last executing test programs: 5m16.844212124s ago: executing program 2 (id=13): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x20002, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x0) getdents64(r3, &(0x7f0000000280)=""/163, 0xa3) 5m15.882946458s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open$dir(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040), 0x2) 5m14.766467047s ago: executing program 2 (id=19): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) 5m13.703648863s ago: executing program 2 (id=23): r0 = socket(0x2b, 0x1, 0xac) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @remote, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="589597c1", 0x4}], 0x1}}], 0x2, 0x40088d4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}, @TCA_CT_ACTION={0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4008010) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x29, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000400000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 5m13.359663842s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(0x0, 0x124) mount$bpf(0x0, 0x0, 0x0, 0x4400, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x90, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m12.064175435s ago: executing program 2 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x8000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 4m56.901373259s ago: executing program 32 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x8000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 3m23.813834744s ago: executing program 0 (id=354): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1c9580, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x1001c35, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xdf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 3m23.499343551s ago: executing program 0 (id=357): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setresuid(0x0, 0xee00, 0xee00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r1, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x0) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) accept(r0, 0x0, 0x0) 3m22.201312235s ago: executing program 0 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 3m20.510246927s ago: executing program 0 (id=367): socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0) pause() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) unshare(0x2040400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r1, &(0x7f00000001c0)=""/116, 0x74, 0x1000000, 0x0) 3m19.270035439s ago: executing program 0 (id=376): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r3, r2, 0xfd, 0x8) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 3m18.462568349s ago: executing program 0 (id=384): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 3m18.372341091s ago: executing program 33 (id=384): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 1m25.842175799s ago: executing program 6 (id=790): socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) 1m25.050021999s ago: executing program 6 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xffff}}, 0xd, 0x0, 0x45, 0xc0000000, 0x50, 0x401, 0x8}, &(0x7f0000000500)=0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) 1m22.743075515s ago: executing program 6 (id=802): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r3, 0x89ec, &(0x7f0000002200)="813490d03efb783eb6b0298acb3d1ea8fb93d1a4c1d9171e26c335a10ad671a38b08fe4b3335e9ccdd6fcf6654353e714645c364e63b0507b532f2fc78b7cf957c0636de39c7a07e45c8564560783e7181a585668125d6d37e6b616b0988271e8982202d6de71c24308688d034cb10b8415ed84acf3c61894390b097999d608e0b24900711c803289f60efb6017769fce35aa065309a69c929a38fe887c2738b4a8a3e3f1aa8cbdbd2f261c43f66d260cbf5e69b8f2e8bfd2d546e65b40befe49d2da1e5dd1407") sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 1m22.477974902s ago: executing program 6 (id=804): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x1, 0x4b9, &(0x7f0000001040)="$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") syz_clone(0x0, 0x0, 0xffffffffffffffa5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x9]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') 1m21.030327027s ago: executing program 6 (id=807): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) close(0x3) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="65786563203a0008c499100b49c23262e80dfac1d65b576b8ce91ef045f3f82d08d42dceea7045b533260ba0d30b2345c44997fd10006d0e2c427b3ca73ac20a6a4e0cf57dde73abc9d59b8049838b1c009c699a03ddd674e577650ab0284c95f7501f950601b8a322c74d9edf6bc06aea1f"], 0xe3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m17.026044526s ago: executing program 6 (id=825): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x6020400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)="9ccd41dcbda6f9", 0x7}], 0x1, 0x8) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000340), 0x0, 0x0, 0x0) msync(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) 1m15.405575406s ago: executing program 34 (id=825): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000003403000040feffff720af1ff0000000071a4f1ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x6020400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)="9ccd41dcbda6f9", 0x7}], 0x1, 0x8) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000340), 0x0, 0x0, 0x0) msync(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) 14.283098679s ago: executing program 1 (id=974): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) open(0x0, 0x66842, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x6, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 13.714282083s ago: executing program 1 (id=978): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x8800000, 0x101, 0x1000000) getuid() r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac0007058201000201090402"], 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 11.78960315s ago: executing program 1 (id=984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 10.359874445s ago: executing program 7 (id=986): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 10.072240292s ago: executing program 4 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x228, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x4e20, 0x2f, 0x6, 0x4e22, 0x0, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xff}, [0x0, 0xffffff00], [], 'veth1_macvtap\x00', 'xfrm0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffffffffffffffff}, {0x2}, 0x800001}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, 0x0) epoll_create1(0x80000) shutdown(r2, 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000005a0226082bbd212ba17000ffdb4525000800010400000000"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 9.438024957s ago: executing program 1 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r0, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x100) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noacl']) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2000008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 8.847504582s ago: executing program 3 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0xc83, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x4, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x8000005, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fe, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x4760, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0xfffffffc, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r3}, 0x38) 8.811692153s ago: executing program 7 (id=993): timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 8.456533061s ago: executing program 1 (id=994): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = gettid() poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x5}], 0x1, 0x90) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) shmget$private(0x0, 0x13000, 0x78000b10, &(0x7f0000feb000/0x13000)=nil) r1 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705", @ANYBLOB="3a8e9d52b5"], 0x0) 7.623591752s ago: executing program 3 (id=995): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.217059852s ago: executing program 4 (id=996): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6.953204389s ago: executing program 5 (id=997): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 6.680586855s ago: executing program 1 (id=998): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}], 0x1, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 5.472449335s ago: executing program 5 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.354028758s ago: executing program 4 (id=1000): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 3.778076037s ago: executing program 5 (id=1001): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000800) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 3.434680665s ago: executing program 7 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.387095156s ago: executing program 3 (id=1003): setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) 2.03106429s ago: executing program 7 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) 2.000223211s ago: executing program 5 (id=1005): socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x81, 0x0, 0x0, 0x800001}, {0x16, 0xfc, 0x5}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) 1.670802129s ago: executing program 3 (id=1006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000080)='ceph\x00', &(0x7f0000000180)='\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioprio_set$pid(0x1, 0x0, 0x2007) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x34}}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000045f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 1.61710573s ago: executing program 4 (id=1007): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffee2) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 806.44763ms ago: executing program 7 (id=1008): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x25dfdbfb, {0xa, 0x0, 0x46, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 780.84571ms ago: executing program 5 (id=1009): r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x2, &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x20040040) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmmsg$inet(r1, &(0x7f0000002b80)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000006007464000100000000000000e5c046fd9e1633c6d63b6ac4f8ec1a0303295c0d12843ee4ee1ac5", 0x2c}], 0x1}}], 0x1, 0x24004044) 602.457605ms ago: executing program 7 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x7f}, 0x2}) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001b80)}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000b00)="d9d9dadba929bf331c7bdb8782aeded1940b11b7b5f3ba2ae401aafa7ce4e4acc277accc41842400c0b5dbe248e3e8057d1b65a4797ab6c21dedd0b7a414e51defc0e6aabcb0e525e9a6c1f4bb6b9b8f6cd6c7504d361a139795f599f2c884ffacf3406d8e7921784879a04acee9b0df3dc3846bc78ee2bfe6c45e83013bb768c629602982b04afb3d0541764819d3647e23f612912c46a3ac341350a8174fb22443c96c151756aee525ac341a9a02ee1fc80f50cee969be129bd22cd0e2c0f3aafd58786ab89433e4b974e1d278f8b124119f91782020feb247ca80d4539d72d3c7c64f34b028eb5319bed80ab81c48bc7e5c6d49aff4cd7eb098a597f60c1739384aaac1c0b4e9d48ff727a1fcf8f47428d9e292b50ee6334d25c2ea32af75593a41a2f8cefc02a2f72724236c57b5f39024e534a5de030e0ce23d518304bf583b2696dec79a0f559857a54123952aa8b766bc77c32a2b972400297d26b79cc852eddb330cd2e23f8a455f491050e63df82bed5db9575cb40e98b50d05404beb58226092f0b2b9b86dbd4b9e38402dee82a33df177981a5bb4ccb20fdebdc4fd2e8409d0e77ded525d9a5efc1f424189d682c6b3202e14b903457318e21ba28d1d6b94b87569a5e276541ec948e3b602d1c6e6a1079a49274b4acee98ddbd1a40f184ef2f56162a7d6502d79fdd789d6b08549004c22f15975e40620f4d98bdb54d37159a5c33bbd9440e1677539c87d8f895af1b4a17d627217f68fbd9239b6cff72598354555600d300f5c35047816de379c6ced49bdb41807d617dd621d728185eee6dbe862d3e038b84078f0524aafb017a9d5f2422da983375507ff6f0383920fe636f747a673ac82d75bf84ba8d90aa2cfee36b6e3e985c2432ebc135de9c46c7182b9181190f1e098f60bbd6651fc9bdb49b2d0a78824626083552feed42d5fedd79c81c11da8871eaa6e299bc47ed240eafa148248f78c27811fee35c9441140d598778e594d145cc9c25966118833229a344f6941fa555a80b0a9e063fa4896ec02d84e69c193e7bcf159f49a21a97b39980e97bb26f944c9b0fbcca01c9b6057fb071605aafea022e3f853eaa5a25bc264d5d68fc111c32868e3c5d607f41285e78536d654e96e886eb74b56606f45b933f89d2b8d0463f9a7d83fdd2d6b4c95d99cd672f0118f33251e9cceefcf9ddaa966136c86cfae4d90298b945971d75dbec6d125d025344efc7397dd6525c5f51d2a94cb3597b587d15185ea7c0271ccf0d9ae0b0ea92e9be3b0a382cff8114f85c825f4cd42639db564f98ce7db6375590868fe2e6686f6adfee75491a422180234a6c14626aed547367c88a0b2de12cc399fc8a7409d77675ce760b6a2ca98314d85260f5b199d14adb188721b24d553ecbc278d988e9aad9e2b83a0ecbf2e065d8c1a1cd171a481ee8879a4f191f827ea6b321a2318870a39d24f66d0bb8e6bb50b5c79c3e1bcc57015bf7e5d17c468474c2bad8a59a7df6bb58bbca9fbadcf0ed081a53d76495912c664a55364a71cdbceee5807023a837e89c5262eb86f863212bb78110568be00736f404874601666fb534dee45e8150eb914ee4b2679db2039e81b60e2c687b3438e03fe5a0a4a7e38c5db91ccba00e730bd86e9f0ba89a5f2b6e1258790b955322971b5d4fab258a85eac0dbb53efff14a9a491b056b886b1ec36836e8565b1817a6477da1a5fa8a753441e81a620ef10862b70a015c9b023258aeb6f598ac546accd282484b143dd7606a851255a7afeae244d64d7a5fa75e18aed1ce3ca9c7358e38ec35cb0c87b35a23a7bdfcd1db3074ce4dc8c0caa3363bf41a4377540031760a7a55305f90f5970d68ca3152b819df3a1f84c13d2894681080a0950bfceafd35395fd851d7791148cfa68a34eade70e208dfdb6b497f5e79cd0b2354f1ea6608685b4779d38bdb91833e86112eb18129b0bd936edf5bc641116adccdbe4c10801d10dfe12f78dd28ae8507dd30aa3fe49b88e02e8aac6ca3e8a74933fc55e29d37fc9576017e2c87058acaf552421f80e8f7d60c5c42f2d5a5b4c7d7b946d1b7cef6f1d8aab81126ad16bf9fc8fe79f2a6cf844f474ddebfaa553f8a6d98c889c3c91ef78bb31cfb987520a2e4716a5df78a94cd637aab96a4606895307e68a87c3bedf0ef9a34810e4cae2b2f004fd06a6c591578ac15b500fc3164aa653b92af7a8c6ac72daa35cb90b945da1b9b92b3fd7a18b201eb58a73a150c7b4f4b817764c39d0f916de0fa3b8a87b426f9b93819c5b1238946386317c572bc851d99f19b4e822e6b118ff23dbec079e85761b15f06983f9b1809bd5f95976d16976295f74218218a346beb8f5188166a16b04afa01cce939dca49d342634338aff663f0d469d1d602cdcd780df21c05eb8ce14205fc6a1b8ff4ced916ad23c5656a6d6fa5e35b19121d7243715a378f83b941f5cb905673c7e1f431591e3c8b92e6f935b7777db94f6eb7b4a53a286360767957c636e12e9c56564a40a83c57b8cb79d92a01f534e3b875be36069dfdab783bde7c4490fb2f27b695497b632c557bd720066e38abcedfddf630b226d0d1c35a40c159e9d1fdc613b643d0db096ee2ddaff01a7e0227c606afce1b4f75d8411dee1c46aeb28404faf36e541bd426fd5fef3264d648dbcede65ff990a321436b52b265e1b85a5f3bc37991bef1eff2c1c6f1bea79dc6a870d3eea24db14c40b6e767346aac899ac51c709b4e7313af4000234be9460a729c5b27691102b46d08460a78901c6bd9f9d7fae5d11c265721196baa33427d5a827b63a28983bd7007647a592d9187d2333200f4c3ff898858a4ff3dd88e34551ca45af2d28e08adb9e87389f2143838df92b48e5ff868c33f543af274dc4f70daf03f996cd5e4fc75af73af0c524623e14c13cb19a0b192768aafb06f0120d9af9218f460b4bcb80e8d065fae21696c98531efd78cb3596e00eb2f39141aa0b64d66c07118f1af4d5a86fcc75228bb910c0d39212335006005dbcd2a4052fa94e8c4d520451fd12ca3248189ef98a32bdea27c493f5dec3f2d5ef2d2d0f62902acc8ccf7bca9d72a6bf310a60a9792f4fbae8eb1d9cfcddc81baaf4440c1a6a84f0a6f84f756cdcd769d5d47f728c32d5a4109a2596205e6e93848c970b2debdc3796cb5fc9639818802003d9de6a8707d2110b1fa02b10160ea6828aa7d5f3bdc293990b3e0639d342a6bc27025ae8f250ca8f365d8d7edcc73f1097523105006071e65eaeb126e76fa401a42ddb8c5e7c5b01c5b32c8bd3700db9509d741d582851c73401ec55a1c333a5179b7f301cb5240ccd29d31c5b59f47e2b431844d7e2a6b173aed29d2c6c6211168b171f7008e0efcc9d1bd28278587f1fc36e131504313d71fcfae3b3e81205e25707ab12a3240394c9b9ba94daa92ba35bd7781220f55a2191121467feeb8dba4cebc3cb8f099a8002b8bb5da5c0e8fa8315e99a4c9cade27b110ebcb9e015ef7c4c5a19bbd5f8b591d532cbda902348fd2f6a2935ada13d56e98ba120f96634f16a69af45d945bd4fbc