T20454] device team_slave_0 entered promiscuous mode [ 1143.818291][T20454] device team_slave_1 entered promiscuous mode [ 1143.829934][T20454] device ip6gretap0 entered promiscuous mode [ 1143.840434][T20454] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1143.849175][T20454] Cannot create hsr debugfs directory [ 1143.892121][T20453] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.3941: orphan file block 0: bad magic [ 1143.975197][T20453] EXT4-fs (loop3): Remounting filesystem read-only [ 1144.012930][T20453] EXT4-fs (loop3): mount failed [ 1147.113121][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1147.739755][T20487] netlink: 'syz.1.3953': attribute type 12 has an invalid length. [ 1147.754217][T20493] loop3: detected capacity change from 0 to 512 [ 1147.762697][T20493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1147.837460][T20493] EXT4-fs (loop3): 1 truncate cleaned up [ 1147.863690][T20493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1148.143887][T11625] EXT4-fs (loop3): unmounting filesystem. [ 1148.397189][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1148.711252][T20523] 0: reclassify loop, rule prio 0, protocol 700 [ 1149.005429][T20530] ieee802154 phy1 wpan1: encryption failed: -22 [ 1149.419825][T20539] loop1: detected capacity change from 0 to 512 [ 1149.713091][T20539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1149.722725][T20539] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.815822][T20539] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1149.979764][T20535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3965'. [ 1150.003294][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'. [ 1150.325899][T13278] EXT4-fs (loop1): unmounting filesystem. [ 1150.789179][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1152.277552][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1152.584118][T17139] kernel write not supported for file /input/event0 (pid: 17139 comm: kworker/1:7) [ 1156.209399][T20731] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1156.917629][T20755] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4036'. [ 1156.971354][T20755] loop5: detected capacity change from 0 to 512 [ 1157.457216][T20755] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1157.468034][T20755] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.520077][T20755] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1157.811392][T19857] EXT4-fs (loop5): unmounting filesystem. [ 1159.833827][T20818] device syzkaller0 entered promiscuous mode [ 1160.037280][T20827] netlink: 'syz.1.4054': attribute type 12 has an invalid length. [ 1163.130287][T20829] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4055'. [ 1163.175145][T20829] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4055'. [ 1163.857176][T20869] netlink: 'syz.5.4066': attribute type 12 has an invalid length. [ 1164.320761][T20887] device syzkaller0 entered promiscuous mode [ 1167.754628][T20896] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1167.765094][T20896] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1168.070060][T20931] netlink: 'syz.3.4083': attribute type 12 has an invalid length. [ 1168.600021][T20955] device syzkaller0 entered promiscuous mode [ 1173.314165][T21010] device macvlan2 entered promiscuous mode [ 1173.812224][T21027] device syzkaller1 entered promiscuous mode [ 1173.999238][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1174.689397][T21055] tipc: Started in network mode [ 1174.694467][T21055] tipc: Node identity 0e5a3477e02b, cluster identity 4711 [ 1174.753190][T21055] tipc: Enabled bearer , priority 0 [ 1174.788308][T21063] device syzkaller0 entered promiscuous mode [ 1174.795853][T21061] netlink: 'syz.5.4114': attribute type 11 has an invalid length. [ 1174.827929][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1174.845082][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1174.885296][T21064] device team0 entered promiscuous mode [ 1174.901188][T21064] device team_slave_0 entered promiscuous mode [ 1174.919005][T21064] device team_slave_1 entered promiscuous mode [ 1174.955098][T21064] device team0 left promiscuous mode [ 1174.961589][T21064] device team_slave_0 left promiscuous mode [ 1174.969188][T21064] device team_slave_1 left promiscuous mode [ 1175.070988][T21070] tipc: Resetting bearer [ 1175.127390][T21054] tipc: Resetting bearer [ 1175.217480][T21054] tipc: Disabling bearer [ 1175.532987][T21082] device syzkaller1 entered promiscuous mode [ 1175.574696][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 1175.783523][T21088] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4117'. [ 1176.301346][T21111] netlink: 'syz.5.4126': attribute type 11 has an invalid length. [ 1176.645739][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1176.677728][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1176.968824][T21135] device syzkaller1 entered promiscuous mode [ 1177.305238][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.614288][T21155] loop9: detected capacity change from 0 to 512 [ 