last executing test programs: 6m19.72690901s ago: executing program 32 (id=148): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) 5m52.804767131s ago: executing program 33 (id=237): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x0, 0x0) 5m49.554588941s ago: executing program 34 (id=243): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$evdev(r0, &(0x7f0000000000), 0xaa6f50) 5m37.83230734s ago: executing program 35 (id=265): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 5m31.305203529s ago: executing program 36 (id=285): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xa4, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d9e2f7639b6f9d93ef3c372c53f3364e163be675e57203d5423922e2f569ba2"}]}]}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m56.679559327s ago: executing program 37 (id=351): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) 4m15.681245682s ago: executing program 8 (id=486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpid() r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffc, 0x2) 4m14.339574653s ago: executing program 8 (id=490): openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0xab, 0x980) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x30000000}) 4m8.824025307s ago: executing program 8 (id=499): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000011c0)=@req={0x3, 0x0, 0x7, 0xe75c5b83}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) futex(0x0, 0x18b, 0x0, 0x0, &(0x7f00000000c0), 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0xe) syz_open_dev$usbmon(0x0, 0x7, 0x880) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0xfffc}, {@in6=@loopback, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xb, 0x0, 0x6}, {0x0, 0x401}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m7.346360329s ago: executing program 8 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100f5ff00000000000003000000600001804c0002800800040005000000080004000700000008000200b702000008000300ffffffff0800010011000064e0f18a99666fcd0008000400fcffffff0800010020000000080004006a0000000d0001"], 0x74}}, 0x4000004) 4m7.154486732s ago: executing program 8 (id=504): setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000996afb88af66d057ad29ad3fb8895c81538957e3aff71f2b39528b8d4f81d79c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a3fe2846b4061000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0x7fffffffffffffff, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close(r8) 4m6.370919734s ago: executing program 8 (id=506): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66) 3m49.987847364s ago: executing program 38 (id=506): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66) 3m40.618362487s ago: executing program 0 (id=557): socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x24060400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x716, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m39.555139583s ago: executing program 0 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 3m38.227065263s ago: executing program 0 (id=565): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x793, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m37.904864649s ago: executing program 0 (id=566): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 3m37.591104723s ago: executing program 0 (id=567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='ramfs\x00', 0x10000, 0x0) 3m37.362757386s ago: executing program 0 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x7d32, &(0x7f0000000540)={0x0, 0x1130, 0x800, 0x2, 0x373}) io_uring_setup(0x7e7f, &(0x7f00000004c0)={0x0, 0x7e57, 0x1000, 0x1, 0x30c, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000002) r5 = io_uring_setup(0x709d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 3m22.08266241s ago: executing program 39 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x7d32, &(0x7f0000000540)={0x0, 0x1130, 0x800, 0x2, 0x373}) io_uring_setup(0x7e7f, &(0x7f00000004c0)={0x0, 0x7e57, 0x1000, 0x1, 0x30c, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000002) r5 = io_uring_setup(0x709d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 3m12.969978698s ago: executing program 9 (id=632): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x4, 0x7fffffff}, 0x0, 0x0) 3m12.608499254s ago: executing program 9 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r6, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r7 = open(0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pimreg1\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) 3m10.974498818s ago: executing program 9 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {{}, {0x0, 0x8001}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x880) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3m9.58788941s ago: executing program 9 (id=639): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, 0x0, 0x0) 3m9.114497437s ago: executing program 9 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000300)=@secondary) keyctl$get_security(0x11, r4, &(0x7f0000000880)=""/174, 0xae) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'bond_slave_1\x00', 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008620000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3m4.140740673s ago: executing program 9 (id=642): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) 2m49.019572403s ago: executing program 40 (id=642): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) 1m31.622616353s ago: executing program 6 (id=894): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x2}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r5 = getpid() process_vm_writev(r5, 0x0, 0x0, &(0x7f0000000f00)=[{0x0}], 0x1, 0x0) r6 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) 1m30.48374083s ago: executing program 6 (id=898): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x4, 0x7fffffff}, 0x0, 0x0) 1m29.055979842s ago: executing program 6 (id=900): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m25.099048743s ago: executing program 6 (id=908): userfaultfd(0x801) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1m23.415546228s ago: executing program 6 (id=914): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) write$binfmt_register(r1, 0x0, 0xa) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 1m20.202643527s ago: executing program 6 (id=925): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0xa0, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3e03}]}]}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 1m4.582244535s ago: executing program 41 (id=925): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0xa0, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3e03}]}]}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 36.506218584s ago: executing program 3 (id=1021): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfa) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 35.765277785s ago: executing program 3 (id=1027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x0, 0x105, 0x70bd29, 0x27dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20001044}, 0x0) 35.531091689s ago: executing program 3 (id=1030): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x8d12, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, {0xa, 0x4e23, 0xa40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x3}, 0x1, {[0x4, 0x1, 0x4, 0xfff, 0xa, 0x2, 0xf, 0x9]}}, 0x5c) 35.3990471s ago: executing program 3 (id=1032): r0 = socket$inet(0x2, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 33.827548244s ago: executing program 3 (id=1035): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000240)={0x4, 0x6, 0x3ff}) futex(0x0, 0x2, 0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r3}, 0x18) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 31.343806102s ago: executing program 3 (id=1038): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x5000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x8000}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000000}, 0x0, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001bc0)={0x8, {"78abbfe21f6ff5050df32c7dbc9d1f8c2f437a581c3db26ddfa3d1a8f9b99c37b6190255f72048fe6711ded8b6c027ee8714fc0721c0ee42e7db883372bc387f9a4dd2d17dbd80f089b5691c18713d621088565d013ac88305f411cd8b47dcbbf473d728619d5f87794f6084970e6c3b4b17987727c218b92ad113c94356999cd87b160ca829171a2084e231e2efc6a11161b9a89a29980cb0d7798155d9580981af84635d36cee7f2bcdce967645cc0d774905a532c8ee9bdff3b7a643da28ac9b046ec34ee24d586f5c4f2282467929c711f2e3c00fb662a1ffc4e196b3a98816894030c5d798b82099b942e02d6b59186cde7e6bce03d094d451d4bdc3378505d9bbc1aa983c33eca0924c44f105f7041484e681564fc4a95b6c7c13be42680a048e302d500d942fbea096e01e84b1583119481ecd61bbf9d30c1362dcc946f28829eb13f895a21abc9502b03b9f87cc194475a826a84ca85c404ad2c6e115a1e0cc1e4f020fffb6514a726e4cf8289709b7d87336e959755ddca35a0a4be4b31037ad543bd2ad4eb039ded408643c8bcec805361cf6bda7560699483c9e70b419ed7ba7b09df879097aff2ddbdac1cbdeae65c3dba5bedbc4c6c47abf384c70c9d932919af5a0bbe9ede43ff6e4eadd589868af7c13665be5070be751d9c9fefb2efd1bb66c925d770e0089569acb551dd72038e748b39307c983e03cc6fe925118ce6f065a9585a79d28bb525d199062d5628e9756890b923d725edbf2a4f29259ebe85ab6ea377b319f225625ba44cffff9942984af5333313a6054c7b721f918f624e44cdf8dce96513e53a92154848be9fd978827a58b6f4a78c7a31a33ba4b3b64f877778f60381a2ccb89d54d47728fe965effa3cd0d0d61c21b869b8cc5929ed031d5a6752d948a5d8f2bd24739253bc386a4065c1e765926bf20909a8d693ed4515920449278dbd1e6da6f619fa01283fe0fd3995d23f6ce99b11ff3e64c83bcc434ab4d40e37ab3e63f9b5f84c45542d3da2b1f87e235dd9c46c9c4e232afa112e2ba48ef336085162efe59984c186ac816a19f58c5b9619eeb5b3ab43aa9d17567471619e3fd9ac3a4e4797f65b875da22a894d5de0f2d40ef82e0f361454cbefc5e54ac4bfc8d805b9c6f58619fbaebd58ea0c6cd842dbee3c338500b5c13ce1a5391c861167cbadd014007774b438b4e1b3efa3442475d8befb0056268229cb64c837c7b44b7ebeb73eb8a0cc81a4cd20d2fbec4bc86f3383d9cb779fdfe6fa0fb8dd77c0f490d3109ad21477e74ebf172d73763c156f1ff5355e6ea64c41da84fcfad4a79131e3ce224e1e8eba9581cdee5493fa54ae240f87b2283903383fa75e7408407c6512321ba716e80f1515c8a891776841e7132709fd95908126ca7c52fbc7523bb216502b54435937e0ded571ab283b7296c21709c3152c7224950a7394e4aa3760dbba846201078642d62239382618ff11e8ab0810da87e68cfe5e0477219dd7e7cedc50b667d59078324baafc56bc0192a1f4b4e5e291d058311acfe80cf63edd97334a0ab5499d19e074acf2a0665e3eba40313cced68b0ece4a9941086ea6719f7921c072d4cdd8b2c6f705ba26903e23b14988a48917388f04ac148b0ea1ee197853d9c51bc954865d42fa17d815bc580519a3c8495c342e4ce5b3c4b49fce906479c1385c3dc47980006c454d6f444c17886d898387321d112e166eb0b5de837156fa4211aef3326c883f5a246234cedafe74d0f3eb2c7f8d1b71ea2d31349447aa9c4141d8fb67304e3a5169be2dcb1ff901f8309e5d72d32e9938e559d03dc830f3c43d6c6321ce9045c45193c282dae8f93a3cc3c99d9af6477fc147630baea354662ea5242fa04682aa8f77ac445b2a73e151f6ce93e6daae225f0d7482879e39a7794e61c25b004c33a3002d835ade9db54260e39e61e64b327a12887d01e8278856343d394787f7320b42a579bd7857e4c7a0bdae9811cbc572fe95f7eaa6cfa29027d491790108eccdea802a4d0d548f9658ab09cf69c91b8f93c39c6c1581288c721125d23c9907e92a687d9b74cff7ba85f93941c7d82080cc1dfb8ad0293a1b284452e00d0a52271ff9526d4cce9a22089902eb49fff04eb5455559ad12ecc8429a339cf081bdff8c5129d99609429d93b370643b12d1f29b91fbed6e1780b2c6201b5137b2839d837defb57a693cd7659c1a7042a88640c6a5f4ae820fd13951e992362c7dbfb1a86a8a159c38e4f7457fa0829c1de4d6318dfc7fbf6dcd1942c594158202e9a4f5df8b8c4aa36629add36c35eff4f67b13ebd817ccef953b953705d7aa0c54218bfb338512b2bf7ee3228b4dceb98509e30181ca73d03d853fd30959846877d715909aacc0996172f868ef51511dff1bab71c37457b29e2cb0492fa6b21a2f69be5e03dda8e467b39b406bcf2334f7ae6ac9e19f6be7a4b59338c0304771feb0beefcf450384b24153b758fef48818f4152961a63701ea53869ee645d561d8060b0d5a6f0d755c490c60e71950c5465dce2cc5a39ace6570621d3380d070503136e7b9845ae7ab07e4d33149679663496c16ff36bfcc7adbda980892afacccf8858570f3135303bc65c176adb8069af0f64ca234a1ed8abde2bcbfeebcfd879303fc9df581a7ae5b76c5a8b2aecae833852397cc701ed0c28ccfa1fc8bb4468a4d96c6c111071c690522c20c1f19ddab8487a9d6d988d1549312d2d1d06938fcb6375cac3e55323443d3b9d3f7b6c7854b982828e67802afd4bac3ff9d94b10f493edca2021d04ff104eab05f1f48441e23b6febf5213a9be0c497f3b655404a53d48769f740af456331d0d1fc0ce4fd46b6da6614b624ea25e5206a07e145f3744f767f0ac6a842fe805e501ee0e17bc9a7796fe035f1de6a323313b258be70b63bb83a738288fb699b5efb58f0f12c4f226299ad84f2c35c47c33e43c9cd7332ce743c0549ee8364dd8342929feb824ddaef2e06001b4656995e673f760627422016384df48b2e615320eaf19ee02324ffe9fc1d025a648b8216d07532587bb164e91235acf6466e973ff4a512050d20423548c0e2406e529768fe89dedb86161e9d461fce7026d443956effb53f7a7aa2b71c1a0b7e84f9d7f94bd6d16bbd54d71472cc4c91a08330e0b3e4940fc4fb1156a981a748aa36261645025626103d15b072aea4902dbe7c0256bd4b6f334bd5aefb4a34c5ef287c8b654a73d40a9de1639b0f76291d4305368178070cf17547b3ce31a8e3588c1e37106a4e4aafd9dd75125447e99d1ed5f16658aa07193aa7db142218481c3429cb966d47a1b01c1e77761e6fd6468aa546c7b66cbdd2aca474bb3dff9d65125b2358a46aa5e69fa839fc93625927a74db2bf3c75c3c44417c3a106b364ed3b