255f1a3ec791a076eb5ae6845ebc5bf0d1f77d43012f04429b103e5dd20c2edd5649f69e9ff22184e73419c9db91eaba95b4e73fcf2cf33c3aed0b4642f274f5e2305309e75411886e07c21ee495833333e04dd92b4ae87fb75f591d15b6cd9a34faa1010c234bf09bd477b8069ac5c79cf4ded3e682537bf7e79c60f6b9ec7201e1676ed6fd55fbf20fafa24dc5b1999182061764d155f75f5f28df4aee338f716e539871170330a73d3b9784c84181b8379b2a475d0cb87fcb211e6e156727f2131af28cdf645840aa27861b199b079e63bd62460b864c36ba6ddebed14271216c799c841b0f158ae6671dea5ab2a4af7513e33f1cc33fed5440fa31971c1adc61904e2675978185263c0545105ac262d48014af711acfb69633d1a1eba939b8fd9261871d397ed78bb736ad5768fbb4c02fcb0e028e645a9b54b3ef71c23919393963d6ca5aef086273d6a61c561d1e626056d3b5bea8804018cd3e94b093494296c053d320dc3d89e2e22843cd076d87a15d281e8e34e2ec9ef6ee542834a46423ff6b48c3588c685982bfa57b03696195690304c8e24a6e6aa167f0f23d6d018fbf77f255734f77a0f0135cda8931349208a01c96434d6c613854ae9b6ddd022c19458a6541905271e2921cf7f4546e853c0917e673c8598b1752b8357d8a06bc3c72197999514aebab50abcc2625098e7f7eeb12aa382e0a7aa2b4146d397a1e4f868af44b420e499b2bc2b92072db4d2df863516b4d042fc68557c9061018a5790f3296f45a0332d1b41d0cb7e662ddb840f35993889361bfec3f2cabc78f504313fb21f88d9038f5f1365b4dea4a32afa8c824b49e4e4bc993e5c87b7c28a127f8743ca9f376c477799a85829ac685a7ff5825bbec7be7c4fe471123515416315f499375790ca67a98d91ebde98b93f31c6e74fe4597ae9c7534ab5d43bc6b8cbd248d36ea0c8d5f46fb34262dbaeabb0a50720cc2a884c6a6d0e71f73d245ae3bfc0d2217b51467d32a663852bbe6129b99066d293cb378ac7e8ef9e5bbcd6c296f03e87367fbc8dd0441c6ff901e210dd800c8f88a1a2699842b3d8488920f86821bc9d763c58f32f435cca4d494659c93436406732ca7b082eaab439dddd9fd6ccba205749a4ad0205f5769cd7afb74957eddbec7d1e1b2f69e2e145fff51c35018e489ffa14c1aaee3cc10eb728f5fd72b0f4cde8a7a9d0d4137bf8a8859254059a9eaca5380d9eeb83b5ffc4d40a90343f3403758766312c43e703d381cb538c6fd37a3a2851c5742d5e3712f2443edbdfe00cdc095ec5b1237e722ff7abd774d7d60c97e54a8db51b9cfa4134f427bcd1d7702d9bbe3f78e8d78c48b3e8e2b2cbf96a59abd0a73e85497253f6dbcca20e00eb6bc02cbfb5f1a9c86ab416b6ef192c582bf731e1781e86b8b14c060f2415e46ee1963c9df41aed87f4f9623535b5040a97a2d83640d5c721691421c2cc5693648ac2a3dde5212ded0edd9e001e4d3b68865ceb4a8873f19c8c9e6e1d3d083fb908becf315ade96e25f9fd04fe2ed0189a73228d8f1cc33792df7e4ce60a5112946a43f02f1c2d463f2b090a54127d1d9679a63d463dc412fca880cc86bba6be0a80e8d8a2e4d84405655c7340079df673190c837fdaba914de579101edc5f80a9539ec448f30a5533b4331f65d64b8e49c3b1dc47a90c7229c2a842e23bdbcbac83024a7146cdd260dc0bb37f15c0844b7a4356698a2943fe6c7a96a3d7192b7e7a88f42b9739b8ad669eb7503fa9fcb53154dbdaa938a63079c7afd06d473a741f24a7b974d5a4d707d1f4fe292b6ad43d505efe057f69b32a59e695601e08d560210e6a73813eb7b4dd4e194eed2e5aa07f44a406a4cec4f38972f67f0e0079f1023d43a27cfae724e345f5bc53fbe75968f144ec9d798c5707c515b7275a32c10cb6b8cca14bc9a265f068afe1c4d823ad4835fbb0f1da94c79c4db828f04a4e2a3927f17151e0d695ed9828b11b48556119380a5ea5cef0e9e1f21db665d854dc03119def1a90afa8d928f3565f31e56e4db81513f5d7c3141a4a75231a08b460bf2d7f5886fa72e7e89c9c16962f3d6ce0f2bca6ba2fb1851f07625607dcb1ed662a980a567c0b21b36da11ebcde0386e046f17aaae7c1aa7c654e3067bd5b1dbfee12905b95ab373efd5dce00a8d8c7fff9734479b8165a4db20ba03e44901157ed7", 0x1000}], 0x1}}, {{&(0x7f0000001b40)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001b80)="6cf1ab66e2571977f095d93da5d6c6aa3be933b6a065ef874894490bffd0f29cf3c0df80fb795e587540332155b233832e3c50cc9127a5b206607c0c4504470b4153eb7ed1bbe82b5c1d62a61025", 0x4e}, {&(0x7f0000001c40)="8da81efb484c971217ea1560902d2b0571b3a1bc7b879be1c245197255876b71168849fbbf5d810c22650d8fae25b2fd4c581ea0efc9ed38a05fac985e59d59d55b4310e0dd683cb792b993bef1b6ece192553f7b4f6e94334a211718160fd5caf0ac2f7c34c5169568d910e9455d40d539584bf52b308fbd21c8107cd7cfd35156be5f2ae11052a0dc8a3b6f276558ea94ba2e3dfe296ac9197a83ab134946c755b555b", 0xa4}], 0x2}}, {{&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001d80)="86c5c2c70753e1c86962c2087c81d0cdcc1c718f612d53f294713ec54c3b521b62f55bbb3c8afe4a4c8ae94d0d50fe1ac841eb2ced76f75aa114da24d883713090fcb4e6edd20e56ebef44543f67cba59c7c192e020cae056f5824f179f7579377b488f21f8a2684646752d51f26f0f0dbe3602180bbaf0269d53449af4dba7810b9f382c5921d5b19b17c1209f244fff553eb54ede1e66ce1b890ad725d7e87d2b2065a7ecf7bde819b85e43732bd568d797554e827688214e1a3460bf9d195e26d2dd0b312decfc66eb2fffd9f7f4ce4423e60c53ad8eba8fd4e7473e8173452b9575cad54e9c2e44e4b1719f3d16268ab5816f38b7e09", 0xf8}, {&(0x7f0000001e80)}], 0x2, &(0x7f0000001f40)=[@ip_ttl={{0x14}}], 0x18}}], 0x4, 0x40880d1) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197f8a9a0"], 0x34}}, 0x0) 556.297246ms ago: executing program 4 (id=1011): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a40003402000030003030000004dcf5c0461c1d67f6f94047134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb790643a5e64ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f295ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) write$9p(r4, &(0x7f0000001480)="2d76b4", 0x3) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) 509.880377ms ago: executing program 3 (id=1021): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000009, 0x0) 390.65775ms ago: executing program 5 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 167.626885ms ago: executing program 3 (id=1013): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) clock_settime(0x0, &(0x7f00000000c0)={0x0, 0x989680}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x402, 0x0) write(r2, &(0x7f0000000500)='dum', 0x3) 0s ago: executing program 4 (id=1014): r0 = socket$caif_stream(0x25, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x2000c044, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) kernel console output (not intermixed with test programs): comes ready [ 68.244141][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.266379][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.295837][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.305366][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.315372][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.322512][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.348243][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.359459][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.369038][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.380602][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.390136][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.397287][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.407123][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.416473][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.429753][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.437977][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.474131][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.486394][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.496325][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.507888][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.517203][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.527002][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.544068][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.558213][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.572260][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.596942][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.614413][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.654522][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.665455][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.674419][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.686382][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.696013][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.704900][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.714234][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.723677][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.733011][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.740115][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.778273][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.786403][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.795418][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.804573][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.813722][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.824884][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.832061][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.845177][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.866895][ T4187] device veth0_vlan entered promiscuous mode [ 68.877884][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.886757][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.897248][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.903230][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 68.906943][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.918103][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 68.919300][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.931636][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 68.938730][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.941935][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 68.949201][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.960271][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.968763][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 68.979001][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.992672][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.005250][ T4187] device veth1_vlan entered promiscuous mode [ 69.045608][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.055303][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.082130][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.101138][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.121000][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.128156][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.140397][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.156497][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.165317][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.174316][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.183623][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.190713][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.198567][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.207716][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.241584][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.253380][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.268639][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.279345][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.292991][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.307455][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.319193][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.332443][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.340092][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.348215][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.357172][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.373907][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.397259][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.415813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.433678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.446049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.467739][ T4187] device veth0_macvtap entered promiscuous mode [ 69.502082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.512913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.522706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.533748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.544641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.554262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.563533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.572866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.584654][ T4187] device veth1_macvtap entered promiscuous mode [ 69.609254][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.617807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.636408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.667429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.677183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.692481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.708248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.740233][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.778252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.787841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.798504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.807528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.816909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.826033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.838673][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.866208][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.877392][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.893613][ T4186] device veth0_vlan entered promiscuous mode [ 69.902694][ T4197] device veth0_vlan entered promiscuous mode [ 69.931953][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.941852][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.950623][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.960648][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974650][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.983301][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.992807][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.000369][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.008382][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.016617][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.035259][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.062334][ T4186] device veth1_vlan entered promiscuous mode [ 70.069765][ T4197] device veth1_vlan entered promiscuous mode [ 70.196409][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.208065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.220115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.228352][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.241966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.250103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.258919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.267608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.277166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.293044][ T4186] device veth0_macvtap entered promiscuous mode [ 70.324308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.335725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.345770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.358716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.367737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.383397][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.394600][ T4186] device veth1_macvtap entered promiscuous mode [ 70.411803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.421699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.430271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.440183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.452934][ T4192] device veth0_vlan entered promiscuous mode [ 70.480623][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.492880][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.506014][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.518338][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.529108][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.542430][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.553975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.562318][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.570171][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.574147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.587179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.600878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.609663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.619103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.628280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.637626][ T4197] device veth0_macvtap entered promiscuous mode [ 70.659560][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.668886][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.677871][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.687238][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.701892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.710809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.719656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.733883][ T4197] device veth1_macvtap entered promiscuous mode [ 70.753648][ T4192] device veth1_vlan entered promiscuous mode [ 70.798454][ T4196] device veth0_vlan entered promiscuous mode [ 70.832330][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.849786][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.860665][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.871467][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.885139][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.893009][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.902502][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.913713][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.922367][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.931019][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.939438][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.948385][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.984668][ T4196] device veth1_vlan entered promiscuous mode [ 70.991420][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 71.000447][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 71.005686][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.018312][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.028637][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 71.031422][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.046527][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.058937][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.064952][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 71.072426][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 71.072769][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.094613][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.103085][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.111704][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.120564][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.149793][ T4192] device veth0_macvtap entered promiscuous mode [ 71.163166][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.172401][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.181726][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.190475][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.944259][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.966378][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.086723][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.096370][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.126833][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.196750][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.208742][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.217594][ T4192] device veth1_macvtap entered promiscuous mode [ 72.245399][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.333176][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.343338][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.357472][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.365526][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.376033][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.384359][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.394602][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.405435][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.415664][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.427272][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.439458][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.454009][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.466659][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.476946][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.493039][ T4196] device veth0_macvtap entered promiscuous mode [ 72.517603][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.536183][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.547693][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.564517][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.577078][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.592921][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.608368][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.627185][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.637781][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.647528][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.656368][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.698803][ T4196] device veth1_macvtap entered promiscuous mode [ 72.709847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.721211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.742275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.761425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.798515][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.826244][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.855331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.892552][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.907833][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.923501][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.939746][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.969590][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.981432][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.994532][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.017779][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.029202][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.061749][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 73.078176][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 73.085642][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.118070][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.147217][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 73.163895][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 73.172514][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.188812][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 73.197945][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.220380][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.242358][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.261771][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.272401][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.282590][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.293077][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.305685][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.320525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.329322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.338551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.349304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.360351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.116377][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.131162][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.139962][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.148956][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.328827][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.348277][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.383756][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.463111][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.484886][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.508676][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.528435][ T4296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.563620][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.586106][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.648161][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.756381][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.770220][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.805254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.402088][ T4309] ======================================================= [ 75.402088][ T4309] WARNING: The mand mount option has been deprecated and [ 75.402088][ T4309] and is ignored by this kernel. Remove the mand [ 75.402088][ T4309] option from the mount to silence this warning. [ 75.402088][ T4309] ======================================================= [ 76.234353][ T4316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.339675][ T4300] loop3: detected capacity change from 0 to 32768 [ 76.644755][ T4300] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4300) [ 77.502313][ T4300] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 77.561222][ T4300] BTRFS info (device loop3): enabling ssd optimizations [ 77.618514][ T4300] BTRFS info (device loop3): not using ssd optimizations [ 77.690993][ T4300] BTRFS info (device loop3): turning off barriers [ 77.697608][ T4300] BTRFS info (device loop3): use no compression [ 77.891124][ T4300] BTRFS info (device loop3): using free space tree [ 77.971953][ T4300] BTRFS info (device loop3): has skinny extents [ 78.416368][ T4344] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.477284][ T4300] BTRFS error (device loop3): open_ctree failed: -12 [ 80.492975][ T4180] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by udevd (4180) [ 81.042601][ T4415] Zero length message leads to an empty skb [ 83.162084][ T4453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.40'. [ 84.779966][ T4494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 84.796996][ T4494] device bond_slave_0 entered promiscuous mode [ 84.803615][ T4494] device bond_slave_1 entered promiscuous mode [ 85.619262][ T4494] device bond_slave_0 left promiscuous mode [ 85.625321][ T4494] device bond_slave_1 left promiscuous mode [ 85.658886][ T4494] bond1: (slave vlan2): making interface the new active one [ 85.671368][ T4494] device bond_slave_0 entered promiscuous mode [ 85.677667][ T4494] device bond_slave_1 entered promiscuous mode [ 85.697244][ T4494] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 85.957917][ T4494] syz.3.49 (4494) used greatest stack depth: 20144 bytes left [ 86.888977][ T1107] cfg80211: failed to load regulatory.db [ 87.117997][ T4521] loop0: detected capacity change from 0 to 512 [ 87.254347][ T4521] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.349677][ T4517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.374688][ T4521] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.450078][ T4521] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.53: bad orphan inode 131083 [ 87.467906][ T4521] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000000,dioread_lock,nojournal_checksum,,errors=continue. Quota mode: none. [ 87.769432][ T4517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.003671][ T4517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.144516][ T4517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.033121][ T4517] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.049498][ T4517] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.065039][ T4517] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.080621][ T4517] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.293137][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 89.321939][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 89.340855][ T4562] device virt_wifi0 entered promiscuous mode [ 89.373365][ T4562] device macvlan2 entered promiscuous mode [ 89.461675][ T4568] loop3: detected capacity change from 0 to 8 [ 90.414038][ T4568] process 'syz.3.66' launched './file0' with NULL argv: empty string added [ 91.886492][ T4599] fuse: Bad value for 'fd' [ 94.020159][ T4637] loop3: detected capacity change from 0 to 512 [ 94.393372][ T4639] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.525172][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.533796][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.124880][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.175167][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.685027][ T4612] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.703477][ T4612] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.715140][ T4612] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.728007][ T4612] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.397862][ T4406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.090762][ C0] sched: RT throttling activated [ 98.107613][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 98.190643][ T4692] loop1: detected capacity change from 0 to 4096 [ 98.340418][ T4406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.417468][ T4696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 98.514020][ T4406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.571318][ T4696] netlink: 'syz.3.93': attribute type 2 has an invalid length. [ 98.626437][ T4692] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.650185][ T4406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.669436][ T4692] EXT4-fs (loop1): Ignoring removed orlov option [ 98.746285][ T4692] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,grpjquota=,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 98.802275][ T4664] chnl_net:caif_netlink_parms(): no params data found [ 98.843034][ T4708] fuse: Unknown parameter 'fdֆ ;E#cFO4th{趧fыz .