1177.665842][T21155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1177.746658][T21155] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1177.821388][T21155] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.238789][T19475] EXT4-fs (loop9): unmounting filesystem. [ 1178.713664][T21195] loop3: detected capacity change from 0 to 128 [ 1178.754922][T21195] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1179.200645][T21209] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4160'. [ 1179.861949][T21229] device syzkaller1 entered promiscuous mode [ 1180.036500][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4173'. [ 1181.242006][T21254] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4178'. [ 1181.423645][T21256] device syzkaller0 entered promiscuous mode [ 1181.935283][T21269] loop3: detected capacity change from 0 to 512 [ 1185.009815][T21283] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1186.993655][T21341] netlink: 'syz.9.4202': attribute type 11 has an invalid length. [ 1189.190532][T21414] tipc: Enabling of bearer rejected, failed to enable media [ 1190.445468][T21458] loop9: detected capacity change from 0 to 128 [ 1190.598568][T21458] syz.9.4239: attempt to access beyond end of device [ 1190.598568][T21458] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1190.697451][T21458] loop2: detected capacity change from 0 to 7 [ 1190.707170][T20843] Dev loop2: unable to read RDB block 7 [ 1190.733781][T20843] loop2: AHDI p1 p2 p3 [ 1190.755014][T20843] loop2: partition table partially beyond EOD, truncated [ 1190.762340][T20843] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1190.804970][T20843] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1190.831898][T21458] Dev loop2: unable to read RDB block 7 [ 1190.863520][T21458] loop2: AHDI p1 p2 p3 [ 1190.881766][T21458] loop2: partition table partially beyond EOD, truncated [ 1190.892999][T21469] tipc: Started in network mode [ 1190.907682][T21458] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1190.914679][T21469] tipc: Node identity 4e84214b89b5, cluster identity 4711 [ 1190.933088][T21458] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1190.947265][T21469] tipc: Enabled bearer , priority 0 [ 1190.980084][T21472] device syzkaller0 entered promiscuous mode [ 1191.025550][T21469] tipc: Resetting bearer [ 1191.071078][T21468] tipc: Resetting bearer [ 1191.123064][T21475] loop3: detected capacity change from 0 to 1024 [ 1191.150179][T21475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1191.205414][T21468] tipc: Disabling bearer [ 1191.276045][T21475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1191.405338][T21475] loop3: detected capacity change from 1024 to 64 [ 1191.759274][ T4641] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.860778][T11625] bridge0: port 3(syz_tun) entered disabled state [ 1191.922789][T11625] device syz_tun left promiscuous mode [ 1191.928809][T11625] bridge0: port 3(syz_tun) entered disabled state [ 1191.991916][ T4641] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.073248][T11625] EXT4-fs (loop3): unmounting filesystem. [ 1192.144352][T21476] kmmpd-loop3: attempt to access beyond end of device [ 1192.144352][T21476] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1192.166931][ T4641] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.185382][T21476] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 1192.458633][ T4641] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.593108][T21497] 9pnet_virtio: no channels available for device syz [ 1193.390728][T21497] syz.0.4253 (21497) used greatest stack depth: 17712 bytes left [ 1193.948089][ T4641] tipc: Left network mode [ 1194.378729][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1194.390321][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1194.399555][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1194.407526][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1194.419136][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1194.431724][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1194.523841][T21504] loop1: detected capacity change from 0 to 4096 [ 1194.703631][T21504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1194.844030][T21504] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 1194.887526][T21504] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1194.887526][T21504] [ 1194.910148][T21504] EXT4-fs (loop1): Total free blocks count 0 [ 1194.947839][T21504] EXT4-fs (loop1): Free/Dirty block details [ 1194.955232][T21504] EXT4-fs (loop1): free_blocks=0 [ 1194.970846][ T4641] device ip6gretap0 left promiscuous mode [ 1194.986087][T21504] EXT4-fs (loop1): dirty_blocks=0 [ 1195.042388][T21504] EXT4-fs (loop1): Block reservation details [ 1195.110785][T21504] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 1195.322769][T13278] EXT4-fs (loop1): unmounting filesystem. [ 1195.647071][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1195.769402][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1195.782938][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1195.814268][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1195.826875][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1195.838083][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1196.499929][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 