94e3f15b51c0271aee7444e3b81a4f47bccb8e66d88bc482a0ab98deb088d0ee6739df91620a8a92a135589bc4aea62fc94510f514cfc1c2b8534f33aa7c52e38422526c87483377189838b3b856e54a929aa816cf04e0e0fc939491ad1f1e70353d7c683b1e5d6bb1d267a09e105dccf822356eeff1baa7e6fc99fb70093340815de2bfe638157aa881dd507c6919c2e250731c11f91f92b60a4a1312260dc81704d4163906462051e9c5eb36a7f39737142904fe803ceb39c96a439ed3ca51a6c9b7bba8f45afdb201d264d16dbb4e050bb7a35234f876e6848c2c3349fc2bbb1f4ea90c60321213137f71e6328be560bb324995e67f9e09082a229530c359ea516507eaf68a000c4237338faede888a903cf25c7e1f597d7821c9d68b66870afb1f48245bbe8306dca0d2bd33edae61a9cc7f7cf4585571cf4b68b71af54f8e3084970b4c01e1e8f09143bec8edb6046f23e15caa7d235114b54b0e2ce27751630fda7f3ac645da0ed94187f37db5a029e28e7d484e9f90fa9349e10c72f535e6bc043a6617c9452d0c587ba6ed86e5f04d97ef60b2b831b49bd8cef162f1bc3e275477cf5de6b728d696a4c2b94eb8cae968260e015786fb6b7d33d0de19bd7c268f2b1ecd529bbc681ed3bc923663fd76f31aec30209cbd4c073ac08627d96a563b775cd2e9da81840255509d01623c8745a60de579d5e15528553ebeaa2c8125709435b04d032b6c620c325f995b50ba1f1ef42121eb10745f7b9bd3084420fd84a41c9a2dc0f39681902d161bcdc2a18c0606f862f7b21a9070224648d1ca5e37156383f09f7e62adb1dec242f23d6d0a5adf9019b599f744a89c04829a05ca85a173b55ba795f86d554d649f42efd9e85633cd66f172ed89ca58d1e4ef8fbb5498f7daefc4f99667e8973c3c4a56ebc0c40c38c02c9450a6d4ce8a61a9386cd4d012d7db506a78543fb44bf58c5444f66968b04a8a4bba83a5c332ee7c253324867369b329eeabf99d81add64bf2eb0670d5b6a44f35b7d828170d138446bd6d3b3056e8b27a0db870448378785c86682496ff88e4149496385318a4063652c05bfc2e3753abcc8bc058d5e5ce458613f0c110ea167d6efb45d6840653030c530369e1e323bd7545bd26e9e8040bc45fc99c8370a25d2fd9db9c48c12b1c7bbdec38191b867733f0d30c17a6f40413e41d94f19d08b990f7ee7538bca4674547f0d4ef9c6beccd86f377249f12d6f82703c0cd32d3d96fdee8cbd47f8a6227fe3414c6c4439245aabdb807439ebbff3848e15d5caf00525d82edd6ca7cceede71cd5fe11c0bdd81f7fb2749ed0dd19b97f5d4638f005b57681123bad689c3eb4212fbe8a49538d42772388d3186eb3a06cc5030abdcd389d060086e3ccf807257c98aefbd14b8e238f059de313d1de9ccdfdf898ad5e42dcb9d3364fa6afa10e37728da6a1cabb4958e191d16eefae88de6d43b532bf29006cae729361e4c4b122ce13bca67e8c42a7d81cf803ca06274f439a8e906fc4b006434eb3425a374bac9c765df2265f752a689dbb0db26221bbd1b1ff0cdb9f992f81a634282984a829dde204c8652bad3a3e0e840d5e76644c21f6cabcd03c4912d67f68b0105bac339dee9e366a6b000bfed792423bee3e052c77be865e32c5ccf3f0d90decf314abdce1eccb11be143c4530c907d9d938c6acffa3abc80270bb74451e94ab52cb3d34a8edcee8730ac3f5b17e8d327494f7ee96affd26dd57ab59187862d3b34c9847a4d80454352124324cc13ab8c8db21a558cb9021f252e20977471b70a6beaf95c9590315a28290f5d8c293eb961a66e7bd17f26c4e511c8bd01e06920424fc38207d93eeb8b6821a84be865cfb4596e96252e25e56b469b4fba14eb1274157a63c4cf8ae2844f499bbc71fc8c26be29c156a7296cc87d8430c93e16072ce1dea19159ac9676fe205777479be4d85794ac7f87227506173be44619709b189ce2e052a882225f9600cbe837484601538b70e90eb5644369c54cff2becdf9da661e480e25ca5f05c1d4aaf4ed21d110b9ad69fa966c19ac8964f1d5304d21ca1da6395b90694ef5f7d01357e59cc2669c0a678cc73ec75bc698754bd0b530a8a9beb2da4242c18b0fa29ca724521bfc3de5a453e856a1b80efafcc990189fd5b12fb729896841720566a85824352a260bf5ceb96eb89c33a4cc93415ed2afc73a1572067b8faec584956ee87cba4270ea0f42de3acc8bcec718fe41b69d7267de45e533ae7071d5b9f7980f732d4df53f503ee99b3b7ae2183ad96266b0d6f9de6042c7352dd015796a147b838fe9512b519f5bd4b3d9c40e6498e9594e7f70439d076e76fe7", 0x1000}}, 0x1006) 16.264430632s ago: executing program 42 (id=1038): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x5000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x8000}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000000}, 0x0, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001bc0)={0x8, {"78abbfe21f6ff5050df32c7dbc9d1f8c2f437a581c3db26ddfa3d1a8f9b99c37b6190255f72048fe6711ded8b6c027ee8714fc0721c0ee42e7db883372bc387f9a4dd2d17dbd80f089b5691c18713d621088565d013ac88305f411cd8b47dcbbf473d728619d5f87794f6084970e6c3b4b17987727c218b92ad113c94356999cd87b160ca829171a2084e231e2efc6a11161b9a89a29980cb0d7798155d9580981af84635d36cee7f2bcdce967645cc0d774905a532c8ee9bdff3b7a643da28ac9b046ec34ee24d586f5c4f2282467929c711f2e3c00fb662a1ffc4e196b3a98816894030c5d798b82099b942e02d6b59186cde7e6bce03d094d451d4bdc3378505d9bbc1aa983c33eca0924c44f105f7041484e681564fc4a95b6c7c13be42680a048e302d500d942fbea096e01e84b1583119481ecd61bbf9d30c1362dcc946f28829eb13f895a21abc9502b03b9f87cc194475a826a84ca85c404ad2c6e115a1e0cc1e4f020fffb6514a726e4cf8289709b7d87336e959755ddca35a0a4be4b31037ad543bd2ad4eb039ded408643c8bcec805361cf6bda7560699483c9e70b419ed7ba7b09df879097aff2ddbdac1cbdeae65c3dba5bedbc4c6c47abf384c70c9d932919af5a0bbe9ede43ff6e4eadd589868af7c13665be5070be751d9c9fefb2efd1bb66c925d770e0089569acb551dd72038e748b39307c983e03cc6fe925118ce6f065a9585a79d28bb525d199062d5628e9756890b923d725edbf2a4f29259ebe85ab6ea377b319f225625ba44cffff9942984af5333313a6054c7b721f918f624e44cdf8dce96513e53a92154848be9fd978827a58b6f4a78c7a31a33ba4b3b64f877778f60381a2ccb89d54d47728fe965effa3cd0d0d61c21b869b8cc5929ed031d5a6752d948a5d8f2bd24739253bc386a4065c1e765926bf20909a8d693ed4515920449278dbd1e6da6f619fa01283fe0fd3995d23f6ce99b11ff3e64c83bcc434ab4d40e37ab3e63f9b5f84c45542d3da2b1f87e235dd9c46c9c4e232afa112e2ba48ef336085162efe59984c186ac816a19f58c5b9619eeb5b3ab43aa9d17567471619e3fd9ac3a4e4797f65b875da22a894d5de0f2d40ef82e0f361454cbefc5e54ac4bfc8d805b9c6f58619fbaebd58ea0c6cd842dbee3c338500b5c13ce1a5391c861167cbadd014007774b438b4e1b3efa3442475d8befb0056268229cb64c837c7b44b7ebeb73eb8a0cc81a4cd20d2fbec4bc86f3383d9cb779fdfe6fa0fb8dd77c0f490d3109ad21477e74ebf172d73763c156f1ff5355e6ea64c41da84fcfad4a79131e3ce224e1e8eba9581cdee5493fa54ae240f87b2283903383fa75e7408407c6512321ba716e80f1515c8a891776841e7132709fd95908126ca7c52fbc7523bb216502b54435937e0ded571ab283b7296c21709c3152c7224950a7394e4aa3760dbba846201078642d62239382618ff11e8ab0810da87e68cfe5e0477219dd7e7cedc50b667d59078324baafc56bc0192a1f4b4e5e291d058311acfe80cf63edd97334a0ab5499d19e074acf2a0665e3eba40313cced68b0ece4a9941086ea6719f7921c072d4cdd8b2c6f705ba26903e23b14988a48917388f04ac148b0ea1ee197853d9c51bc954865d42fa17d815bc580519a3c8495c342e4ce5b3c4b49fce906479c1385c3dc47980006c454d6f444c17886d898387321d112e166eb0b5de837156fa4211aef3326c883f5a246234cedafe74d0f3eb2c7f8d1b71ea2d31349447aa9c4141d8fb67304e3a5169be2dcb1ff901f8309e5d72d32e9938e559d03dc830f3c43d6c6321ce9045c45193c282dae8f93a3cc3c99d9af6477fc147630baea354662ea5242fa04682aa8f77ac445b2a73e151f6ce93e6daae225f0d7482879e39a7794e61c25b004c33a3002d835ade9db54260e39e61e64b327a12887d01e8278856343d394787f7320b42a579bd7857e4c7a0bdae9811cbc572fe95f7eaa6cfa29027d491790108eccdea802a4d0d548f9658ab09cf69c91b8f93c39c6c1581288c721125d23c9907e92a687d9b74cff7ba85f93941c7d82080cc1dfb8ad0293a1b284452e00d0a52271ff9526d4cce9a22089902eb49fff04eb5455559ad12ecc8429a339cf081bdff8c5129d99609429d93b370643b12d1f29b91fbed6e1780b2c6201b5137b2839d837defb57a693cd7659c1a7042a88640c6a5f4ae820fd13951e992362c7dbfb1a86a8a159c38e4f7457fa0829c1de4d6318dfc7fbf6dcd1942c594158202e9a4f5df8b8c4aa36629add36c35eff4f67b13ebd817ccef953b953705d7aa0c54218bfb338512b2bf7ee3228b4dceb98509e30181ca73d03d853fd30959846877d715909aacc0996172f868ef51511dff1bab71c37457b29e2cb0492fa6b21a2f69be5e03dda8e467b39b406bcf2334f7ae6ac9e19f6be7a4b59338c0304771feb0beefcf450384b24153b758fef48818f4152961a63701ea53869ee645d561d8060b0d5a6f0d755c490c60e71950c5465dce2cc5a39ace6570621d3380d070503136e7b9845ae7ab07e4d33149679663496c16ff36bfcc7adbda980892afacccf8858570f3135303bc65c176adb8069af0f64ca234a1ed8abde2bcbfeebcfd879303fc9df581a7ae5b76c5a8b2aecae833852397cc701ed0c28ccfa1fc8bb4468a4d96c6c111071c690522c20c1f19ddab8487a9d6d988d1549312d2d1d06938fcb6375cac3e55323443d3b9d3f7b6c7854b982828e67802afd4bac3ff9d94b10f493edca2021d04ff104eab05f1f48441e23b6febf5213a9be0c497f3b655404a53d48769f740af456331d0d1fc0ce4fd46b6da6614b624ea25e5206a07e145f3744f767f0ac6a842fe805e501ee0e17bc9a7796fe035f1de6a323313b258be70b63bb83a738288fb699b5efb58f0f12c4f226299ad84f2c35c47c33e43c9cd7332ce743c0549ee8364dd8342929feb824ddaef2e06001b4656995e673f760627422016384df48b2e615320eaf19ee02324ffe9fc1d025a648b8216d07532587bb164e91235acf6466e973ff4a512050d20423548c0e2406e529768fe89dedb86161e9d461fce7026d443956effb53f7a7aa2b71c1a0b7e84f9d7f94bd6d16bbd54d71472cc4c91a08330e0b3e4940fc4fb1156a981a748aa36261645025626103d15b072aea4902dbe7c0256bd4b6f334bd5aefb4a34c5ef287c8b654a73d40a9de1639b0f76291d4305368178070cf17547b3ce31a8e3588c1e37106a4e4aafd9dd75125447e99d1ed5f16658aa07193aa7db142218481c3429cb966d47a1b01c1e77761e6fd6468aa546c7b66cbdd2aca474bb3dff9d65125b2358a46aa5e69fa839fc93625927a74db2bf3c75c3c44417c3a106b364ed3b94e3f15b51c0271aee7444e3b81a4f47bccb8e66d88bc482a0ab98deb088d0ee6739df91620a8a92a135589bc4aea62fc94510f514cfc1c2b8534f33aa7c52e38422526c87483377189838b3b856e54a929aa816cf04e0e0fc939491ad1f1e70353d7c683b1e5d6bb1d267a09e105dccf822356eeff1baa7e6fc99fb70093340815de2bfe638157aa881dd507c6919c2e250731c11f91f92b60a4a1312260dc81704d4163906462051e9c5eb36a7f39737142904fe803ceb39c96a439ed3ca51a6c9b7bba8f45afdb201d264d16dbb4e050bb7a35234f876e6848c2c3349fc2bbb1f4ea90c60321213137f71e6328be560bb324995e67f9e09082a229530c359ea516507eaf68a000c4237338faede888a903cf25c7e1f597d7821c9d68b66870afb1f48245bbe8306dca0d2bd33edae61a9cc7f7cf4585571cf4b68b71af54f8e3084970b4c01e1e8f09143bec8edb6046f23e15caa7d235114b54b0e2ce27751630fda7f3ac645da0ed94187f37db5a029e28e7d484e9f90fa9349e10c72f535e6bc043a6617c9452d0c587ba6ed86e5f04d97ef60b2b831b49bd8cef162f1bc3e275477cf5de6b728d696a4c2b94eb8cae968260e015786fb6b7d33d0de19bd7c268f2b1ecd529bbc681ed3bc923663fd76f31aec30209cbd4c073ac08627d96a563b775cd2e9da81840255509d01623c8745a60de579d5e15528553ebeaa2c8125709435b04d032b6c620c325f995b50ba1f1ef42121eb10745f7b9bd3084420fd84a41c9a2dc0f39681902d161bcdc2a18c0606f862f7b21a9070224648d1ca5e37156383f09f7e62adb1dec242f23d6d0a5adf9019b599f744a89c04829a05ca85a173b55ba795f86d554d649f42efd9e85633cd66f172ed89ca58d1e4ef8fbb5498f7daefc4f99667e8973c3c4a56ebc0c40c38c02c9450a6d4ce8a61a9386cd4d012d7db506a78543fb44bf58c5444f66968b04a8a4bba83a5c332ee7c253324867369b329eeabf99d81add64bf2eb0670d5b6a44f35b7d828170d138446bd6d3b3056e8b27a0db870448378785c86682496ff88e4149496385318a4063652c05bfc2e3753abcc8bc058d5e5ce458613f0c110ea167d6efb45d6840653030c530369e1e323bd7545bd26e9e8040bc45fc99c8370a25d2fd9db9c48c12b1c7bbdec38191b867733f0d30c17a6f40413e41d94f19d08b990f7ee7538bca4674547f0d4ef9c6beccd86f377249f12d6f82703c0cd32d3d96fdee8cbd47f8a6227fe3414c6c4439245aabdb807439ebbff3848e15d5caf00525d82edd6ca7cceede71cd5fe11c0bdd81f7fb2749ed0dd19b97f5d4638f005b57681123bad689c3eb4212fbe8a49538d42772388d3186eb3a06cc5030abdcd389d060086e3ccf807257c98aefbd14b8e238f059de313d1de9ccdfdf898ad5e42dcb9d3364fa6afa10e37728da6a1cabb4958e191d16eefae88de6d43b532bf29006cae729361e4c4b122ce13bca67e8c42a7d81cf803ca06274f439a8e906fc4b006434eb3425a374bac9c765df2265f752a689dbb0db26221bbd1b1ff0cdb9f992f81a634282984a829dde204c8652bad3a3e0e840d5e76644c21f6cabcd03c4912d67f68b0105bac339dee9e366a6b000bfed792423bee3e052c77be865e32c5ccf3f0d90decf314abdce1eccb11be143c4530c907d9d938c6acffa3abc80270bb74451e94ab52cb3d34a8edcee8730ac3f5b17e8d327494f7ee96affd26dd57ab59187862d3b34c9847a4d80454352124324cc13ab8c8db21a558cb9021f252e20977471b70a6beaf95c9590315a28290f5d8c293eb961a66e7bd17f26c4e511c8bd01e06920424fc38207d93eeb8b6821a84be865cfb4596e96252e25e56b469b4fba14eb1274157a63c4cf8ae2844f499bbc71fc8c26be29c156a7296cc87d8430c93e16072ce1dea19159ac9676fe205777479be4d85794ac7f87227506173be44619709b189ce2e052a882225f9600cbe837484601538b70e90eb5644369c54cff2becdf9da661e480e25ca5f05c1d4aaf4ed21d110b9ad69fa966c19ac8964f1d5304d21ca1da6395b90694ef5f7d01357e59cc2669c0a678cc73ec75bc698754bd0b530a8a9beb2da4242c18b0fa29ca724521bfc3de5a453e856a1b80efafcc990189fd5b12fb729896841720566a85824352a260bf5ceb96eb89c33a4cc93415ed2afc73a1572067b8faec584956ee87cba4270ea0f42de3acc8bcec718fe41b69d7267de45e533ae7071d5b9f7980f732d4df53f503ee99b3b7ae2183ad96266b0d6f9de6042c7352dd015796a147b838fe9512b519f5bd4b3d9c40e6498e9594e7f70439d076e76fe7", 0x1000}}, 0x1006) 3.863024471s ago: executing program 2 (id=1249): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x4008031, 0xffffffffffffffff, 0x20000000) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x674) 2.897004036s ago: executing program 7 (id=1259): unshare(0x60600) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000300)={0x2, 0x0, 0xfffffff9}, 0xc) 2.007941379s ago: executing program 5 (id=1260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x70bd25, 0x0, {{@in=@local, @in=@multicast1, 0x4e20, 0x0, 0x1ffd, 0x7, 0xa, 0x20, 0x0, 0xc}, {@in=@broadcast, 0x20, 0x6c}, @in=@empty, {0x400010001, 0xffffffffffffffff, 0x0, 0x800000000000001, 0x2cb, 0x6, 0x4000000000000}, {0x4, 0x8}, {0x6, 0x0, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xdb}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac-aes-ce\x00'}, 0x0, 0x60}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) r1 = socket(0x8, 0x5, 0x7) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="18020000000000000000000000008000850000005300000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="243c42fd680d85ffff03762f86dd", 