$%' [ 99.108100][ T4664] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.127821][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.309768][ T4664] device bridge_slave_0 entered promiscuous mode [ 99.333332][ T4664] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.006732][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.036837][ T4664] device bridge_slave_1 entered promiscuous mode [ 100.171696][ T4664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.181160][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 100.248591][ T4664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.328241][ T4664] team0: Port device team_slave_0 added [ 100.337542][ T4664] team0: Port device team_slave_1 added [ 100.375685][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.387165][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.544313][ T4692] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 101.040967][ T4664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.098343][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.167423][ T4692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.221362][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.231975][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.307013][ T4664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.706784][ T4738] loop0: detected capacity change from 0 to 4096 [ 102.261131][ T4375] Bluetooth: hci3: command 0x040f tx timeout [ 102.686750][ T4664] device hsr_slave_0 entered promiscuous mode [ 102.738406][ T4664] device hsr_slave_1 entered promiscuous mode [ 102.745978][ T4664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.754044][ T4664] Cannot create hsr debugfs directory [ 104.341099][ T4372] Bluetooth: hci3: command 0x0419 tx timeout [ 104.960319][ T4664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.508143][ T4664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.001721][ T4664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.016168][ T4801] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.023309][ T4801] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.045472][ T4664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.373834][ T4821] loop3: detected capacity change from 0 to 4096 [ 106.479602][ T4823] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.493067][ T4821] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 106.519698][ T4821] NILFS (loop3): mounting fs with errors [ 106.591655][ T4821] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 106.601952][ T4821] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 106.611766][ T4821] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 106.622916][ T26] audit: type=1800 audit(1791215634.207:2): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.113" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 106.721184][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 106.732077][ T4801] device hsr_slave_0 left promiscuous mode [ 106.738712][ T4801] device hsr_slave_1 left promiscuous mode [ 106.811844][ T4821] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 159744 [ 106.820458][ T4821] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 106.830252][ T4821] NILFS (loop3): error -5 truncating bmap (ino=15) [ 106.952813][ T4821] syz.3.113 (4821) used greatest stack depth: 20112 bytes left [ 107.142391][ T4664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.165002][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.165609][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.179633][ T4664] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.207845][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.208467][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.208863][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.208956][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.209938][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.221158][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.262666][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.263154][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.263194][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.296389][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.300626][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.335589][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.336973][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.337717][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.338594][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.339616][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.344817][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.345565][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.366870][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.367511][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.384343][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.762809][ T4847] xt_socket: unknown flags 0x4c [ 108.278584][ T4846] loop0: detected capacity change from 0 to 2048 [ 108.425291][ T4846] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,block_validity,nobarrier,,errors=continue. Quota mode: writeback. [ 108.425456][ T4846] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.547220][ T4406] device hsr_slave_0 left promiscuous mode [ 108.548069][ T4406] device hsr_slave_1 left promiscuous mode [ 108.548857][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.548944][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.554520][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.554554][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.562521][ T4406] device bridge_slave_1 left promiscuous mode [ 108.563752][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.576841][ T4861] loop3: detected capacity change from 0 to 1024 [ 108.626532][ T4861] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.626637][ T4861] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.648608][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.660257][ T4861] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.660295][ T4861] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.660295][ T4861] [ 108.664966][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.667404][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.667848][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.668355][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.668774][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.669198][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.669616][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.670029][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.670455][ T4861] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.119: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.681373][ T4406] device bridge_slave_0 left promiscuous mode [ 108.681543][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.847915][ T4406] device veth1_macvtap left promiscuous mode [ 108.848179][ T4406] device veth0_macvtap left promiscuous mode [ 108.848282][ T4406] device veth1_vlan left promiscuous mode [ 108.848492][ T4406] device veth0_vlan left promiscuous mode [ 108.953558][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.953645][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.953645][ T9] [ 109.679311][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 109.696235][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 109.714445][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.732947][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.589291][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ff91400: rx timeout, send abort [ 110.782542][ T4406] bond0 (unregistering): Released all slaves [ 111.102651][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fb08400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.119878][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ff91400: abort rx timeout. Force session deactivation [ 112.315405][ T4897] device macsec1 entered promiscuous mode [ 112.381328][ T4899] Illegal XDP return value 4294967274, expect packet loss! [ 112.491709][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 112.750221][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.093872][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.530395][ T4664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.604974][ T4923] loop1: detected capacity change from 0 to 8 [ 113.691846][ T4923] SQUASHFS error: Unable to read inode 0x127 [ 113.739268][ T4930] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 113.811275][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 113.871589][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.069770][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.149303][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 114.373513][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.439175][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.539812][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.559097][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.615808][ T4664] device veth0_vlan entered promiscuous mode [ 114.633753][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.662588][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.754258][ T4664] device veth1_vlan entered promiscuous mode [ 114.857207][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.878165][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.927261][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.964070][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.014319][ T4664] device veth0_macvtap entered promiscuous mode [ 115.046420][ T4664] device veth1_macvtap entered promiscuous mode [ 115.112336][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.132798][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.174142][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.269702][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.298270][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.343139][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.377657][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.416436][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.458839][ T4664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.521912][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.540697][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.579978][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 115.699609][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.738674][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.789767][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.835906][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.908450][ T4664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.946722][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.975642][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.193942][ T4664] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.010822][ T4664] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.042241][ T4664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.076442][ T4664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.535382][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.566264][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.606295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.715926][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.730880][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.766316][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.077404][ T5022] loop1: detected capacity change from 0 to 1024 [ 121.364860][ T5022] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 121.446337][ T5022] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 121.496695][ T5022] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.153: Failed to acquire dquot type 0 [ 121.546070][ T5022] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 121.641941][ T5022] EXT4-fs (loop1): 1 truncate cleaned up [ 121.676176][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 121.709150][ T5022] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.214163][ T26] audit: type=1326 audit(1791215649.797:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43fc8a0199 code=0x0 [ 122.811292][ T5042] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 122.821998][ T5042] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 122.831851][ T5042] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.153: Failed to acquire dquot type 0 [ 123.238249][ T5039] loop5: detected capacity change from 0 to 164 [ 123.492597][ T5039] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 123.689803][ T5051] loop1: detected capacity change from 0 to 128 [ 123.733097][ T5039] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 123.789631][ T5054] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 123.822622][ T5051] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 123.910484][ T5051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.949530][ T26] audit: type=1804 audit(1791215652.527:4): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.165" name="bus" dev="ramfs" ino=36268 res=1 errno=0 [ 124.977353][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.163'. [ 125.038707][ T26] audit: type=1804 audit(1791215652.557:5): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.165" name="bus" dev="ramfs" ino=36268 res=1 errno=0 [ 125.295394][ T5087] netlink: 'syz.5.168': attribute type 1 has an invalid length. [ 126.500808][ C0] net_ratelimit: 29 callbacks suppressed [ 128.675370][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 130.933085][ T5139] netlink: 'syz.4.179': attribute type 21 has an invalid length. [ 131.046017][ T5139] netlink: 156 bytes leftover after parsing attributes in process `syz.4.179'. [ 132.020793][ C1] net_ratelimit: 27 callbacks suppressed [ 132.972153][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987690][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.685635][ T5178] tipc: Failed to remove unknown binding: 66,0,0/0:1134329036/1134329037 [ 133.737573][ T5185] tipc: Failed to remove unknown binding: 66,0,0/0:2618703953/2618703955 [ 133.790992][ T5178] tipc: Failed to remove unknown binding: 66,0,0/0:1134329036/1134329037 [ 137.220785][ C1] net_ratelimit: 35 callbacks suppressed [ 138.425313][ T26] audit: type=1326 audit(1791215666.007:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.5.202" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x0 [ 142.340825][ C0] net_ratelimit: 28 callbacks suppressed [ 144.889469][ T5281] netlink: 'syz.4.212': attribute type 16 has an invalid length. [ 144.970020][ T5281] netlink: 'syz.4.212': attribute type 17 has an invalid length. [ 145.073168][ T5281] netlink: 'syz.4.212': attribute type 27 has an invalid length. [ 146.644265][ T5303] device syzkaller0 entered promiscuous mode [ 147.308316][ T5324] loop5: detected capacity change from 0 to 2048 [ 147.448170][ T5324] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.470771][ C0] net_ratelimit: 33 callbacks suppressed [ 147.505786][ T5324] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.881625][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 149.387219][ T5353] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 150.114240][ T5345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 150.538529][ T5377] netlink: 'syz.4.238': attribute type 8 has an invalid length. [ 150.687297][ T5333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.226'. [ 150.749395][ T5384] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.777351][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 151.033813][ T5383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.064450][ T5395] tipc: Failed to remove unknown binding: 66,0,0/0:1675948472/1675948474 [ 151.080904][ T5395] tipc: Failed to remove unknown binding: 66,0,0/0:1675948472/1675948473 [ 151.128417][ T5395] tipc: Failed to remove unknown binding: 66,0,0/0:1675948472/1675948474 [ 151.181320][ T5395] tipc: Failed to remove unknown binding: 66,0,0/0:1675948472/1675948473 [ 151.202485][ T5383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.412470][ T5383] bond0 (unregistering): Released all slaves [ 152.237341][ T5467] tipc: Started in network mode [ 152.304259][ T5467] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 152.408994][ T5467] tipc: Enabled bearer , priority 10 [ 152.590775][ C0] net_ratelimit: 38 callbacks suppressed [ 154.463277][ T4656] tipc: Node number set to 4269801488 [ 158.451402][ C1] net_ratelimit: 20 callbacks suppressed [ 161.636220][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 162.037922][ T5555] fuse: Bad value for 'fd' [ 162.071842][ T5548] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 162.985738][ T4657] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.110859][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 163.222728][ T5557] bridge1: port 1(dummy0) entered blocking state [ 163.241633][ T5557] bridge1: port 1(dummy0) entered disabled state [ 163.397777][ T5557] device dummy0 entered promiscuous mode [ 163.446658][ T5559] netlink: 'syz.4.269': attribute type 10 has an invalid length. [ 163.509407][ T5559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.269'. [ 163.609933][ T5559] bridge1: port 1(dummy0) entered blocking state [ 163.616476][ T5559] bridge1: port 1(dummy0) entered forwarding state [ 163.804003][ T5559] bridge1: port 1(dummy0) entered disabled state [ 164.180801][ C1] net_ratelimit: 30 callbacks suppressed [ 164.471416][ T5564] fuse: Bad value for 'fd' [ 166.261935][ T5599] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 167.301071][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.616727][ T5634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'. [ 168.985306][ T5648] team0 (unregistering): Port device team_slave_0 removed [ 169.051793][ T5648] team0 (unregistering): Failed to send options change via netlink (err -105) [ 169.127358][ T5648] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 169.203565][ T5648] team0 (unregistering): Port device team_slave_1 removed [ 169.233790][ C0] net_ratelimit: 32 callbacks suppressed [ 169.406838][ T5665] netlink: 204 bytes leftover after parsing attributes in process `syz.0.293'. [ 169.489635][ T5672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.075400][ T5693] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.084768][ T5693] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.097529][ T5693] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.106440][ T5693] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.100760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 174.260807][ C0] net_ratelimit: 23 callbacks suppressed [ 174.410758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.430760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.440743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.450741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.460742][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.470741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.480737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.500757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.510739][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 174.736667][ T5727] FAULT_INJECTION: forcing a failure. [ 174.736667][ T5727] name failslab, interval 1, probability 0, space 0, times 1 [ 174.760805][ T5727] CPU: 0 PID: 5727 Comm: syz.3.310 Not tainted syzkaller #0 [ 174.768709][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.779263][ T5727] Call Trace: [ 174.782581][ T5727] [ 174.785552][ T5727] dump_stack_lvl+0x188/0x250 [ 174.790253][ T5727] ? show_regs_print_info+0x20/0x20 [ 174.795489][ T5727] ? load_image+0x410/0x410 [ 174.800024][ T5727] ? load_image+0x410/0x410 [ 174.805039][ T5727] should_fail+0x383/0x4b0 [ 174.811844][ T5727] should_failslab+0x5/0x20 [ 174.816416][ T5727] slab_pre_alloc_hook+0x51/0xc0 [ 174.821565][ T5727] kmem_cache_alloc_node+0x47/0x2c0 [ 174.826793][ T5727] ? __alloc_skb+0xf4/0x750 [ 174.831366][ T5727] __alloc_skb+0xf4/0x750 [ 174.835812][ T5727] ? _raw_spin_unlock+0x40/0x40 [ 174.840686][ T5727] sctp_ulpevent_make_assoc_change+0x182/0xa50 [ 174.846879][ T5727] sctp_do_sm+0x724/0x5690 [ 174.851390][ T5727] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 174.857512][ T5727] ? skb_put+0x10e/0x200 [ 174.862360][ T5727] ? sctp_make_abort_user+0xacb/0xf50 [ 174.867937][ T5727] sctp_primitive_ABORT+0x94/0xc0 [ 174.875157][ T5727] sctp_close+0x2b0/0x890 [ 174.879574][ T5727] ? __sctp_write_space+0x500/0x500 [ 174.885127][ T5727] ? rwsem_write_trylock+0x135/0x1c0 [ 174.890475][ T5727] ? clear_nonspinnable+0x60/0x60 [ 174.895765][ T5727] ? ip_mc_drop_socket+0x25f/0x270 [ 174.900930][ T5727] inet_release+0x139/0x180 [ 174.905605][ T5727] sock_close+0xbf/0x210 [ 174.910081][ T5727] ? sock_mmap+0x90/0x90 [ 174.914501][ T5727] __fput+0x212/0x8c0 [ 174.918561][ T5727] task_work_run+0x125/0x1a0 [ 174.923539][ T5727] exit_to_user_mode_loop+0x10f/0x130 [ 174.928947][ T5727] exit_to_user_mode_prepare+0xee/0x180 [ 174.934532][ T5727] syscall_exit_to_user_mode+0x16/0x40 [ 174.940180][ T5727] do_syscall_64+0x58/0xa0 [ 174.945031][ T5727] ? clear_bhb_loop+0x30/0x80 [ 174.950211][ T5727] ? clear_bhb_loop+0x30/0x80 [ 174.955008][ T5727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.960929][ T5727] RIP: 0033:0x7faefe2b7199 [ 174.965474][ T5727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.986143][ T5727] RSP: 002b:00007faefc50f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 174.994585][ T5727] RAX: 0000000000000000 RBX: 00007faefe53efa0 RCX: 00007faefe2b7199 [ 175.002599][ T5727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.010609][ T5727] RBP: 00007faefe34e0b8 R08: 0000000000000000 R09: 0000000000000000 [ 175.019734][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.027910][ T5727] R13: 00007faefe53f038 R14: 00007faefe53efa0 R15: 00007ffd6099e408 [ 175.036833][ T5727] [ 175.324060][ T5746] device vlan0 entered promiscuous mode [ 175.332709][ T5746] netlink: 148 bytes leftover after parsing attributes in process `syz.5.314'. [ 175.620888][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.749459][ T5745] device vlan0 left promiscuous mode [ 175.815121][ T5757] xt_ipcomp: unknown flags 1D [ 176.569441][ T5776] 9pnet_virtio: no channels available for device syz [ 177.989689][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.323'. [ 178.259984][ T5788] bridge1: port 1(dummy0) entered blocking state [ 178.281157][ T5788] bridge1: port 1(dummy0) entered disabled state [ 178.298373][ T5788] device dummy0 entered promiscuous mode [ 179.426616][ C0] net_ratelimit: 20 callbacks suppressed [ 179.493255][ T5795] netlink: 'syz.5.323': attribute type 10 has an invalid length. [ 179.565075][ T5795] netlink: 40 bytes leftover after parsing attributes in process `syz.5.323'. [ 179.694262][ T5795] bridge1: port 1(dummy0) entered blocking state [ 179.701042][ T5795] bridge1: port 1(dummy0) entered forwarding state [ 179.827328][ T5814] netlink: 48 bytes leftover after parsing attributes in process `syz.3.325'. [ 179.837351][ T5795] bridge1: port 1(dummy0) entered disabled state [ 179.879810][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 179.890495][ T5814] netlink: 96 bytes leftover after parsing attributes in process `syz.3.325'. [ 180.422615][ T5835] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.333'. [ 180.484266][ T5837] netlink: 'syz.1.333': attribute type 16 has an invalid length. [ 180.552057][ T5837] netlink: 'syz.1.333': attribute type 21 has an invalid length. [ 180.616603][ T5837] netlink: 'syz.1.333': attribute type 25 has an invalid length. [ 180.668119][ T5837] netlink: 'syz.1.333': attribute type 27 has an invalid length. [ 180.791503][ T5837] netlink: 'syz.1.333': attribute type 28 has an invalid length. [ 180.820936][ T5837] netlink: 'syz.1.333': attribute type 29 has an invalid length. [ 180.860024][ T5837] netlink: 'syz.1.333': attribute type 30 has an invalid length. [ 181.902236][ T5845] netlink: 44 bytes leftover after parsing attributes in process `syz.5.335'. [ 182.046060][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.053574][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.580872][ C0] net_ratelimit: 26 callbacks suppressed [ 186.463922][ T5898] futex_wake_op: syz.0.347 tries to shift op by 144; fix this program [ 189.700765][ C1] net_ratelimit: 28 callbacks suppressed [ 189.864052][ T5951] capability: warning: `syz.3.359' uses deprecated v2 capabilities in a way that may be insecure [ 190.030624][ T26] audit: type=1326 audit(1791215717.607:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 190.089831][ T26] audit: type=1326 audit(1791215717.647:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 190.197326][ T26] audit: type=1326 audit(1791215717.647:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 190.289506][ T26] audit: type=1326 audit(1791215717.647:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 190.330825][ T26] audit: type=1326 audit(1791215717.647:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 190.394840][ T5959] MPTCP: addr_signal error, rm_addr=1 [ 190.417417][ T26] audit: type=1326 audit(1791215717.647:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 190.684125][ T26] audit: type=1326 audit(1791215717.647:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 190.957414][ T26] audit: type=1326 audit(1791215717.647:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 191.424788][ T5972] ODEBUG: Out of memory. ODEBUG disabled [ 191.479287][ T4375] Bluetooth: hci2: command 0x0406 tx timeout [ 191.511496][ T26] audit: type=1326 audit(1791215717.657:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 191.537683][ T4375] Bluetooth: hci0: command 0x0406 tx timeout [ 191.579396][ T4375] Bluetooth: hci1: command 0x0406 tx timeout [ 191.620831][ T4375] Bluetooth: hci4: command 0x0406 tx timeout [ 191.724250][ T26] audit: type=1326 audit(1791215717.657:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 192.120510][ T5990] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 192.432197][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 192.900846][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.176557][ T6012] sctp: [Deprecated]: syz.1.378 (pid 6012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.176557][ T6012] Use struct sctp_sack_info instead [ 194.012810][ T6026] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 194.185699][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209579][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.821154][ C0] net_ratelimit: 27 callbacks suppressed [ 196.436678][ T6061] mmap: syz.5.393 (6061) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 196.953326][ T6045] chnl_net:caif_netlink_parms(): no params data found [ 197.176307][ T6073] batman_adv: batadv0: Adding interface: dummy0 [ 197.184856][ T6073] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.304675][ T6073] batman_adv: batadv0: Interface activated: dummy0 [ 197.460757][ T4657] Bluetooth: hci4: command 0x0409 tx timeout [ 198.992057][ T6083] netlink: 'syz.5.396': attribute type 10 has an invalid length. [ 199.059076][ T6083] device geneve0 entered promiscuous mode [ 199.184607][ T6083] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 199.211521][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.218677][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.295138][ T6045] device bridge_slave_0 entered promiscuous mode [ 199.403585][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.414211][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.481079][ T6045] device bridge_slave_1 entered promiscuous mode [ 199.540796][ T4656] Bluetooth: hci4: command 0x041b tx timeout [ 199.603762][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 199.949396][ C1] net_ratelimit: 33 callbacks suppressed [ 200.149374][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.387501][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.856021][ T6111] netlink: 165 bytes leftover after parsing attributes in process `syz.5.403'. [ 201.704031][ T4657] Bluetooth: hci4: command 0x040f tx timeout [ 204.405095][ T6045] team0: Port device team_slave_0 added [ 204.459127][ T6045] team0: Port device team_slave_1 added [ 204.555256][ T4653] Bluetooth: hci4: command 0x0419 tx timeout [ 205.284934][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.318154][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.436435][ T5458] net_ratelimit: 20 callbacks suppressed [ 205.489273][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.502185][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.509588][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.554302][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.073355][ T6045] device hsr_slave_0 entered promiscuous mode [ 206.181223][ T6045] device hsr_slave_1 entered promiscuous mode [ 208.730101][ T6193] 9pnet: p9_fd_create_unix (6193): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 209.633598][ T6045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.576587][ T5463] net_ratelimit: 48 callbacks suppressed [ 210.698947][ T6198] netlink: 'syz.1.425': attribute type 13 has an invalid length. [ 210.710947][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 210.710972][ T6198] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 210.831350][ T6045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.897649][ T6045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.011724][ T6045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.422163][ T3851] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.450319][ T3851] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.480780][ T3851] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.510553][ T3851] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.681395][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.900374][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.925817][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.984734][ T6045] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.063764][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.143098][ T6233] jffs2: notice: (6233) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 213.164534][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.192131][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.199345][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.255473][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.441977][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.535028][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.462993][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.470412][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.702496][ T6045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.760306][ T6045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.872786][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.602842][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.620820][ C1] net_ratelimit: 26 callbacks suppressed [ 215.745300][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.013352][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.047721][ T6274] xt_limit: Overflow, try lower: 1207959552/384 [ 216.063620][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.120164][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.167597][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.219093][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.275557][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.349012][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.358889][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.374378][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.254740][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.271711][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.355656][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.758950][ T6328] overlayfs: failed to clone upperpath [ 219.022006][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.050796][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.184181][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.196946][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.242940][ T6045] device veth0_vlan entered promiscuous mode [ 219.254705][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.305267][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.338964][ T6045] device veth1_vlan entered promiscuous mode [ 219.461623][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.478872][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.498876][ T6045] device veth0_macvtap entered promiscuous mode [ 219.532909][ T6045] device veth1_macvtap entered promiscuous mode [ 219.666368][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.710369][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.763742][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.774345][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.785301][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.797836][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.831149][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.847785][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.075814][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.243467][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.527401][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.597070][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.641058][ C1] net_ratelimit: 42 callbacks suppressed [ 220.661487][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.710752][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.730803][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.770835][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.813223][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.845930][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.889086][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.909428][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.929195][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.941782][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.963011][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 220.992454][ T6045] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.012843][ T6045] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.032039][ T6045] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.050789][ T6045] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.861279][ T4653] Bluetooth: hci3: command 0x0406 tx timeout [ 222.374042][ T6369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.464'. [ 222.503036][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.542562][ T6369] netlink: 43 bytes leftover after parsing attributes in process `syz.3.464'. [ 222.575796][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.620880][ T6369] netlink: 'syz.3.464': attribute type 5 has an invalid length. [ 222.629150][ T6369] netlink: 43 bytes leftover after parsing attributes in process `syz.3.464'. [ 222.689851][ T6377] syz.1.467 uses obsolete (PF_INET,SOCK_PACKET) [ 222.879281][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.918354][ T5463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.968670][ T5463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.031532][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.341782][ T6392] loop3: detected capacity change from 0 to 512 [ 224.436437][ T6392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.556339][ T6392] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.469: inode #88: comm syz.3.469: iget: illegal inode # [ 224.576668][ T6392] EXT4-fs (loop3): Remounting filesystem read-only [ 224.585770][ T6392] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.469: error while reading EA inode 88 err=-117 [ 224.600629][ T6392] EXT4-fs (loop3): Remounting filesystem read-only [ 224.610262][ T6392] EXT4-fs (loop3): 1 orphan inode deleted [ 224.617148][ T6392] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,jqfmt=vfsold,nodelalloc,bsdgroups,. Quota mode: none. [ 224.680792][ T6404] batman_adv: batadv0: Adding interface: veth0 [ 224.732049][ T6404] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.855643][ T6404] batman_adv: batadv0: Interface activated: veth0 [ 224.962961][ T6404] batman_adv: batadv0: Interface deactivated: veth0 [ 225.031404][ T6404] batman_adv: batadv0: Removing interface: veth0 [ 225.067282][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.147371][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.226918][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.241295][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.279182][ T6416] syz.4.476[6416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.279604][ T6416] syz.4.476[6416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.351119][ T6416] capability: warning: `syz.4.476' uses 32-bit capabilities (legacy support in use) [ 225.763014][ T6431] loop3: detected capacity change from 0 to 128 [ 226.180846][ C1] net_ratelimit: 71 callbacks suppressed [ 226.245355][ T6449] loop6: detected capacity change from 0 to 512 [ 226.317242][ T6449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.375842][ T6449] EXT4-fs (loop6): 1 truncate cleaned up [ 226.390527][ T6449] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,noinit_itable,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 226.821302][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.678957][ T6466] device syzkaller0 entered promiscuous mode [ 229.760924][ T4656] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 229.808387][ T6493] loop3: detected capacity change from 0 to 512 [ 230.010795][ T4656] usb 7-1: Using ep0 maxpacket: 32 [ 230.129458][ T6493] EXT4-fs (loop3): 1 truncate cleaned up [ 230.135879][ T4656] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.164545][ T6493] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 230.311304][ T4656] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 230.360932][ T4656] usb 7-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 230.433802][ T4656] usb 7-1: Product: syz [ 230.438581][ T4656] usb 7-1: Manufacturer: syz [ 230.667177][ T4656] usb 7-1: config 0 descriptor?? [ 230.701356][ T6493] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.500: corrupted xattr entries [ 230.722606][ T4656] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 230.855239][ T6493] EXT4-fs (loop3): Remounting filesystem read-only [ 230.991129][ T6503] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.500: corrupted xattr entries [ 231.100937][ T6452] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 231.173362][ T6503] EXT4-fs (loop3): Remounting filesystem read-only [ 231.265101][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 231.265119][ T26] audit: type=1326 audit(1791215758.847:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 231.320469][ T6452] EXT4-fs (loop3): Remounting filesystem read-only [ 231.359186][ T26] audit: type=1326 audit(1791215758.907:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 231.384199][ T4656] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 231.391103][ T26] audit: type=1326 audit(1791215758.927:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 231.415950][ T4656] gspca_pac7302: probe of 7-1:0.0 failed with error -71 [ 231.433723][ T4656] usb 7-1: USB disconnect, device number 2 [ 231.597104][ T26] audit: type=1326 audit(1791215758.927:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 231.700726][ C1] net_ratelimit: 41 callbacks suppressed [ 231.830773][ T26] audit: type=1326 audit(1791215758.927:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 232.029810][ T26] audit: type=1326 audit(1791215758.927:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 232.070797][ T26] audit: type=1326 audit(1791215758.927:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 233.270871][ T26] audit: type=1326 audit(1791215758.927:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 233.379490][ T6531] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 233.488286][ T26] audit: type=1326 audit(1791215758.927:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 233.512261][ T26] audit: type=1326 audit(1791215758.927:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.5.502" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x7ffc0000 [ 236.725484][ T6596] fuse: Bad value for 'fd' [ 236.751006][ C0] net_ratelimit: 50 callbacks suppressed [ 237.657840][ T6610] syz.1.525 (6610) used greatest stack depth: 19952 bytes left [ 239.046365][ T6641] loop6: detected capacity change from 0 to 4096 [ 239.144053][ T6649] tipc: Enabling of bearer rejected, failed to enable media [ 239.239767][ T6641] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.507328][ T6679] XFS (loop0): Invalid device [./loop0], error=-16 [ 242.079874][ T6675] bond0: (slave vxlan1): Enslaving as an active interface with an up link [ 242.100730][ C1] net_ratelimit: 32 callbacks suppressed [ 242.251773][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.429731][ T6698] loop6: detected capacity change from 0 to 128 [ 242.675477][ T6702] xt_recent: Unsupported userspace flags (000000c5) [ 242.922803][ T6711] fuse: Bad value for 'fd' [ 242.954071][ T6705] netlink: 'syz.6.555': attribute type 4 has an invalid length. [ 242.969673][ T6705] netlink: 17 bytes leftover after parsing attributes in process `syz.6.555'. [ 243.815800][ T6719] netlink: 276 bytes leftover after parsing attributes in process `syz.3.559'. [ 243.972904][ T6719] tipc: Enabling of bearer rejected, failed to enable media [ 244.551753][ T6739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.623348][ T6739] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.140719][ C1] net_ratelimit: 61 callbacks suppressed [ 248.084073][ T6792] batman_adv: batadv0: Adding interface: virt_wifi0 [ 248.120584][ T6792] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.243279][ T6792] batman_adv: batadv0: Interface activated: virt_wifi0 [ 249.356269][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 249.356308][ T26] audit: type=1326 audit(1791216032.994:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.1.589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ede413199 code=0x0 [ 252.260752][ C0] net_ratelimit: 51 callbacks suppressed [ 252.319741][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 252.540282][ T6852] device bridge2 entered promiscuous mode [ 254.806508][ T6886] kAFS: No cell specified [ 255.172707][ T6892] netlink: 'syz.1.609': attribute type 4 has an invalid length. [ 255.622912][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.633375][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.690973][ T6900] loop6: detected capacity change from 0 to 512 [ 257.540733][ C0] net_ratelimit: 42 callbacks suppressed [ 257.699647][ T6900] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 257.777388][ T6900] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 257.799460][ T6900] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.466116][ T6921] device syzkaller0 entered promiscuous mode [ 263.310829][ C0] net_ratelimit: 38 callbacks suppressed [ 264.480920][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 266.365636][ T6993] loop3: detected capacity change from 0 to 16 [ 266.455130][ T6993] erofs: (device loop3): mounted with root inode @ nid 36. [ 267.911416][ T7011] xt_hashlimit: max too large, truncated to 1048576 [ 268.590894][ T5461] net_ratelimit: 37 callbacks suppressed [ 269.530738][ T4376] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 270.161361][ T4376] usb 7-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.207957][ T4376] usb 7-1: config 1 interface 0 has no altsetting 0 [ 270.321170][ T4376] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.343313][ T4376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.382108][ T4376] usb 7-1: SerialNumber: syz [ 270.409309][ T26] audit: type=1326 audit(1791216054.044:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.1.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ede413199 code=0x0 [ 270.822895][ T7039] netlink: 'syz.5.652': attribute type 13 has an invalid length. [ 270.842509][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 270.858667][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 270.888512][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 270.909689][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 270.927713][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 270.941027][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 271.070010][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 271.090454][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 271.100352][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 271.115410][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 271.907274][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 271.945576][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 272.050830][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 273.546258][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 273.660770][ C0] net_ratelimit: 37 callbacks suppressed [ 273.852403][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 273.899699][ T7060] loop3: detected capacity change from 0 to 512 [ 273.937861][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 273.971811][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 274.042581][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 274.127915][ T7060] EXT4-fs (loop3): orphan cleanup on readonly fs [ 274.179582][ T7060] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:984: inode #11: comm syz.3.657: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 274.245644][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 274.370494][ T4376] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 274.406074][ T7060] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.3.657: ea_inode dec ref err=-117 [ 274.452082][ T7060] EXT4-fs (loop3): 1 orphan inode deleted [ 274.458016][ T7060] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,data_err=ignore,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 275.391837][ T4376] usb 7-1: USB disconnect, device number 3 [ 275.419724][ T4376] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 276.644147][ T7106] netlink: 112 bytes leftover after parsing attributes in process `syz.1.668'. [ 278.207317][ T7131] netlink: 68 bytes leftover after parsing attributes in process `syz.5.674'. [ 278.310194][ T7134] loop3: detected capacity change from 0 to 256 [ 278.394683][ T7134] exFAT-fs (loop3): invalid boot record signature [ 278.423718][ T7134] exFAT-fs (loop3): failed to read boot sector [ 278.440871][ T4376] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 278.454321][ T7134] exFAT-fs (loop3): failed to recognize exfat type [ 279.051043][ T4376] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 279.060461][ T4376] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.060869][ C1] net_ratelimit: 36 callbacks suppressed [ 279.068943][ T4376] usb 7-1: Product: syz [ 279.078761][ T4376] usb 7-1: Manufacturer: syz [ 279.083667][ T4376] usb 7-1: SerialNumber: syz [ 279.645030][ T4376] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 279.658396][ T7151] team0: Port device bridge0 added [ 279.699376][ T7151] device dummy0 left promiscuous mode [ 279.727539][ T4376] usb 7-1: USB disconnect, device number 4 [ 280.079600][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 281.550737][ T4376] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 281.972730][ T7198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 282.197328][ T7203] bridge0: port 3(syz_tun) entered blocking state [ 282.234282][ T7203] bridge0: port 3(syz_tun) entered disabled state [ 282.282059][ T7203] device syz_tun entered promiscuous mode [ 282.360013][ T7203] bridge0: port 3(syz_tun) entered blocking state [ 282.367220][ T7203] bridge0: port 3(syz_tun) entered forwarding state [ 283.002606][ T7223] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 283.361121][ T4376] usb 7-1: unable to get BOS descriptor or descriptor too short [ 283.451162][ T4376] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 283.470482][ T4376] usb 7-1: can't read configurations, error -71 [ 284.394139][ T7238] netlink: 'syz.4.703': attribute type 3 has an invalid length. [ 284.461605][ C0] net_ratelimit: 33 callbacks suppressed [ 284.595815][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.704'. [ 284.646486][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.704'. [ 284.723911][ T7248] unsupported nlmsg_type 40 [ 284.773787][ T7241] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.789426][ T7241] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.805053][ T7241] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.817993][ T7241] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.667308][ T7253] loop6: detected