1198.025541][T21550] loop5: detected capacity change from 0 to 512 [ 1198.041927][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 1198.292579][T21550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1198.302278][T21550] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.355526][T21550] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1198.575337][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 1198.682608][T21506] chnl_net:caif_netlink_parms(): no params data found [ 1198.774480][T19857] EXT4-fs (loop5): unmounting filesystem. [ 1199.281002][T21506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.288925][T21506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.297788][T21506] device bridge_slave_0 entered promiscuous mode [ 1199.353625][T21523] chnl_net:caif_netlink_parms(): no params data found [ 1199.382008][T21506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.391630][T21506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.409058][T21506] device bridge_slave_1 entered promiscuous mode [ 1199.469549][T21560] device syzkaller0 entered promiscuous mode [ 1199.863525][T21506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.996807][T21506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.095037][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 1200.172257][ T4641] device dummy0 left promiscuous mode [ 1200.192034][ T4641] device hsr_slave_0 left promiscuous mode [ 1200.225270][ T4641] device hsr_slave_1 left promiscuous mode [ 1200.235833][ T4641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.252020][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.263139][ T4641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.286274][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.294458][ T4641] device bridge_slave_1 left promiscuous mode [ 1200.310480][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.323699][ T4641] device bridge_slave_0 left promiscuous mode [ 1200.340485][ T4641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.422580][ T4641] device veth1_macvtap left promiscuous mode [ 1200.437906][ T4641] device veth0_macvtap left promiscuous mode [ 1200.451024][ T4641] device veth1_vlan left promiscuous mode [ 1200.460685][ T4641] device veth0_vlan left promiscuous mode [ 1200.655288][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 1201.468930][ T4641] team0 (unregistering): Port device team_slave_1 removed [ 1201.529087][ T4641] team0 (unregistering): Port device team_slave_0 removed [ 1201.592447][ T4641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.657134][ T4641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.046171][ T4641] bond0 (unregistering): Released all slaves [ 1202.174913][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 1202.189707][T21523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.200907][T21523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.214100][T21523] device bridge_slave_0 entered promiscuous mode [ 1202.231606][T21619] netlink: 'syz.0.4280': attribute type 4 has an invalid length. [ 1202.313824][T21506] team0: Port device team_slave_0 added [ 1202.334518][T21523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.360662][T21523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.396470][T21523] device bridge_slave_1 entered promiscuous mode [ 1202.472647][T21506] team0: Port device team_slave_1 added [ 1202.478707][T21625] loop1: detected capacity change from 0 to 128 [ 1202.497538][T21523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.520749][T21523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.547504][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1202.547571][ T27] audit: type=1800 audit(1776936521.457:116): pid=21625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4282" name="file1" dev="loop1" ino=1048650 res=0 errno=0 [ 1202.704662][T21523] team0: Port device team_slave_0 added [ 1202.718187][T21506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.728690][T21628] syz.1.4282: attempt to access beyond end of device [ 1202.728690][T21628] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 1202.740469][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.743914][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 1202.874335][T21506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.940060][T21523] team0: Port device team_slave_1 added [ 1202.955004][T21506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.979611][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.036473][ T6914] kworker/u4:20: attempt to access beyond end of device [ 1203.036473][ T6914] loop1: rw=1, sector=233, nr_sectors = 808 limit=128 [ 