0x0, 0x21fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x15, 0x5, 0x0) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xffffffb8, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$bt_hci(r5, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="a5d75380"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x32, 0x2a, [@random={0x6, 0x2c, "ee22b07b0dd8bd438bd72957235ce365e47c7eb5e2f04f2157b07a645af4245fb1adcccb74adc5db10ef1ead"}]}, @chandef_params]}, 0x64}}, 0x0) 1.94718294s ago: executing program 4 (id=1261): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x8, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@routing={0x1d, 0x0, 0x1, 0x6}]}}}}}, 0x0) 1.940668531s ago: executing program 7 (id=1262): r0 = socket$rxrpc(0x21, 0x2, 0xa) accept4(r0, 0x0, &(0x7f0000000040), 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x4000) r4 = socket$isdn_base(0x22, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r5, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x4000051) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="8755ffe59212fef614a5102766343a8d1ce00fb1017bca1a3f75d3204703490f18be3ecbbdacef724e84ad456120a07d1d08c540f9cf559745fc58016241a94eb9a90626e9102ee169e723998b9169ffa1bc44ff8ab45ce8a3228d6e2992217632bf879d6e7b209e2afb26f09ccced0fdca90434a155aa407d1fab58cacde72820d785747fbd"], 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.857872392s ago: executing program 4 (id=1263): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet6(0xa, 0x4, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x84) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.654953485s ago: executing program 1 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000090601020000000000000000030000000900020073797a31000000000500010007000000240007800c00018008000140ffffffeb0c00148008000140ac1414bb08000840"], 0x4c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.630045005s ago: executing program 1 (id=1265): socket$netlink(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) 1.544991157s ago: executing program 7 (id=1266): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.471054378s ago: executing program 4 (id=1267): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 1.470667887s ago: executing program 5 (id=1268): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x161, &(0x7f00000003c0)=ANY=[], 0x0) 1.424846868s ago: executing program 2 (id=1269): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000240)={0x4, 0x6, 0x3ff}) futex(0x0, 0x2, 0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 1.410172628s ago: executing program 1 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) 1.347630829s ago: executing program 5 (id=1271): setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000996afb88af66d057ad29ad3fb8895c81538957e3aff71f2b39528b8d4f81d79c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a3fe2846b4061000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0x7fffffffffffffff, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close(r6) 1.347165609s ago: executing program 2 (id=1272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 1.181514142s ago: executing program 1 (id=1273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create1(0x3012f84903b37587) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, 0x0, 0x40) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x4048010) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 397.161974ms ago: executing program 7 (id=1274): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6000000000383a00fe8000000000000000000000000000bbff0200000000000000000000000000010200907800d3e40d118cb02b00042f00000000000000f10000000001fe8000000000000000000000000000aa2b00040000"], 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 396.854694ms ago: executing program 2 (id=1275): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 387.555464ms ago: executing program 5 (id=1276): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000400)="0b0012002e0064000200475400f6a13bb1000000086086ddd9d3c97252709803deeadd19e6a9c61c0b4c1d7bbe88f588ea2f986d1e1ec7b4d14bc37b995822d420e2501ac93967b34a11e05177923f64f76aed0c6c6c570d074db93d8b39de5058bd493b3b86d246205286a8f38dfe6c9b40", 0x72, 0x0, &(0x7f0000000140)={0x11, 0xf8, r1, 0x1, 0xfe, 0x6, @remote}, 0x14) 283.157666ms ago: executing program 4 (id=1277): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x5, 0x3a) 254.392046ms ago: executing program 1 (id=1278): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) accept(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 244.548296ms ago: executing program 2 (id=1279): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0xb, {{0xa, 0xffff, 0x0, @mcast2, 0x2}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x0, @mcast2, 0x20000000}}, {{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}]}, 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x4, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 179.114877ms ago: executing program 4 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd70000000000001000000140002007767300000000000000000000000000008000700ff010000480008804400008008000300020000001400040002c05f335cffffff000000000000000024000100d17328"], 0x78}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) 157.611368ms ago: executing program 7 (id=1281): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008f80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x9, @remote, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000080)="c96e59f2a31fff9bd65ef90febafb575f2d8de6150d99976a3cb385c832f4796f69062efab9f04a6fa2229ed6c4201b404850ed4ab647b0ab1066d02e3f63378da22c9e9e61f3764a4541492a47630bfb4df725bce9279523a42e9d827f9ae878553f79adf6f1376b88f805772794d287289482813dae22e9cdf41ebe05a184f18900216a55265d6b26ffe8d8f44330a8cb7b41315d0747dda5fca5ff9d251397caa80267de0886f70d71d07478249c4786c3aa948b5b056e3699492a00a4905200fa9", 0xc3}, {&(0x7f0000000180)="1e68943b8dfb9f4d14c79e97c5ebf83c8c0968bbc5c24055f3309d118a7c6d1761cc89e30bc0e7132173801669b0baacdb83ec3bf98701ea362ab4b5c516e19e79bb9cf4ab", 0x45}, {&(0x7f0000000280)="283da3e6f8d7eb3fd20b3c654160e889d3e21e7fbbc6a0104de606c7725e2018b3939951a92e1841d5f70a880e331d269b4ad5abed00eb572f17f9626ac2d4a0001fd54c68427583f4fd6e054cc548caef34f60ccdf42e91671201388818e10dfb673cf6acfac80ca26d67aef81e89bfdcfdcd5bfd43fdbbb145500fd906de6609f38f73dedf951ebb665ef5b437908e6a", 0x91}, {&(0x7f0000000200)="edc0703a94834840b515243b35cc39c117274124fe9e6eab", 0x18}, {&(0x7f00000005c0)="9e6a5c954ff807473fa4a9812ec19f29444afe38a3711d79bcff880851c4944e7d3e399adf803a6713ff8f531a331f87192d5af32f9ed5e7948ee04c17dce0a6c904dfd40b93b631b824caa0efdcf2231b62fb280387ecf32286c1d76ef53c01e240c3197cdcec59274a8ee242b8a508eeef02a39e93429cf778ab6cd72d2e99466fb697dd71639b6c3957888708affde02c5915b4711eb90b4a4e6c4ee6468dda64c98d2f3f0c61741fcb5b67153775fe3fe20cd46d1dcec7080bdd39940b4728a3f1f89fe65799ccb29c9090", 0xcd}, {&(0x7f0000000340)="8b74e183dc30a8a878c6624cbe11bcfd11dee415595cc4fecd8260ba738759adc14e1e449b74bc53ea8dcfc63219dd0ed3c3ba1f305bf697549bb62def0333631ac6dde6de780ce12a6d4088c31aa1f94193638f3bba176fde92b1f707de54d9", 0x60}, {&(0x7f00000006c0)="f14ef3950bdc91daee1e792df1d952a90574551bb67004feb7691e2363f08e7d4c0eb5db6be20f073335817dfd6d20820bd2eaf032118a1afd656a958a15aade5bdf67d529e630b349a705f8fafc1f8d142e1b005afec3018f77981441bab9efcd008d2c0f77f02593810e0a99340be00fdbca53bc32c7e74318109ad8b51807b086062a4c34805b309dc8fec149e05d62c79b0d2e1cae0ed25098b523fbbc3d42a2cdfe996fc4bd259ec4b98cfbd5498c70dc1b00d790bfc5b680e65dfd31b4307e9bd248f3cbf0660738", 0xcb}, {&(0x7f00000007c0)="f5442b1290a24ebafc8f074e4afaea093a00b1cb2b240239c20265260e8cf33f189439e32176c79370be5062caf907033423d66d1a50352b44f1a6ac3e6fe243e6b0e4de0f63cf9f60d91aa4339e6927a58c6a1d9b9740b50e72a97853ecc1cd4d23cd4516fd1b108c9136f5d5aac1476b59267def64ac319a936cc1f9b812c84e45bedb19cfe8297584cd7dc78c11285712bcb2040295", 0x97}, {&(0x7f0000000880)="46998dfb60b7bfe5334191146f743125fb3033e496c7be7542f49e553954117d197931838c73605296c3639ee842d1ecb14c84fcf5093705a6c71ae5ff7e31fb93b2531ab405696bd2c64c442d4dc19ab955ebfefe8e95274b26fc0dacfd0dc1c1c6bee3708afd4768be26587b3eaece637e011998", 0x75}], 0x9, &(0x7f0000000ac0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0xc, 0x8, '\x00', [@pad1, @generic={0x6}, @calipso={0x7, 0x20, {0x1, 0x6, 0xe3, 0x9, [0x2, 0x40, 0x160550cb]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x2}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0xf7}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x33}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x32}}}], 0xa0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1278}}], 0x2, 0x80) 108.500308ms ago: executing program 4 (id=1282): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x38, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xc4) 51.076909ms ago: executing program 5 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000240)={0x4, 0x6, 0x3ff}) futex(0x0, 0x2, 0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 50.824519ms ago: executing program 2 (id=1284): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 50.560619ms ago: executing program 1 (id=1285): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="70800000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230bfb9d867000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c", 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000001c0)={0x100, {{0x2, 0x4e20, @remote}}}, 0x88) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x800) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 7.83439ms ago: executing program 7 (id=1286): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x3c}}, 0x0) 0s ago: executing program 5 (id=1287): setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000996afb88af66d057ad29ad3fb8895c81538957e3aff71f2b39528b8d4f81d79c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a3fe2846b4061000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0x7fffffffffffffff, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close(r6) kernel console output (not intermixed with test programs): netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.405752][ T5217] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.437644][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3700 @ nid 36 [ 191.444029][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3699 @ nid 36 [ 191.449979][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3698 @ nid 36 [ 191.476698][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.479475][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.483304][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.490511][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.500164][ T5277] device veth0_vlan entered promiscuous mode [ 191.512916][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3697 @ nid 36 [ 191.515596][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3696 @ nid 36 [ 191.518060][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3695 @ nid 36 [ 191.520539][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3694 @ nid 36 [ 191.532570][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3693 @ nid 36 [ 191.535053][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3692 @ nid 36 [ 191.549037][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3691 @ nid 36 [ 191.551609][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3690 @ nid 36 [ 191.598569][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3689 @ nid 36 [ 191.612203][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3688 @ nid 36 [ 191.645320][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3687 @ nid 36 [ 191.647857][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3686 @ nid 36 [ 191.666835][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3685 @ nid 36 [ 191.669296][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3684 @ nid 36 [ 191.681984][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3683 @ nid 36 [ 191.692118][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3682 @ nid 36 [ 191.702272][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3681 @ nid 36 [ 191.712399][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3680 @ nid 36 [ 191.807664][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3679 @ nid 36 [ 191.810276][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3678 @ nid 36 [ 191.819463][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3677 @ nid 36 [ 191.822038][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3676 @ nid 36 [ 191.841621][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3675 @ nid 36 [ 191.852842][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3674 @ nid 36 [ 191.855642][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3673 @ nid 36 [ 191.858134][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3672 @ nid 