capacity change from 0 to 128 [ 286.831979][ T7253] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.853068][ T7253] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.919445][ T7253] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.708: No space for directory leaf checksum. Please run e2fsck -D. [ 286.998593][ T7253] EXT4-fs error (device loop6): __ext4_find_entry:1698: inode #2: comm syz.6.708: checksumming directory block 0 [ 287.319545][ T7277] netlink: 36 bytes leftover after parsing attributes in process `syz.6.716'. [ 287.461990][ T7281] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 287.576966][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.599402][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.852326][ T7287] autofs4:pid:7287:autofs_fill_super: called with bogus options [ 288.197388][ T4376] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 288.348109][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 289.339619][ T7302] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 289.375260][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 289.406371][ T7295] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.415752][ T7295] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.424846][ T7295] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.433626][ T7295] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.550752][ C0] net_ratelimit: 42 callbacks suppressed [ 289.574691][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 289.584842][ T7309] loop6: detected capacity change from 0 to 128 [ 289.594223][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 289.608427][ T7309] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.625173][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 289.647722][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 289.684882][ T7309] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.713111][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 289.739377][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 289.771753][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 289.810926][ T7311] netlink: 'syz.5.727': attribute type 4 has an invalid length. [ 289.821200][ T4376] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.843509][ T4376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.873960][ T4376] usb 4-1: Product: syz [ 289.878209][ T4376] usb 4-1: Manufacturer: syz [ 289.909699][ T4376] usb 4-1: SerialNumber: syz [ 290.746636][ T7331] futex_wake_op: syz.6.728 tries to shift op by 144; fix this program [ 291.725008][ T4657] usb 4-1: USB disconnect, device number 2 [ 291.815270][ T4376] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 291.840970][ T4657] usb 4-1: ath9k_htc: USB layer deinitialized [ 294.269040][ T7359] kvm: pic: non byte write [ 294.358630][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.744'. [ 294.660730][ C0] net_ratelimit: 35 callbacks suppressed [ 294.687297][ T7379] device syzkaller0 entered promiscuous mode [ 295.018836][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.747'. [ 296.981223][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.273485][ T7420] loop3: detected capacity change from 0 to 64 [ 298.847275][ T26] audit: type=1800 audit(1791216082.484:122): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.760" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 299.255285][ T7442] serio: Serial port ptm0 [ 299.375119][ T4192] hfs: node 4:3 still has 1 user(s)! [ 299.420054][ T7442] serio: Serial port ptm0 [ 299.700940][ T5453] net_ratelimit: 30 callbacks suppressed [ 303.906360][ T26] audit: type=1326 audit(1791216087.544:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 304.173050][ T26] audit: type=1326 audit(1791216087.584:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 304.479336][ T26] audit: type=1326 audit(1791216087.644:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 304.826596][ T26] audit: type=1326 audit(1791216087.644:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 304.908580][ T5458] net_ratelimit: 33 callbacks suppressed [ 304.939677][ T7501] netlink: 792 bytes leftover after parsing attributes in process `syz.5.782'. [ 305.105426][ T26] audit: type=1326 audit(1791216087.644:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 305.146032][ T26] audit: type=1326 audit(1791216087.644:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 305.180883][ T26] audit: type=1326 audit(1791216087.644:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 305.224076][ T26] audit: type=1326 audit(1791216087.644:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 305.261328][ T26] audit: type=1326 audit(1791216087.644:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3fee59ce code=0x7ffc0000 [ 305.316399][ T26] audit: type=1326 audit(1791216087.644:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ff25199 code=0x7ffc0000 [ 305.765790][ T7520] device syzkaller0 entered promiscuous mode [ 308.159260][ T7540] netlink: 'syz.6.794': attribute type 11 has an invalid length. [ 309.198467][ T7550] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 309.235555][ T7553] tipc: Started in network mode [ 309.255010][ T7550] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.798'. [ 309.265894][ T7553] tipc: Node identity 7f000001, cluster identity 4711 [ 309.312426][ T7553] tipc: New replicast peer: 127.0.0.1 [ 309.318590][ T7553] tipc: Enabled bearer , priority 10 [ 309.343645][ T7555] tipc: Disabling bearer [ 309.695693][ T7564] loop6: detected capacity change from 0 to 128 [ 309.828106][ T7564] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 310.171108][ C1] net_ratelimit: 27 callbacks suppressed [ 310.612890][ T7572] tipc: Enabled bearer , priority 10 [ 311.554167][ T6045] UDF-fs: error (device loop6): udf_read_inode: (ino 114) failed !bh [ 311.662810][ T4657] tipc: Node number set to 2130706433 [ 311.863442][ T6045] UDF-fs: error (device loop6): udf_read_inode: (ino 114) failed !bh [ 312.992408][ T7607] overlayfs: failed to clone lowerpath [ 314.069686][ T5447] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.160508][ T5447] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.029364][ T5447] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.092960][ T5447] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.220701][ C1] net_ratelimit: 30 callbacks suppressed [ 316.769026][ T5447] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.063370][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.071207][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.116098][ T5447] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.816607][ T5447] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.857743][ T5447] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.569270][ T5447] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.726312][ T5447] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.865593][ T5447] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.921882][ T5447] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.082014][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.263047][ T3076] net_ratelimit: 30 callbacks suppressed [ 320.287198][ T7705] loop3: detected capacity change from 0 to 1024 [ 320.413960][ T7705] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 320.443536][ T7703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.451559][ T7703] IPv6: NLM_F_CREATE should be set when creating new route [ 320.511154][ T7705] EXT4-fs (loop3): orphan cleanup on readonly fs [ 320.518367][ T7705] __quota_error: 47 callbacks suppressed [ 320.518391][ T7705] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 320.536282][ T7705] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 320.552588][ T7705] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 320.590936][ T7705] EXT4-fs (loop3): 1 truncate cleaned up [ 320.596945][ T7705] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 320.643246][ T7705] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.841: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 320.759527][ T7726] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.841: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 321.060768][ T4229] Bluetooth: hci4: command 0x0409 tx timeout [ 321.687656][ T7677] chnl_net:caif_netlink_parms(): no params data found [ 323.529516][ T4376] Bluetooth: hci4: command 0x041b tx timeout [ 323.641247][ T7768] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.153390][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.167398][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.178093][ T7677] device bridge_slave_0 entered promiscuous mode [ 324.286098][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.316198][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.795955][ T7677] device bridge_slave_1 entered promiscuous mode [ 325.300908][ T5461] net_ratelimit: 33 callbacks suppressed [ 326.340040][ T4372] Bluetooth: hci4: command 0x040f tx timeout [ 326.455257][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.894264][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.440697][ T4372] Bluetooth: hci4: command 0x0419 tx timeout [ 328.630209][ T5447] device hsr_slave_0 left promiscuous mode [ 328.659683][ T5447] device hsr_slave_1 left promiscuous mode [ 328.704302][ T5447] device bridge_slave_1 left promiscuous mode [ 328.729438][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.651711][ T5447] device bridge_slave_0 left promiscuous mode [ 329.660595][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.784127][ T5447] device veth1_macvtap left promiscuous mode [ 329.799800][ T5447] device veth0_macvtap left promiscuous mode [ 329.815564][ T5447] device veth1_vlan left promiscuous mode [ 329.838963][ T5447] device veth0_vlan left promiscuous mode [ 330.500792][ C1] net_ratelimit: 30 callbacks suppressed [ 331.673321][ T5447] team0 (unregistering): Port device team_slave_1 removed [ 331.704869][ T5447] team0 (unregistering): Port device team_slave_0 removed [ 331.745738][ T5447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.787744][ T5447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.046572][ T5447] bond0 (unregistering): Released all slaves [ 332.216125][ T7677] team0: Port device team_slave_0 added [ 332.297344][ T7677] team0: Port device team_slave_1 added [ 332.695435][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.872'. [ 333.674797][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.041912][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.551199][ T7881] net_ratelimit: 17 callbacks suppressed [ 335.551220][ T7881] ip_tables: iptables: counters copy to user failed while replacing table [ 335.793856][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.837759][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.855321][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.897001][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.924931][ T7885] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 335.973884][ T7885] device geneve0 entered promiscuous mode [ 336.069279][ T7885] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 336.421745][ T7891] device pim6reg1 entered promiscuous mode [ 337.200022][ T7677] device hsr_slave_0 entered promiscuous mode [ 337.323685][ T7677] device hsr_slave_1 entered promiscuous mode [ 341.505076][ C1] net_ratelimit: 40 callbacks suppressed [ 341.757626][ T7947] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 346.410186][ T8003] overlayfs: failed to clone upperpath [ 346.820867][ C1] net_ratelimit: 23 callbacks suppressed [ 346.917649][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.904'. [ 347.534129][ T7677] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 347.594059][ T7677] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 347.762519][ T7677] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.812118][ T7677] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 348.205180][ T8032] loop3: detected capacity change from 0 to 128 [ 350.786718][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.899999][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.929624][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.952047][ T8045] loop3: detected capacity change from 0 to 512 [ 351.014541][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.112952][ T8045] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 351.216133][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.243560][ T8045] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 351.254828][ T8045] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #13: comm syz.3.914: iget: bad i_size value: 12154757448730 [ 351.272499][ T8045] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.914: couldn't read orphan inode 13 (err -117) [ 351.291555][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.306996][ T8045] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=[]*:[,,errors=continue. Quota mode: writeback. [ 351.374670][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.385325][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.537868][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.411692][ T5453] net_ratelimit: 23 callbacks suppressed [ 352.462470][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.481235][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.512410][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.520312][ T5461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.599515][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.748345][ T8074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.875788][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.903117][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.385190][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.751156][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.797761][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.879427][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.923563][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.958617][ T8089] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 355.011476][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.101193][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.188608][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.245953][ T7677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.316996][ T8109] loop3: detected capacity change from 0 to 512 [ 357.541485][ T5453] net_ratelimit: 19 callbacks suppressed [ 359.959294][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.041031][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.179761][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.446170][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 361.321021][ T8151] loop3: detected capacity change from 0 to 2048 [ 361.378366][ T8151] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 361.478568][ T8151] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 361.501723][ T8151] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 361.621971][ T8151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.671696][ T4276] net_ratelimit: 22 callbacks suppressed [ 362.880130][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 362.909641][ T8148] overlayfs: unrecognized mount option "subj_role=workdir" or missing value [ 363.219232][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.814321][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.003738][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.126684][ T7677] device veth0_vlan entered promiscuous mode [ 364.216800][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.245023][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.351638][ T7677] device veth1_vlan entered promiscuous mode [ 364.582591][ T7677] device