1203.065076][T21506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.241832][T21523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.260904][T21523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.386049][T21523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.440381][T21523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.461880][T21523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.529892][T21523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.554585][T21506] device hsr_slave_0 entered promiscuous mode [ 1203.588899][T21506] device hsr_slave_1 entered promiscuous mode [ 1203.659258][T21506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1203.677345][T21506] Cannot create hsr debugfs directory [ 1203.847016][T21523] device hsr_slave_0 entered promiscuous mode [ 1203.866382][T21523] device hsr_slave_1 entered promiscuous mode [ 1203.886662][T21523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1203.894320][T21523] Cannot create hsr debugfs directory [ 1203.906170][T21649] loop1: detected capacity change from 0 to 8192 [ 1203.982036][T21649] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1204.263280][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 1204.273777][T21662] netlink: 'syz.5.4290': attribute type 11 has an invalid length. [ 1206.240178][T21706] loop5: detected capacity change from 0 to 8192 [ 1206.305473][T21706] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1206.309791][T21506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1206.368445][T21506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1206.637925][T21506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1206.675663][T21506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1206.956852][T21726] Bluetooth: MGMT ver 1.22 [ 1208.229257][T21506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.297285][T21506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.314679][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1208.355856][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1208.412060][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1208.434130][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1208.455557][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.462851][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.487615][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1208.510135][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1208.533228][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.540606][ T6914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.558643][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1208.573687][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1208.645973][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1208.727115][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1208.754038][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1208.771459][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1208.791609][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1208.815118][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1208.873282][T21506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1208.892324][T21506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1208.907417][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1208.917008][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1208.927719][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1208.944747][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1208.954146][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1209.011261][T21523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1209.032442][T21523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1209.060592][T21523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1209.084724][T21523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1209.332299][T21523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.349155][T21765] tipc: Enabled bearer , priority 0 [ 1209.361817][T21765] device syzkaller0 entered promiscuous mode [ 1209.400002][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1209.426253][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1209.450890][T21523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.474376][T21765] tipc: Resetting bearer [ 1209.499989][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1209.528229][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1209.556452][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.563682][ T9185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.601436][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1209.620514][T21763] tipc: Resetting bearer [ 1209.677338][T21763] tipc: Disabling bearer [ 