36 [ 191.860636][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3671 @ nid 36 [ 191.906779][ T5277] device veth1_vlan entered promiscuous mode [ 191.925701][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3670 @ nid 36 [ 191.928171][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3669 @ nid 36 [ 191.930650][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3668 @ nid 36 [ 191.984671][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3667 @ nid 36 [ 191.987242][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3666 @ nid 36 [ 191.989705][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3665 @ nid 36 [ 191.992237][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3664 @ nid 36 [ 192.099780][ T5614] ipt_CLUSTERIP: Please specify destination IP [ 192.155207][ T1671] device hsr_slave_0 left promiscuous mode [ 192.157494][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3663 @ nid 36 [ 192.159960][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3662 @ nid 36 [ 192.193396][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3661 @ nid 36 [ 192.196039][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3660 @ nid 36 [ 192.198606][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3659 @ nid 36 [ 192.201023][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3658 @ nid 36 [ 192.233854][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3657 @ nid 36 [ 192.236418][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3656 @ nid 36 [ 192.239017][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3655 @ nid 36 [ 192.241523][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3654 @ nid 36 [ 192.270813][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3653 @ nid 36 [ 192.280937][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3652 @ nid 36 [ 192.291838][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3651 @ nid 36 [ 192.319193][ T1671] device hsr_slave_1 left promiscuous mode [ 192.327216][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3650 @ nid 36 [ 192.339247][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3649 @ nid 36 [ 192.349906][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3648 @ nid 36 [ 192.356931][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3647 @ nid 36 [ 192.366635][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3646 @ nid 36 [ 192.369293][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3645 @ nid 36 [ 192.372132][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3644 @ nid 36 [ 192.375251][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3643 @ nid 36 [ 192.377876][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3642 @ nid 36 [ 192.380421][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3641 @ nid 36 [ 192.386754][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3640 @ nid 36 [ 192.390524][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3639 @ nid 36 [ 192.395779][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3638 @ nid 36 [ 192.398802][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3637 @ nid 36 [ 192.405739][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3636 @ nid 36 [ 192.410573][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3635 @ nid 36 [ 192.421341][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3634 @ nid 36 [ 192.422987][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.425921][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.428737][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.430760][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.436400][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3633 @ nid 36 [ 192.443138][ T1671] device bridge_slave_1 left promiscuous mode [ 192.444969][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.445646][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3632 @ nid 36 [ 192.451640][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3631 @ nid 36 [ 192.464530][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3630 @ nid 36 [ 192.468091][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3629 @ nid 36 [ 192.470632][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3628 @ nid 36 [ 192.481560][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3627 @ nid 36 [ 192.499708][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.501505][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.509744][ T1671] device bridge_slave_0 left promiscuous mode [ 192.511591][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.523545][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3626 @ nid 36 [ 192.547661][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3625 @ nid 36 [ 192.550312][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3624 @ nid 36 [ 192.558235][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3623 @ nid 36 [ 192.560805][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3622 @ nid 36 [ 192.572465][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3621 @ nid 36 [ 192.589759][ T1671] device hsr_slave_0 left promiscuous mode [ 192.591870][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3620 @ nid 36 [ 192.600768][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3619 @ nid 36 [ 192.608943][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3618 @ nid 36 [ 192.611450][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3617 @ nid 36 [ 192.620932][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3616 @ nid 36 [ 192.629036][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3615 @ nid 36 [ 192.631713][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3614 @ nid 36 [ 192.642205][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3613 @ nid 36 [ 192.651066][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3612 @ nid 36 [ 192.663916][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3611 @ nid 36 [ 192.669902][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3610 @ nid 36 [ 192.687966][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3609 @ nid 36 [ 192.693629][ T1671] device hsr_slave_1 left promiscuous mode [ 192.709751][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3608 @ nid 36 [ 192.712294][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3607 @ nid 36 [ 192.714883][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3606 @ nid 36 [ 192.717323][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3605 @ nid 36 [ 192.719778][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3604 @ nid 36 [ 192.722153][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3603 @ nid 36 [ 192.724695][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3602 @ nid 36 [ 192.727390][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 192.730190][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 192.733021][ T5448] erofs: (device loop6): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 192.735565][ T5448] attempt to access beyond end of device [ 192.735565][ T5448] loop6: rw=524288, want=24, limit=16 [ 192.738495][ T5448] attempt to access beyond end of device [ 192.738495][ T5448] loop6: rw=524288, want=32, limit=16 [ 193.522838][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.524990][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.527730][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.529791][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.544653][ T1671] device bridge_slave_1 left promiscuous mode [ 193.546737][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.584198][ T1671] device bridge_slave_0 left promiscuous mode [ 193.586186][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.699690][ T1671] device hsr_slave_0 left promiscuous mode [ 193.753224][ T1671] device hsr_slave_1 left promiscuous mode [ 193.878718][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.898276][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.901002][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.912666][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.915328][ T1671] device bridge_slave_1 left promiscuous mode [ 193.917069][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.666826][ T1671] device bridge_slave_0 left promiscuous mode [ 194.668797][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.820963][ T1671] device veth1_macvtap left promiscuous mode [ 194.822737][ T1671] device veth0_macvtap left promiscuous mode [ 194.824414][ T1671] device veth1_vlan left promiscuous mode [ 194.826019][ T1671] device veth0_vlan left promiscuous mode [ 194.942871][ T1671] device veth1_macvtap left promiscuous mode [ 194.944611][ T1671] device veth0_macvtap left promiscuous mode [ 194.946337][ T1671] device veth1_vlan left promiscuous mode [ 194.948162][ T1671] device veth0_vlan left promiscuous mode [ 195.142888][ T1671] device veth1_macvtap left promiscuous mode [ 195.144620][ T1671] device veth0_macvtap left promiscuous mode [ 195.146224][ T1671] device veth1_vlan left promiscuous mode [ 195.147862][ T1671] device veth0_vlan left promiscuous mode [ 195.821617][ T1671] team0 (unregistering): Port device team_slave_1 removed [ 195.846160][ T1671] team0 (unregistering): Port device team_slave_0 removed [ 195.868073][ T1671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.936962][ T1671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.135387][ T5651] loop6: detected capacity change from 0 to 1024 [ 196.167460][ T5651] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 196.169815][ T1671] bond0 (unregistering): Released all slaves [ 196.170212][ T5651] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 196.190992][ T5651] EXT4-fs error (device loop6): ext4_get_journal_inode:5160: inode #5: comm syz.6.361: unexpected bad inode w/o EXT4_IGET_BAD [ 196.201205][ T5651] EXT4-fs (loop6): no journal found [ 196.208093][ T5651] EXT4-fs (loop6): can't get journal size [ 196.210961][ T5651] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 196.249493][ T5651] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1439: inode #12: block 16: comm syz.6.361: path /28/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 196.271266][ T5651] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1439: inode #12: block 16: comm syz.6.361: path /28/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 196.446675][ T5654] loop6: detected capacity change from 0 to 256 [ 196.544825][ T1671] team0 (unregistering): Port device team_slave_1 removed [ 196.581431][ T1671] team0 (unregistering): Port device team_slave_0 removed [ 196.598121][ T1671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.662793][ T1671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.881842][ T1671] bond0 (unregistering): Released all slaves [ 197.165015][ T1671] team0 (unregistering): Port device team_slave_1 removed [ 197.185079][ T1671] team0 (unregistering): Port device team_slave_0 removed [ 197.194494][ T1671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.258582][ T1671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.450825][ T1671] bond0 (unregistering): Released all slaves [ 197.569636][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.572357][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.698138][ T4609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.700488][ T4609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.833817][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.849360][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.852248][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.886985][ T5277] device veth0_macvtap entered promiscuous mode [ 197.954579][ T5277] device veth1_macvtap entered promiscuous mode [ 197.979748][ T4119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.982098][ T4119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.774769][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.777548][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.780162][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.885812][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.888678][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.891267][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.936766][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.939524][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.942300][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.003812][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.006590][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.009187][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.011929][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.050734][ T5277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.064316][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.068329][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.104301][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.107171][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.109797][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.139710][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.210074][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.295001][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.317064][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.319912][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.106941][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.130499][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.219606][ T5277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.239984][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.246833][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.264903][ T5277] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.269680][ T5277] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.275229][ T5277] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.325711][ T5277] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.656683][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.659042][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.680936][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.764132][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.766521][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.771668][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.257574][ T5772] loop6: detected capacity change from 0 to 512 [ 205.103972][ T5772] EXT4-fs (loop6): Ignoring removed oldalloc option [ 205.367632][ T5772] EXT4-fs (loop6): orphan cleanup on readonly fs [ 205.401128][ T5772] Quota error (device loop6): find_tree_dqentry: Getting block too big (196613 >= 6) [ 205.404412][ T5772] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 205.407044][ T5772] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.375: Failed to acquire dquot type 1 [ 205.446997][ T5772] EXT4-fs (loop6): 1 truncate cleaned up [ 205.591346][ T5772] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 205.746588][ T5772] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 205.748610][ T5772] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.392853][ T26] audit: type=1326 audit(206.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.8.378" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff803cb7a8 code=0x0 [ 211.490482][ T5811] loop8: detected capacity change from 0 to 1024 [ 211.712754][ T5811] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 2: comm syz.8.384: lblock 2 mapped to illegal pblock 2 (length 1) [ 211.755192][ T5811] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 211.833411][ T5811] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 48: comm syz.8.384: lblock 0 mapped to illegal pblock 48 (length 1) [ 211.840409][ T5811] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 211.849483][ T5811] EXT4-fs error (device loop8): ext4_acquire_dquot:6204: comm syz.8.384: Failed to acquire dquot type 0 [ 211.950897][ T5811] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 211.961038][ T5811] EXT4-fs error (device loop8): ext4_evict_inode:282: inode #11: comm syz.8.384: mark_inode_dirty error [ 212.971082][ T5811] EXT4-fs warning (device loop8): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 213.041663][ T5811] EXT4-fs (loop8): 1 orphan inode deleted [ 213.061900][ T4609] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.067725][ T4609] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 213.070063][ T4609] EXT4-fs error (device loop8): ext4_release_dquot:6240: comm kworker/u4:14: Failed to release dquot type 0 [ 213.091003][ T5811] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,max_batch_time=0x00000000000008cc,sysvgroups,noblock_validity,,errors=continue. Quota mode: none. [ 214.433632][ T5811] EXT4-fs (loop8): re-mounted. Opts: . Quota mode: none. [ 214.623332][ T3604] Bluetooth: hci3: command 0x0409 tx timeout [ 215.964870][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 218.340700][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 218.570041][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.600812][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.641988][ T5826] device bridge_slave_0 entered promiscuous mode [ 218.646314][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.668775][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.671704][ T5826] device bridge_slave_1 entered promiscuous mode [ 218.824059][ T5915] netlink: 24 bytes leftover after parsing attributes in process `syz.8.400'. [ 218.866466][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.871317][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.323987][ T5826] team0: Port device team_slave_0 added [ 219.368764][ T5826] team0: Port device team_slave_1 added [ 219.644080][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.645977][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.652430][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.100010][ T5944] loop9: detected capacity change from 0 to 256 [ 220.517994][ T3604] Bluetooth: hci3: command 0x040f tx timeout [ 220.603571][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.605479][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.612414][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.623255][ T5944] exfat: Unknown parameter 'keep_last_dots' [ 221.084683][ T5826] device hsr_slave_0 entered promiscuous mode [ 221.133112][ T5826] device hsr_slave_1 entered promiscuous mode [ 221.805810][ T1671] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.040337][ T1671] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.144784][ T1671] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.223584][ T5967] loop9: detected capacity change from 0 to 40427 [ 222.270811][ T1671] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.370551][ T5967] F2FS-fs (loop9): Found nat_bits in checkpoint [ 222.485639][ T6006] netlink: 'syz.7.413': attribute type 49 has an invalid length. [ 222.540574][ T5967] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 222.573113][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 222.728503][ T5277] attempt to access beyond end of device [ 222.728503][ T5277] loop9: rw=2049, want=45104, limit=40427 [ 223.711242][ T6040] capability: warning: `syz.9.415' uses 32-bit capabilities (legacy support in use) [ 224.579679][ T6048] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 226.964865][ T6082] loop9: detected capacity change from 0 to 2048 [ 227.078498][ T6082] EXT4-fs (loop9): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 227.295727][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.395092][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.539680][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.286160][ T6106] loop9: detected capacity change from 0 to 1024 [ 228.295083][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.325795][ T6106] EXT4-fs (loop9): Ignoring removed orlov option [ 228.327643][ T6106] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 228.460084][ T6088] loop8: detected capacity change from 0 to 40427 [ 228.517840][ T6088] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x1ffff [ 228.551745][ T6088] F2FS-fs (loop8): invalid crc value [ 228.575041][ T6106] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 228.603873][ T6088] F2FS-fs (loop8): Found nat_bits in checkpoint [ 228.634306][ T6120] device veth0 entered promiscuous mode [ 228.834778][ T6088] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 229.020667][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.035669][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.038447][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.245601][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.471171][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.489523][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.603399][ T5217] attempt to access beyond end of device [ 230.603399][ T5217] loop8: rw=2049, want=45104, limit=40427 [ 230.664756][ T6119] device veth0 left promiscuous mode [ 230.666473][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.669211][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.671689][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.673699][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.682257][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.689576][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.698386][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.700318][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.703857][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.711905][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.715967][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.721347][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.732124][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.736127][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.741740][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.751303][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.754595][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.759643][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.793314][ T1671] device hsr_slave_0 left promiscuous mode [ 230.892702][ T1671] device hsr_slave_1 left promiscuous mode [ 231.048032][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.055426][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.228561][ T6150] loop7: detected capacity change from 0 to 128 [ 231.260274][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.267893][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.290349][ T1671] device bridge_slave_1 left promiscuous mode [ 231.310692][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.072237][ T1671] device bridge_slave_0 left promiscuous mode [ 233.075889][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.362859][ T1671] device veth1_macvtap left promiscuous mode [ 234.364591][ T1671] device veth0_macvtap left promiscuous mode [ 234.367236][ T1671] device veth1_vlan left promiscuous mode [ 234.368841][ T1671] device veth0_vlan left promiscuous mode [ 234.912069][ T1671] team0 (unregistering): Port device team_slave_1 removed [ 234.936926][ T1671] team0 (unregistering): Port device team_slave_0 removed [ 235.884050][ T1671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.963258][ T1671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.408867][ T1671] bond0 (unregistering): Released all slaves [ 238.710834][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.713703][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.716285][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.881126][ T6177] veth0_macvtap: mtu greater than device maximum [ 238.906555][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.908760][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.946016][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.186467][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.446'. [ 239.614076][ T6181] bond0: (slave bond_slave_0): Releasing backup interface [ 240.428582][ T5826] device veth0_vlan entered promiscuous mode [ 240.562121][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.568249][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.576223][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.578867][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.585095][ T6204] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 240.597324][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.602447][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.622609][ T5826] device veth1_vlan entered promiscuous mode [ 240.781888][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.793937][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.811750][ T5826] device veth0_macvtap entered promiscuous mode [ 240.817699][ T5826] device veth1_macvtap entered promiscuous mode [ 