veth0_macvtap entered promiscuous mode [ 364.662160][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.733151][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.796515][ T7677] device veth1_macvtap entered promiscuous mode [ 364.845231][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.867562][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.007507][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.055959][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.156519][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.227663][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.312872][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.388640][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.448172][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.504369][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.569058][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.615721][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.677722][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.802382][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.827019][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.869755][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.927057][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.000730][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.050795][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.099792][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.145884][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.178678][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.236701][ T7677] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.270780][ T7677] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.320779][ T7677] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.390808][ T7677] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.681361][ T5447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.690232][ T5447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.768576][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.940713][ T5449] net_ratelimit: 55 callbacks suppressed [ 368.124889][ T5449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.177813][ T5449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.341093][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 370.766842][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.777562][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.060783][ C1] net_ratelimit: 39 callbacks suppressed [ 373.639153][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.707249][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.577545][ T8228] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.590288][ T8228] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.600793][ T8228] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.616002][ T8228] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.754161][ T8235] batman_adv: batadv0: Adding interface: veth0 [ 374.770678][ T8235] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.820271][ T8235] batman_adv: batadv0: Interface activated: veth0 [ 374.839992][ T8239] batman_adv: batadv0: Interface deactivated: veth0 [ 374.848417][ T8239] batman_adv: batadv0: Removing interface: veth0 [ 374.870138][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.890451][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.161610][ T8247] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.315392][ T8247] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.530739][ T8247] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.179198][ T8247] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.293340][ T8247] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.328541][ T8247] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.355529][ T8247] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.384369][ T8247] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.702503][ T8283] xt_recent: Unsupported userspace flags (000000c5) [ 378.363962][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 378.521409][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.528248][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.540228][ T8311] fuse: blksize only supported for fuseblk [ 378.723162][ T8321] jffs2: notice: (8321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.900692][ C1] net_ratelimit: 23 callbacks suppressed [ 380.578681][ T8351] sctp: [Deprecated]: syz.4.983 (pid 8351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.578681][ T8351] Use struct sctp_sack_info instead [ 380.682200][ T8351] sctp: [Deprecated]: syz.4.983 (pid 8351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.682200][ T8351] Use struct sctp_sack_info instead [ 382.163973][ T8374] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 382.191514][ T8374] Cannot find add_set index 0 as target [ 384.247123][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.992'. [ 384.273209][ T5461] net_ratelimit: 25 callbacks suppressed [ 384.604644][ T8374] Set syz1 is full, maxelem 2076 reached [ 384.651244][ T8390] fuse: blksize only supported for fuseblk [ 384.914604][ T8385] Can't find ip_set type has\net [ 388.740953][ T8432] netlink: 'syz.5.1001': attribute type 11 has an invalid length. [ 389.300722][ C1] net_ratelimit: 22 callbacks suppressed [ 390.230812][ T26] audit: type=1326 audit(1791216429.879:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.5.1005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629e6fc199 code=0x0 [ 391.616679][ T8469] batman_adv: batadv0: Adding interface: veth0 [ 391.660573][ T8469] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.827150][ T8469] batman_adv: batadv0: Interface activated: veth0 [ 391.900407][ T8469] batman_adv: batadv0: Interface deactivated: veth0 [ 391.953096][ T8469] batman_adv: batadv0: Removing interface: veth0 [ 392.024446][ T8469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.100104][ T8469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.206383][ T8484] ------------[ cut here ]------------ [ 392.237285][ T8484] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 392.252652][ T26] audit: type=1800 audit(1791216431.949:181): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1013" name="no_out_endpoint" dev="configfs" ino=45186 res=0 errno=0 [ 392.285212][ T8484] WARNING: CPU: 1 PID: 8484 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 392.371171][ T8484] Modules linked in: [ 392.375967][ T8484] CPU: 0 PID: 8484 Comm: syz.5.1012 Not tainted syzkaller #0 [ 392.432618][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 392.528259][ T8484] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 392.548459][ T8484] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9 [ 392.636463][ T8484] RSP: 0018:ffffc900037df240 EFLAGS: 00010246 [ 392.669585][ T8484] RAX: 360fe61e79673700 RBX: 0000000000400000 RCX: 0000000000080000 [ 392.708484][ T8484] RDX: ffffc900145ed000 RSI: 0000000000004685 RDI: 0000000000004686 [ 392.793065][ T8484] RBP: 0000000000000004 R08: ffffc900037ded67 R09: 1ffff920006fbdac [ 392.880922][ T8484] R10: dffffc0000000000 R11: fffff520006fbdad R12: ffff88805fa50000 [ 392.989881][ T8484] R13: ffff88805fa51290 R14: ffff888053ee8e00 R15: ffff88805fa52268 [ 393.154437][ T8484] FS: 00007f629c9336c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 393.173400][ T8484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.191022][ T8484] CR2: 0000001b32b1cff8 CR3: 00000000786fb000 CR4: 00000000003506f0 [ 393.200145][ T8484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 393.218833][ T8484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 393.255597][ T8484] Call Trace: [ 393.274566][ T8484] [ 393.299080][ T8484] ? netif_carrier_on+0xd1/0x120 [ 393.340680][ T8484] ieee80211_ocb_leave+0x27f/0x320 [ 393.387039][ T8484] __cfg80211_leave_ocb+0x219/0x400 [ 393.457642][ T8484] cfg80211_leave_ocb+0x53/0x70 [ 393.503440][ T8484] cfg80211_change_iface+0x4ec/0xe10 [ 393.516942][ T8484] nl80211_set_interface+0x5b8/0x810 [ 393.525940][ T8484] ? nl80211_dump_interface+0x560/0x560 [ 393.535541][ T8484] ? mutex_lock_nested+0x17/0x20 [ 393.543142][ T8484] ? nl80211_pre_doit+0x27b/0x540 [ 393.551012][ T8484] genl_rcv_msg+0xd0b/0xfa0 [ 393.565600][ T8484] ? genl_bind+0x370/0x370 [ 393.571259][ T8484] ? __dev_queue_xmit+0x1b64/0x2e50 [ 393.577439][ T8484] ? verify_lock_unused+0x140/0x140 [ 393.604756][ T8484] ? dev_queue_xmit+0x20/0x20 [ 393.616893][ T8484] ? nl80211_dump_interface+0x560/0x560 [ 393.633373][ T8484] netlink_rcv_skb+0x1e9/0x430 [ 393.645361][ T8484] ? genl_bind+0x370/0x370 [ 393.652769][ T8484] ? netlink_ack+0xb10/0xb10 [ 393.658755][ T8484] ? down_read+0x1aa/0x2e0 [ 393.669223][ T8484] genl_rcv+0x24/0x40 [ 393.674088][ T8484] netlink_unicast+0x78f/0x940 [ 393.686133][ T8484] netlink_sendmsg+0x8ba/0xbe0 [ 393.692206][ T8484] ? netlink_getsockopt+0x570/0x570 [ 393.697486][ T8484] ? aa_sock_msg_perm+0x94/0x150 [ 393.709708][ T8484] ? apparmor_socket_sendmsg+0x88/0x230 [ 393.719460][ T8484] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 393.728664][ T8484] ? security_socket_sendmsg+0x7c/0xa0 [ 393.748070][ T8484] ? netlink_getsockopt+0x570/0x570 [ 393.766808][ T8484] ____sys_sendmsg+0x5be/0x8f0 [ 393.777703][ T8484] ? __sys_sendmsg_sock+0x30/0x30 [ 393.783796][ T8484] ? import_iovec+0x6f/0xa0 [ 393.789828][ T8484] ___sys_sendmsg+0x236/0x2e0 [ 393.796316][ T8484] ? __sys_sendmsg+0x290/0x290 [ 393.802147][ T8484] __se_sys_sendmsg+0x1b7/0x2a0 [ 393.807464][ T8484] ? __x64_sys_sendmsg+0x80/0x80 [ 393.814190][ T8484] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 393.834644][ T8484] ? lockdep_hardirqs_on+0x94/0x140 [ 393.859608][ T8484] do_syscall_64+0x4c/0xa0 [ 393.904757][ T8484] ? clear_bhb_loop+0x30/0x80 [ 393.931050][ T8484] ? clear_bhb_loop+0x30/0x80 [ 393.952783][ T8484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.972916][ T8484] RIP: 0033:0x7f629e6fc199 [ 393.995408][ T8484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.051748][ T8484] RSP: 002b:00007f629c933028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.094512][ T8484] RAX: ffffffffffffffda RBX: 00007f629e984090 RCX: 00007f629e6fc199 [ 394.124508][ T8484] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 394.157664][ T8484] RBP: 00007f629e7930b8 R08: 0000000000000000 R09: 0000000000000000 [ 394.189167][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.241370][ T8484] R13: 00007f629e984128 R14: 00007f629e984090 R15: 00007ffdd28b9a58 [ 394.293959][ T8484] [ 394.297260][ T8484] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 394.308353][ T8484] CPU: 1 PID: 8484 Comm: syz.5.1012 Not tainted syzkaller #0 [ 394.319035][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 394.333979][ T8484] Call Trace: [ 394.339627][ C0] virtqueue callback for ffff8881467df100 (ffffffff84450960) [ 394.339829][ T8484] [ 394.353664][ C0] virtqueue interrupt with no work for ffff8881467df000 [ 394.361151][ T8484] dump_stack_lvl+0x188/0x250 [ 394.375319][ C0] virtqueue interrupt with no work for ffff888146c87f00 [ 394.382877][ T8484] ? show_regs_print_info+0x20/0x20 [ 394.409650][ T8484] ? load_image+0x410/0x410 [ 394.417767][ T8484] panic+0x2f8/0x850 [ 394.421527][ T4377] Added buffer head 0 to ffff8881467df100 [ 394.423791][ T8484] ? bpf_jit_dump+0xd0/0xd0 [ 394.423839][ T8484] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 394.423872][ T8484] __warn+0x248/0x2b0 [ 394.455077][ T8484] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 394.463382][ T8484] report_bug+0x1b9/0x2e0 [ 394.468081][ T8484] handle_bug+0x3a/0x70 [ 394.473890][ T8484] exc_invalid_op+0x16/0x40 [ 394.482984][ T8484] asm_exc_invalid_op+0x16/0x20 [ 394.489136][ T8484] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 394.499230][ T8484] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9 [ 394.526092][ T8484] RSP: 0018:ffffc900037df240 EFLAGS: 00010246 [ 394.536065][ T8484] RAX: 360fe61e79673700 RBX: 0000000000400000 RCX: 0000000000080000 [ 394.550091][ T8484] RDX: ffffc900145ed000 RSI: 0000000000004685 RDI: 0000000000004686 [ 394.562186][ T8484] RBP: 0000000000000004 R08: ffffc900037ded67 R09: 1ffff920006fbdac [ 394.573754][ T8484] R10: dffffc0000000000 R11: fffff520006fbdad R12: ffff88805fa50000 [ 394.584494][ T8484] R13: ffff88805fa51290 R14: ffff888053ee8e00 R15: ffff88805fa52268 [ 394.596310][ T8484] ? netif_carrier_on+0xd1/0x120 [ 394.604922][ T8484] ieee80211_ocb_leave+0x27f/0x320 [ 394.611552][ T8484] __cfg80211_leave_ocb+0x219/0x400 [ 394.618468][ T8484] cfg80211_leave_ocb+0x53/0x70 [ 394.624674][ T8484] cfg80211_change_iface+0x4ec/0xe10 [ 394.631653][ T8484] nl80211_set_interface+0x5b8/0x810 [ 394.637554][ T8484] ? nl80211_dump_interface+0x560/0x560 [ 394.646227][ T8484] ? mutex_lock_nested+0x17/0x20 [ 394.655906][ T8484] ? nl80211_pre_doit+0x27b/0x540 [ 394.664334][ T8484] genl_rcv_msg+0xd0b/0xfa0 [ 394.671302][ T8484] ? genl_bind+0x370/0x370 [ 394.671307][ C0] virtqueue callback for ffff888147bbf000 (ffffffff85497fd0) [ 394.676726][ T8484] ? __dev_queue_xmit+0x1b64/0x2e50 [ 394.687032][ C0] No more buffers in queue [ 394.695657][ T8484] ? verify_lock_unused+0x140/0x140 [ 394.695722][ T8484] ? dev_queue_xmit+0x20/0x20 [ 394.695746][ T8484] ? nl80211_dump_interface+0x560/0x560 [ 394.695782][ T8484] netlink_rcv_skb+0x1e9/0x430 [ 394.695805][ T8484] ? genl_bind+0x370/0x370 [ 394.695836][ T8484] ? netlink_ack+0xb10/0xb10 [ 394.705625][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 394.713194][ T8484] ? down_read+0x1aa/0x2e0 [ 394.713237][ T8484] genl_rcv+0x24/0x40 [ 394.718781][ C0] No more buffers in queue [ 394.725502][ T8484] netlink_unicast+0x78f/0x940 [ 394.725560][ T8484] netlink_sendmsg+0x8ba/0xbe0 [ 394.734435][ C0] No more buffers in queue [ 394.742887][ T8484] ? netlink_getsockopt+0x570/0x570 [ 394.742926][ T8484] ? aa_sock_msg_perm+0x94/0x150 [ 394.742957][ T8484] ? apparmor_socket_sendmsg+0x88/0x230 [ 394.742981][ T8484] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 394.743004][ T8484] ? security_socket_sendmsg+0x7c/0xa0 [ 394.743028][ T8484] ? netlink_getsockopt+0x570/0x570 [ 394.743051][ T8484] ____sys_sendmsg+0x5be/0x8f0 [ 394.753186][ C0] eth0: xmit ffff88802327a280 42:01:0a:80:00:01 [ 394.770275][ T8484] ? __sys_sendmsg_sock+0x30/0x30 [ 394.770330][ T8484] ? import_iovec+0x6f/0xa0 [ 394.776027][ C0] virtqueue callback for ffff888147bbf100 (ffffffff854980c0) [ 394.780872][ T8484] ___sys_sendmsg+0x236/0x2e0 [ 394.789293][ C0] Added buffer head 23 to ffff888147bbf100 [ 394.795635][ T8484] ? __sys_sendmsg+0x290/0x290 [ 394.795827][ T8484] __se_sys_sendmsg+0x1b7/0x2a0 [ 394.805431][ C0] Sent skb ffff88802327a280 [ 394.809073][ T8484] ? __x64_sys_sendmsg+0x80/0x80 [ 394.809112][ T8484] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 394.816623][ C0] No more buffers in queue [ 394.822943][ T8484] ? lockdep_hardirqs_on+0x94/0x140 [ 394.998645][ T8484] do_syscall_64+0x4c/0xa0 [ 395.007897][ T8484] ? clear_bhb_loop+0x30/0x80 [ 395.017194][ T8484] ? clear_bhb_loop+0x30/0x80 [ 395.026289][ T8484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.035654][ T8484] RIP: 0033:0x7f629e6fc199 [ 395.044603][ T8484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.076004][ T8484] RSP: 002b:00007f629c933028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.087819][ T8484] RAX: ffffffffffffffda RBX: 00007f629e984090 RCX: 00007f629e6fc199 [ 395.099995][ T8484] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 395.111817][ T8484] RBP: 00007f629e7930b8 R08: 0000000000000000 R09: 0000000000000000 [ 395.124373][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.136171][ T8484] R13: 00007f629e984128 R14: 00007f629e984090 R15: 00007ffdd28b9a58 [ 395.149443][ T8484] [ 395.153616][ T8484] Kernel Offset: disabled [ 395.164018][ T8484] Rebooting in 86400 seconds..