1209.699722][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1209.727009][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1209.744738][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.751983][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.906855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1209.926534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1209.934196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1209.988568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1210.008214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1210.036184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1210.061518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1210.086068][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1210.119097][T21506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.153161][T21523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1210.165075][T21523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1210.211994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1210.223359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1210.247689][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1210.281022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1210.312698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1210.371327][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1211.346191][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1211.353814][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1211.401755][T21523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.582854][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1211.600882][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1211.730312][T21523] device veth0_vlan entered promiscuous mode [ 1211.928784][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1211.982952][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1212.101290][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1212.231487][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1212.437128][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1212.498834][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1212.628821][T21523] device veth1_vlan entered promiscuous mode [ 1212.672826][T21506] device veth0_vlan entered promiscuous mode [ 1212.691777][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1212.710321][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1212.741189][T21506] device veth1_vlan entered promiscuous mode [ 1212.825270][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1212.839378][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1212.885818][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1212.901290][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1212.920702][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1212.972660][T21523] device veth0_macvtap entered promiscuous mode [ 1213.491662][T21523] device veth1_macvtap entered promiscuous mode [ 1213.512675][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1213.550337][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1213.579378][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1213.622877][T21506] device veth0_macvtap entered promiscuous mode [ 1213.684304][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.723987][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.742410][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.754045][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.780619][T21862] loop1: detected capacity change from 0 to 128 [ 1213.786219][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.804978][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.824716][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.844998][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.889483][T21523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.897600][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1213.914208][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1213.966433][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1214.012439][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1214.148862][T21506] device veth1_macvtap entered promiscuous mode [ 1214.167635][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.180481][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.217166][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.254440][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.316149][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.334925][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.353514][T21523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.372712][T21523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.394456][T21523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.412902][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1214.424290][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1214.441176][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1214.459956][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1214.475584][T21870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4340'. [ 1214.496964][T21523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.516527][T21523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.534919][T21523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.554023][T21523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.680426][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.728561][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.754906][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.772426][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.783084][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.822774][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.844989][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.883094][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.933462][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.976883][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.994735][T21506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.006578][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.018125][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.030187][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.042621][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.061669][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.074404][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.089723][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.100611][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.118191][T21506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.133432][T21506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.156825][T21506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.179755][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1215.196446][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1215.213408][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1215.223709][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.264461][T21506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.290893][T21506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.305404][T21506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.314394][T21506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.540370][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.571371][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.630164][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1215.661969][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.684288][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.076618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1216.112996][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.162343][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.197067][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1216.243352][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.279702][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.346350][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1216.487391][T21917] loop5: detected capacity change from 0 to 1024 [ 1216.594006][T21917] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1216.846841][T21933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4355'. [ 1216.878718][T19857] EXT4-fs (loop5): unmounting filesystem. [ 1217.094900][T21938] loop2: detected capacity change from 0 to 7 [ 1217.107118][T21938] Dev loop2: unable to read RDB block 7 [ 1217.133551][T21938] loop2: AHDI p1 p2 p3 [ 1217.145538][T21938] loop2: partition table partially beyond EOD, truncated [ 1217.174569][T21938] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1217.203823][T21938] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1217.638498][T21955] netlink: 'syz.5.4363': attribute type 11 has an invalid length. [ 1218.003767][T21974] loop5: detected capacity change from 0 to 128 [ 1222.633100][T22023] netlink: 'syz.1.4377': attribute type 11 has an invalid length. [ 1223.003344][T22043] loop2: detected capacity change from 0 to 128 [ 1223.327902][T22050] device syzkaller0 entered promiscuous mode [ 1223.941671][T22072] netlink: 'syz.2.4389': attribute type 11 has an invalid length. [ 1225.973568][T22129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4404'. [ 1226.330359][T22138] tipc: Enabled bearer , priority 0 [ 1226.365906][T22138] device syzkaller0 entered promiscuous mode [ 1226.518460][T22138] tipc: Resetting bearer [ 1226.556767][T22136] tipc: Resetting bearer [ 1226.648612][T22136] tipc: Disabling bearer [ 1227.144050][T22173] loop2: detected capacity change from 0 to 512 [ 1227.450472][T22173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1227.460557][T22173] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1227.510372][T22173] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1227.907045][T21523] EXT4-fs (loop2): unmounting filesystem. [ 1228.330067][T22194] loop5: detected capacity change from 0 to 512 [ 1228.405805][T22194] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1228.494853][ C0] ------------[ cut here ]------------ [ 1228.501101][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1228.512498][ C0] WARNING: CPU: 0 PID: 22195 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 1228.522835][ C0] Modules linked in: [ 1228.526829][ C0] CPU: 0 PID: 22195 Comm: syz.1.4420 Not tainted syzkaller #0 [ 1228.534346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1228.544676][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1228.551205][ C0] Code: ef e8 98 a4 bd fd 4c 8b 45 00 48 c7 c7 00 1d df 8a 48 c7 c6 c0 19 df 8a 48 c7 c2 60 1e df 8a 8b 0c 24 4d 89 e9 e8 14 08 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d5 4b 0a [ 1228.570981][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010246 [ 1228.577161][ C0] RAX: 73326dbdc4d5f900 RBX: ffffffff96ea90d8 RCX: ffff88804d8f3b80 [ 1228.585323][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1228.593360][ C0] RBP: ffffffff8a8deea0 R08: ffffc90000007687 R09: 1ffff92000000ed0 [ 1228.601528][ C0] R10: dffffc0000000000 R11: fffff52000000ed1 R12: ffff888054e3aa00 [ 1228.609597][ C0] R13: ffffffff892b80d0 R14: ffff888054e3a000 R15: ffff888054e3a890 [ 1228.617664][ C0] FS: 000055558c05e500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1228.626696][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1228.633428][ C0] CR2: 00007f7356c4edd5 CR3: 0000000042fde000 CR4: 00000000003506f0 [ 1228.641616][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1228.649688][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1228.657764][ C0] Call Trace: [ 1228.661122][ C0] [ 1228.664467][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 1228.669960][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 1228.675187][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1228.680151][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 1228.685412][ C0] ? call_timer_fn+0x194/0x670 [ 1228.690249][ C0] call_timer_fn+0x1ac/0x670 [ 1228.695093][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1228.700203][ C0] ? call_timer_fn+0xcf/0x670 [ 1228.705029][ C0] ? __run_timers+0x800/0x800 [ 1228.709790][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1228.715206][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1228.720470][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1228.725600][ C0] __run_timers+0x53e/0x800 [ 1228.730181][ C0] ? detach_timer+0x350/0x350 [ 1228.735053][ C0] ? lock_chain_count+0x20/0x20 [ 1228.740021][ C0] run_timer_softirq+0x63/0xf0 [ 1228.744882][ C0] handle_softirqs+0x2a1/0x930 [ 1228.749708][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1228.754619][ C0] ? do_softirq+0x210/0x210 [ 1228.759253][ C0] __irq_exit_rcu+0x13b/0x230 [ 1228.764013][ C0] ? irq_exit_rcu+0x20/0x20 [ 1228.768632][ C0] irq_exit_rcu+0x5/0x20 [ 1228.772943][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1228.778785][ C0] [ 1228.781774][ C0] [ 1228.784746][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1228.790840][ C0] RIP: 0010:mas_next_entry+0xc1d/0xed0 [ 1228.796436][ C0] Code: f6 0f 94 c1 0a 4c 24 20 08 c1 74 0d e8 2c 88 67 f7 45 31 f6 e9 32 fa ff ff e8 1f 88 67 f7 eb 14 e8 18 88 67 f7 e9 19 fa ff ff 0e 88 67 f7 4c 8b 6c 24 18 48 8b 44 24 50 42 80 3c 38 00 48 8b [ 1228.816317][ C0] RSP: 0018:ffffc900048a7800 EFLAGS: 00000286 [ 1228.822459][ C0] RAX: ffff8880449c6400 RBX: 0000000000000001 RCX: ffffffffffffff00 [ 1228.830723][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1228.838829][ C0] RBP: ffffc900048a7920 R08: ffff88804d8f3b80 R09: 0000000000000003 [ 1228.846932][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880449c6000 [ 1228.855026][ C0] R13: 0000000000000001 R14: ffff8880755660d8 R15: dffffc0000000000 [ 1228.863110][ C0] validate_mm+0xf0/0x2e0 [ 1228.867562][ C0] ? vma_expand+0x880/0x880 [ 1228.872231][ C0] ? vma_mas_store+0xcc/0x2f0 [ 1228.877039][ C0] __vma_adjust+0x1855/0x1cd0 [ 1228.881806][ C0] ? validate_mm+0x2e0/0x2e0 [ 1228.886507][ C0] ? anon_vma_name+0x100/0x170 [ 1228.891336][ C0] ? vm_area_dup+0x11f/0x1a0 [ 1228.896031][ C0] __split_vma+0x3a7/0x500 [ 1228.900520][ C0] mprotect_fixup+0x5b1/0x800 [ 1228.905433][ C0] ? change_protection+0x38e0/0x38e0 [ 1228.910892][ C0] ? apparmor_file_mprotect+0xf4/0x110 [ 1228.916649][ C0] ? bpf_lsm_file_mprotect+0x5/0x10 [ 1228.921924][ C0] ? security_file_mprotect+0x7e/0xb0 [ 1228.927410][ C0] do_mprotect_pkey+0x7fe/0xba0 [ 1228.932346][ C0] ? prot_none_test+0x10/0x10 [ 1228.937156][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1228.943230][ C0] __x64_sys_mprotect+0x7c/0x90 [ 1228.948302][ C0] do_syscall_64+0x4c/0xa0 [ 1228.952787][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1228.957582][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1228.962341][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1228.968354][ C0] RIP: 0033:0x7f7356b9c617 [ 1228.972838][ C0] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.992553][ C0] RSP: 002b:00007fffc50266d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1229.001292][ C0] RAX: ffffffffffffffda RBX: 00007f7357a506c0 RCX: 00007f7356b9c617 [ 1229.009821][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f7357a31000 [ 1229.018089][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1229.026178][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffc5026830 [ 1229.034305][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1229.042403][ C0] [ 1229.045561][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1229.052889][ C0] CPU: 0 PID: 22195 Comm: syz.1.4420 Not tainted syzkaller #0 [ 1229.060437][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1229.070640][ C0] Call Trace: [ 1229.073970][ C0] [ 1229.076861][ C0] dump_stack_lvl+0x188/0x24e [ 1229.081606][ C0] ? memcpy+0x3c/0x60 [ 1229.085645][ C0] ? show_regs_print_info+0x12/0x12 [ 1229.090952][ C0] ? load_image+0x400/0x400 [ 1229.095543][ C0] panic+0x2e5/0x730 [ 1229.099500][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1229.104082][ C0] __warn+0x2f8/0x4f0 [ 1229.108127][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1229.114052][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1229.119851][ C0] report_bug+0x2ba/0x4f0 [ 1229.124251][ C0] ? debug_check_no_obj_freed+0x43c/0x530 [ 1229.130042][ C0] handle_bug+0x3a/0x70 [ 1229.134271][ C0] exc_invalid_op+0x16/0x40 [ 1229.138877][ C0] asm_exc_invalid_op+0x16/0x20 [ 1229.143943][ C0] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1229.150339][ C0] Code: ef e8 98 a4 bd fd 4c 8b 45 00 48 c7 c7 00 1d df 8a 48 c7 c6 c0 19 df 8a 48 c7 c2 60 1e df 8a 8b 0c 24 4d 89 e9 e8 14 08 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d5 4b 0a [ 1229.170106][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010246 [ 1229.176211][ C0] RAX: 73326dbdc4d5f900 RBX: ffffffff96ea90d8 RCX: ffff88804d8f3b80 [ 1229.184301][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1229.192473][ C0] RBP: ffffffff8a8deea0 R08: ffffc90000007687 R09: 1ffff92000000ed0 [ 1229.200478][ C0] R10: dffffc0000000000 R11: fffff52000000ed1 R12: ffff888054e3aa00 [ 1229.208477][ C0] R13: ffffffff892b80d0 R14: ffff888054e3a000 R15: ffff888054e3a890 [ 1229.216483][ C0] ? rose_transmit_link+0x730/0x730 [ 1229.221869][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 1229.227305][ C0] ? rose_timer_expiry+0x4a7/0x5d0 [ 1229.232542][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1229.237449][ C0] rose_timer_expiry+0x4a7/0x5d0 [ 1229.242423][ C0] ? call_timer_fn+0x194/0x670 [ 1229.247241][ C0] call_timer_fn+0x1ac/0x670 [ 1229.251863][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1229.257005][ C0] ? call_timer_fn+0xcf/0x670 [ 1229.261718][ C0] ? __run_timers+0x800/0x800 [ 1229.266436][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1229.271668][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1229.276899][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1229.282137][ C0] __run_timers+0x53e/0x800 [ 1229.286679][ C0] ? detach_timer+0x350/0x350 [ 1229.291512][ C0] ? lock_chain_count+0x20/0x20 [ 1229.296404][ C0] run_timer_softirq+0x63/0xf0 [ 1229.301319][ C0] handle_softirqs+0x2a1/0x930 [ 1229.306131][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1229.311018][ C0] ? do_softirq+0x210/0x210 [ 1229.315571][ C0] __irq_exit_rcu+0x13b/0x230 [ 1229.320287][ C0] ? irq_exit_rcu+0x20/0x20 [ 1229.324843][ C0] irq_exit_rcu+0x5/0x20 [ 1229.329304][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1229.334973][ C0] [ 1229.337926][ C0] [ 1229.340886][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1229.346915][ C0] RIP: 0010:mas_next_entry+0xc1d/0xed0 [ 1229.352410][ C0] Code: f6 0f 94 c1 0a 4c 24 20 08 c1 74 0d e8 2c 88 67 f7 45 31 f6 e9 32 fa ff ff e8 1f 88 67 f7 eb 14 e8 18 88 67 f7 e9 19 fa ff ff 0e 88 67 f7 4c 8b 6c 24 18 48 8b 44 24 50 42 80 3c 38 00 48 8b [ 1229.372052][ C0] RSP: 0018:ffffc900048a7800 EFLAGS: 00000286 [ 1229.378239][ C0] RAX: ffff8880449c6400 RBX: 0000000000000001 RCX: ffffffffffffff00 [ 1229.386243][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1229.394253][ C0] RBP: ffffc900048a7920 R08: ffff88804d8f3b80 R09: 0000000000000003 [ 1229.402380][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880449c6000 [ 1229.410506][ C0] R13: 0000000000000001 R14: ffff8880755660d8 R15: dffffc0000000000 [ 1229.418558][ C0] validate_mm+0xf0/0x2e0 [ 1229.422961][ C0] ? vma_expand+0x880/0x880 [ 1229.427604][ C0] ? vma_mas_store+0xcc/0x2f0 [ 1229.432324][ C0] __vma_adjust+0x1855/0x1cd0 [ 1229.437047][ C0] ? validate_mm+0x2e0/0x2e0 [ 1229.441788][ C0] ? anon_vma_name+0x100/0x170 [ 1229.446647][ C0] ? vm_area_dup+0x11f/0x1a0 [ 1229.451279][ C0] __split_vma+0x3a7/0x500 [ 1229.455751][ C0] mprotect_fixup+0x5b1/0x800 [ 1229.460478][ C0] ? change_protection+0x38e0/0x38e0 [ 1229.465984][ C0] ? apparmor_file_mprotect+0xf4/0x110 [ 1229.471502][ C0] ? bpf_lsm_file_mprotect+0x5/0x10 [ 1229.476778][ C0] ? security_file_mprotect+0x7e/0xb0 [ 1229.482292][ C0] do_mprotect_pkey+0x7fe/0xba0 [ 1229.487197][ C0] ? prot_none_test+0x10/0x10 [ 1229.492016][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1229.498130][ C0] __x64_sys_mprotect+0x7c/0x90 [ 1229.503048][ C0] do_syscall_64+0x4c/0xa0 [ 1229.507512][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1229.512227][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1229.516944][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1229.522904][ C0] RIP: 0033:0x7f7356b9c617 [ 1229.527383][ C0] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.547339][ C0] RSP: 002b:00007fffc50266d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1229.555791][ C0] RAX: ffffffffffffffda RBX: 00007f7357a506c0 RCX: 00007f7356b9c617 [ 1229.563798][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f7357a31000 [ 1229.571806][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1229.580001][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffc5026830 [ 1229.588001][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1229.596097][ C0] [ 1229.599716][ C0] Kernel Offset: disabled [ 1229.604160][ C0] Rebooting in 86400 seconds..