240.972753][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.990750][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.995174][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.000282][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.003714][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.006674][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.009423][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.012342][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.015978][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.018977][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.030177][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.043735][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.046852][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.049763][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.055165][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.058050][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.061025][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.064319][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.067164][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.070014][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.074031][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.077979][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.080278][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.090723][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.093746][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.097200][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.099953][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.104253][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.115131][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.123311][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.125712][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.127981][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.252938][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.255243][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.259294][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.312715][ T4609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.315145][ T4609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.319302][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.070114][ T6257] loop0: detected capacity change from 0 to 1024 [ 242.114996][ T6257] EXT4-fs (loop0): Ignoring removed orlov option [ 242.130761][ T6257] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 243.108276][ T6257] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 245.402798][ T6316] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.405995][ T6316] FAT-fs (loop13): unable to read boot sector [ 245.417376][ T6289] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 247.224215][ T6338] loop9: detected capacity change from 0 to 256 [ 248.528191][ T6338] FAT-fs (loop9): Directory bread(block 64) failed [ 248.529933][ T6338] FAT-fs (loop9): Directory bread(block 65) failed [ 248.549485][ T6338] FAT-fs (loop9): Directory bread(block 66) failed [ 248.562822][ T6338] FAT-fs (loop9): Directory bread(block 67) failed [ 248.564663][ T6338] FAT-fs (loop9): Directory bread(block 68) failed [ 248.566420][ T6338] FAT-fs (loop9): Directory bread(block 69) failed [ 248.568134][ T6338] FAT-fs (loop9): Directory bread(block 70) failed [ 248.569807][ T6338] FAT-fs (loop9): Directory bread(block 71) failed [ 248.571527][ T6338] FAT-fs (loop9): Directory bread(block 72) failed [ 248.587671][ T6361] loop8: detected capacity change from 0 to 1024 [ 248.629988][ T6338] FAT-fs (loop9): Directory bread(block 73) failed [ 248.665618][ T6361] EXT4-fs (loop8): Ignoring removed orlov option [ 248.668076][ T6361] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 248.741359][ T6361] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 249.782866][ T6375] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 249.784989][ T6375] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 249.867066][ T1671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.927420][ T1671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.999178][ T1671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.021301][ T6351] loop7: detected capacity change from 0 to 40427 [ 250.099129][ T1671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.140007][ T6351] F2FS-fs (loop7): invalid crc value [ 250.210746][ T6351] F2FS-fs (loop7): Found nat_bits in checkpoint [ 254.163184][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.165058][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.232368][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.494'. [ 254.236176][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.494'. [ 256.818701][ T6457] loop0: detected capacity change from 0 to 2048 [ 256.856439][ T6457] EXT4-fs (loop0): inline encryption not supported [ 256.858276][ T6457] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 256.860292][ T6457] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 256.955187][ T6463] netlink: 32 bytes leftover after parsing attributes in process `syz.8.503'. [ 258.024028][ T6492] ipt_CLUSTERIP: Please specify destination IP [ 262.909937][ T1671] device hsr_slave_0 left promiscuous mode [ 262.963422][ T1671] device hsr_slave_1 left promiscuous mode [ 263.063080][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.065324][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.073781][ T1671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.075775][ T1671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.078207][ T1671] device bridge_slave_1 left promiscuous mode [ 263.079981][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.132801][ T6547] loop0: detected capacity change from 0 to 1024 [ 263.144262][ T1671] device bridge_slave_0 left promiscuous mode [ 263.146136][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.346411][ T6547] EXT4-fs (loop0): Ignoring removed bh option [ 264.354509][ T6547] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.614356][ T6547] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,init_itable=0x0000000000000be6,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nogrpid,acl,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 264.623355][ T1671] device veth1_macvtap left promiscuous mode [ 264.625639][ T1671] device veth0_macvtap left promiscuous mode [ 264.627428][ T1671] device veth1_vlan left promiscuous mode [ 264.629015][ T1671] device veth0_vlan left promiscuous mode [ 264.779791][ T6547] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.518: Allocating blocks 497-513 which overlap fs metadata [ 264.799536][ T6547] EXT4-fs (loop0): pa 000000008baf64f5: logic 128, phys. 385, len 8 [ 264.801899][ T6547] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 265.296125][ T1671] team0 (unregistering): Port device team_slave_1 removed [ 265.316577][ T1671] team0 (unregistering): Port device team_slave_0 removed [ 265.335602][ T1671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.372759][ T1671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.590684][ T1671] bond0 (unregistering): Released all slaves [ 265.732592][ T6570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 272.414929][ T6689] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 272.944976][ T6712] loop0: detected capacity change from 0 to 2048 [ 273.366161][ T6712] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.412015][ T6702] udc-core: couldn't find an available UDC or it's busy [ 274.416569][ T6702] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 274.817683][ T6730] loop9: detected capacity change from 0 to 256 [ 274.999302][ T6730] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 278.001942][ T6738] chnl_net:caif_netlink_parms(): no params data found [ 278.216001][ T6175] Bluetooth: hci6: command 0x0406 tx timeout [ 278.220246][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 278.762805][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.766851][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.769588][ T6738] device bridge_slave_0 entered promiscuous mode [ 278.846322][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.863219][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.877059][ T6738] device bridge_slave_1 entered promiscuous mode [ 281.246135][ T6787] loop9: detected capacity change from 0 to 1024 [ 281.368827][ T6787] EXT4-fs (loop9): Ignoring removed nobh option [ 281.370621][ T6787] EXT4-fs (loop9): Ignoring removed bh option [ 281.372201][ T6787] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.537981][ T4069] Bluetooth: hci0: command 0x041b tx timeout [ 281.713688][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.769411][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.023249][ T6787] EXT4-fs: error -4 creating inode table initialization thread [ 282.041681][ T6787] EXT4-fs (loop9): mount failed [ 282.262384][ T6738] team0: Port device team_slave_0 added [ 282.352358][ T6738] team0: Port device team_slave_1 added [ 282.664767][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.666765][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.777348][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.909644][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.911516][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.946554][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.364939][ T26] audit: type=1326 audit(283.340:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.554" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f2f7a8 code=0x0 [ 283.405993][ T6738] device hsr_slave_0 entered promiscuous mode [ 283.463018][ T6738] device hsr_slave_1 entered promiscuous mode [ 283.492673][ T6738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.494915][ T6738] Cannot create hsr debugfs directory [ 283.621108][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 283.623754][ T21] Bluetooth: hci7: command 0x0406 tx timeout [ 285.692864][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 286.019180][ T6935] loop0: detected capacity change from 0 to 2048 [ 286.156430][ T6935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.308482][ T6738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.432203][ T6738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.469359][ T6738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.565519][ T6738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.198889][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.211611][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.221499][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.224125][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.232338][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.235453][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.263602][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.265824][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.268333][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.294549][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.297317][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.299906][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.301798][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.327071][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.361133][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.460126][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.465669][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.468560][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.521473][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.524953][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.527790][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.543100][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.547824][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.550571][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.565861][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.019767][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.021908][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.083152][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.302451][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.306078][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.457601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.460529][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.470039][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.482847][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.503739][ T6738] device veth0_vlan entered promiscuous mode [ 289.586993][ T6738] device veth1_vlan entered promiscuous mode [ 289.741267][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.744471][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.747209][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.762150][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.771657][ T6738] device veth0_macvtap entered promiscuous mode [ 289.805744][ T6738] device veth1_macvtap entered promiscuous mode [ 289.885792][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.888631][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.891378][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.920107][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.926674][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.929439][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.932002][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.946979][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.949630][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.952341][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.977384][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.980583][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.983403][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.985968][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.989000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.010749][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.038939][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.041542][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.069756][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.072457][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.075438][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.089072][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.106814][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.127758][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.144650][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.166119][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.214029][ T6738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.216559][ T6738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.218968][ T6738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.231689][ T6738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.265860][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.268903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.445671][ T7029] loop9: detected capacity change from 0 to 40427 [ 290.467608][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.469926][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.488445][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 290.534299][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.536672][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.541058][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.552409][ T7029] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 290.566696][ T7029] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 290.570749][ T7095] loop7: detected capacity change from 0 to 1024 [ 290.615320][ T7095] EXT4-fs (loop7): Ignoring removed nobh option [ 290.617079][ T7095] EXT4-fs (loop7): Ignoring removed bh option [ 290.651518][ T7095] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.662423][ T7029] F2FS-fs (loop9): Found nat_bits in checkpoint [ 290.892330][ T7029] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 290.921679][ T7029] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 291.643096][ T7095] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 291.981651][ T4071] Bluetooth: hci1: command 0x0406 tx timeout [ 294.636080][ T7183] loop7: detected capacity change from 0 to 512 [ 294.888051][ T7183] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 294.924306][ T7183] EXT4-fs (loop7): 1 truncate cleaned up [ 294.925934][ T7183] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,jqfmt=vfsv0,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 295.084126][ T7183] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 4: comm syz.7.589: lblock 0 mapped to illegal pblock 4 (length 1) [ 295.357519][ T7210] loop7: detected capacity change from 0 to 256 [ 295.509637][ T7210] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe55691ff, utbl_chksum : 0xe619d30d) [ 296.774790][ T7210] exFAT-fs (loop7): hint_cluster is invalid (4278190089) [ 296.972593][ T4186] Bluetooth: hci2: command 0x0406 tx timeout [ 297.061259][ T7210] exFAT-fs (loop7): error, failed to bmap (inode : 0000000022dd2db1 iblock : 8, err : -5) [ 297.121062][ T7210] exFAT-fs (loop7): Filesystem has been set read-only [ 297.212218][ T7210] exFAT-fs (loop7): error, invalid access to FAT (entry 0xff000008) [ 299.382360][ T7281] loop9: detected capacity change from 0 to 512 [ 299.436033][ T7281] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 299.481518][ T7281] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,mblk_io_submit,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 299.553678][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 299.856322][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 299.858595][ T21] usb usb9-port6: attempt power cycle [ 300.865371][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 301.199383][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 301.202077][ T21] usb usb9-port6: unable to enumerate USB device [ 302.026041][ T7192] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 302.360851][ T4263] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.416873][ T4263] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.478984][ T4263] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.531057][ T4263] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.781935][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.615'. [ 303.415288][ T7361] chnl_net:caif_netlink_parms(): no params data found [ 303.712247][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.801491][ T7408] loop7: detected capacity change from 0 to 256 [ 304.661884][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.744159][ T7361] device bridge_slave_0 entered promiscuous mode [ 304.830887][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.840577][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.853136][ T7361] device bridge_slave_1 entered promiscuous mode [ 304.903617][ T4106] Bluetooth: hci1: command 0x0409 tx timeout [ 305.238366][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.368926][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.771486][ T7361] team0: Port device team_slave_0 added [ 305.842936][ T7361] team0: Port device team_slave_1 added [ 306.035854][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.037748][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.167793][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.191138][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.213768][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.220403][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.595517][ T7361] device hsr_slave_0 entered promiscuous mode [ 307.408132][ T6175] Bluetooth: hci1: command 0x041b tx timeout [ 307.432951][ T7361] device hsr_slave_1 entered promiscuous mode [ 307.493160][ T7361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.499555][ T7361] Cannot create hsr debugfs directory [ 308.581413][ T4263] device hsr_slave_0 left promiscuous mode [ 308.632728][ T4263] device hsr_slave_1 left promiscuous mode [ 308.782180][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.784436][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.791837][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.794080][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.803588][ T4263] device bridge_slave_1 left promiscuous mode [ 308.805364][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.844863][ T4263] device bridge_slave_0 left promiscuous mode [ 308.846712][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.963459][ T4263] device veth1_macvtap left promiscuous mode [ 308.966230][ T4263] device veth0_macvtap left promiscuous mode [ 308.967945][ T4263] device veth1_vlan left promiscuous mode [ 308.969542][ T4263] device veth0_vlan left promiscuous mode [ 309.399765][ T7463] loop7: detected capacity change from 0 to 40427 [ 309.452109][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 309.454440][ T4106] Bluetooth: hci1: command 0x040f tx timeout [ 309.479642][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 309.499496][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.518976][ T7463] F2FS-fs (loop7): Found nat_bits in checkpoint [ 309.687070][ T7463] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 309.741179][ T4263] bond0 (unregistering): Released all slaves [ 310.063113][ T5072] attempt to access beyond end of device [ 310.063113][ T5072] loop7: rw=2049, want=45104, limit=40427 [ 311.536556][ T4106] Bluetooth: hci1: command 0x0419 tx timeout [ 314.678914][ T7543] loop9: detected capacity change from 0 to 16 [ 314.776612][ T7543] erofs: (device loop9): mounted with root inode @ nid 36. [ 314.925669][ T7543] attempt to access beyond end of device [ 314.925669][ T7543] loop9: rw=0, want=34359738368, limit=16 [ 314.980743][ T7361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.982951][ T7543] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 315.034993][ T7361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.142963][ T7361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.246149][ T7550] loop9: detected capacity change from 0 to 128 [ 319.955746][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.957549][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.971806][ T7361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 322.944021][ T7570] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 323.639584][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.870901][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.874483][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.984176][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.079376][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.082367][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.088294][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.090369][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.113953][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.145234][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.147989][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.150503][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.152371][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.169440][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.196830][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.219528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.225019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.233521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.253170][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.257126][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.283424][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.286359][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.314212][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.317022][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.347594][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.865969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.868198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.995441][ T7622] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 326.256910][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.405815][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.408802][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.563225][ T7361] device veth0_vlan entered promiscuous mode [ 327.599421][ T7361] device veth1_vlan entered promiscuous mode [ 328.684464][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.687224][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.690007][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.697939][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.700597][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.865599][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.873022][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.969313][ T7361] device veth0_macvtap entered promiscuous mode [ 330.055952][ T7361] device veth1_macvtap entered promiscuous mode [ 330.311571][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.336635][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.339375][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.342165][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.345525][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.348285][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.350907][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.354238][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.356870][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.359669][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.364220][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.367266][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.370095][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.380975][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.511318][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.065214][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.068456][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.089212][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.132163][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.175570][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.227561][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.258193][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.373047][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.375754][ T7361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.378553][ T7361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.480904][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.504159][ T7361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.506581][ T7361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.508887][ T7361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.511240][ T7361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.941347][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.946616][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.364701][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.367047][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.370882][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.520640][ T4119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.526131][ T4119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.535129][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.821217][ T7786] device wireguard0 entered promiscuous mode [ 338.729815][ T153] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.732903][ T4075] Bluetooth: hci3: command 0x0406 tx timeout [ 338.939335][ T153] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.997404][ T153] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.098533][ T153] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.540302][ T7810] chnl_net:caif_netlink_parms(): no params data found [ 340.092942][ T4071] Bluetooth: hci2: command 0x0409 tx timeout [ 340.207983][ T7884] binder: 7883:7884 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 340.255937][ T7884] binder: 7884 RLIMIT_NICE not set [ 340.271019][ T7890] binder: 7883:7890 tried to acquire reference to desc 0, got 1 instead [ 340.273928][ T7890] binder: 7883:7890 transaction failed 29201/-22, size 0-0 line 3059 [ 340.291327][ T7829] loop3: detected capacity change from 0 to 40427 [ 340.315912][ T7829] F2FS-fs (loop3): invalid crc value [ 340.324491][ T7829] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.643160][ T7810] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.673710][ T7829] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 340.688079][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.733716][ T7810] device bridge_slave_0 entered promiscuous mode [ 340.842425][ T7810] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.883794][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.924260][ T7810] device bridge_slave_1 entered promiscuous mode [ 340.998183][ T7810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.024151][ T4186] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.025972][ T7810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.028829][ T7361] attempt to access beyond end of device [ 341.028829][ T7361] loop3: rw=2049, want=45104, limit=40427 [ 341.132377][ T7810] team0: Port device team_slave_0 added [ 341.203573][ T7810] team0: Port device team_slave_1 added [ 341.488919][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.490831][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.587448][ T7810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.615255][ T7921] loop7: detected capacity change from 0 to 16 [ 341.702769][ T7921] erofs: (device loop7): mounted with root inode @ nid 36. [ 341.802876][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.804836][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.811717][ T7810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.002601][ T7924] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.036432][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 342.172731][ T4075] Bluetooth: hci2: command 0x041b tx timeout [ 343.304875][ T153] device hsr_slave_0 left promiscuous mode [ 343.343899][ T153] device hsr_slave_1 left promiscuous mode [ 343.392675][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.394877][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.397565][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.399591][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.406908][ T153] device bridge_slave_1 left promiscuous mode [ 343.408732][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.452885][ T153] device bridge_slave_0 left promiscuous mode [ 343.454693][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.573046][ T153] device veth1_macvtap left promiscuous mode [ 343.576067][ T153] device veth0_macvtap left promiscuous mode [ 343.577931][ T153] device veth1_vlan left promiscuous mode [ 343.579563][ T153] device veth0_vlan left promiscuous mode [ 344.295486][ T4186] Bluetooth: hci2: command 0x040f tx timeout [ 344.960399][ T153] team0 (unregistering): Port device team_slave_1 removed [ 344.974706][ T153] team0 (unregistering): Port device team_slave_0 removed [ 344.994089][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.072800][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.250980][ T153] bond0 (unregistering): Released all slaves [ 345.405078][ T7810] device hsr_slave_0 entered promiscuous mode [ 345.451093][ T7810] device hsr_slave_1 entered promiscuous mode [ 345.493310][ T7810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.495472][ T7810] Cannot create hsr debugfs directory [ 346.351555][ T4075] Bluetooth: hci2: command 0x0419 tx timeout [ 349.060798][ T26] audit: type=1326 audit(349.030:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.6.722" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f1777a8 code=0x0 [ 350.949774][ T8140] device veth1_macvtap left promiscuous mode [ 350.951505][ T8140] device macsec0 entered promiscuous mode [ 352.657110][ T8164] IPv4: Oversized IP packet from 127.202.26.0 [ 352.676940][ T7810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.755188][ T8169] loop3: detected capacity change from 0 to 256 [ 352.819690][ T7810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.872311][ T7810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.965164][ T7810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.183809][ T8178] loop7: detected capacity change from 0 to 16 [ 353.525036][ T7810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.588719][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.591338][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.634567][ T7810] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.639988][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.643149][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.649665][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.651592][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.662972][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.667808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.670562][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.680506][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.682519][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.733953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.760557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.771846][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.776186][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.779579][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.805563][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.808527][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.847527][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.850412][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.911945][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.914984][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.924478][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.043009][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.046053][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.079186][ T7810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.362717][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.365661][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.436142][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.438853][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.441958][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.448219][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.466656][ T7810] device veth0_vlan entered promiscuous mode [ 355.581181][ T7810] device veth1_vlan entered promiscuous mode [ 355.648822][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.651633][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.667115][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.673505][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.684443][ T7810] device veth0_macvtap entered promiscuous mode [ 355.709086][ T7810] device veth1_macvtap entered promiscuous mode [ 355.791848][ T8200] loop7: detected capacity change from 0 to 512 [ 355.860401][ T8200] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.740: bad orphan inode 11 [ 355.866072][ T8200] ext4_test_bit(bit=10, block=4) = 1 [ 355.867526][ T8200] is_bad_inode(inode)=0 [ 355.868620][ T8200] NEXT_ORPHAN(inode)=2080374784 [ 355.870099][ T8200] max_ino=32 [ 355.870942][ T8200] i_nlink=0 [ 355.871837][ T8200] EXT4-fs (loop7): 1 truncate cleaned up [ 355.878026][ T8200] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 355.980838][ T4544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.014002][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.016820][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.019413][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.022155][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.026627][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.029535][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.032181][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.038465][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.041122][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.047356][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.052738][ T7810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.131969][ T4544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.154039][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.158789][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.168249][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.180390][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.201337][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.232069][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.260308][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.284713][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.304345][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.329007][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.349955][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.370899][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.426718][ T7810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.501034][ T7810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.520742][ T7810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.537175][ T7810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.558009][ T7810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.798978][ T5055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.801321][ T5055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.913166][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.915578][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.047402][ T4544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.137407][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.140345][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.148542][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.156590][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.219542][ T4544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.524103][ T8305] IPv4: Oversized IP packet from 127.202.26.0 [ 361.369146][ T8318] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 361.369191][ T8318] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 362.311269][ T8343] loop3: detected capacity change from 0 to 256 [ 362.523561][ T8343] FAT-fs (loop3): Directory bread(block 64) failed [ 362.525485][ T8343] FAT-fs (loop3): Directory bread(block 65) failed [ 362.527361][ T8343] FAT-fs (loop3): Directory bread(block 66) failed [ 362.529139][ T8343] FAT-fs (loop3): Directory bread(block 67) failed [ 362.696581][ T8343] FAT-fs (loop3): Directory bread(block 68) failed [ 362.720264][ T8343] FAT-fs (loop3): Directory bread(block 69) failed [ 362.754464][ T8343] FAT-fs (loop3): Directory bread(block 70) failed [ 362.756213][ T8343] FAT-fs (loop3): Directory bread(block 71) failed [ 362.758020][ T8343] FAT-fs (loop3): Directory bread(block 72) failed [ 362.759835][ T8343] FAT-fs (loop3): Directory bread(block 73) failed [ 362.823780][ T8359] udc-core: couldn't find an available UDC or it's busy [ 362.838507][ T8359] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 363.474162][ T8379] loop4: detected capacity change from 0 to 256 [ 363.588938][ T8379] FAT-fs (loop4): bogus number of FAT sectors [ 363.671531][ T8379] FAT-fs (loop4): Can't find a valid FAT filesystem [ 367.499206][ T8423] IPv4: Oversized IP packet from 127.202.26.0 [ 369.040962][ T8431] loop3: detected capacity change from 0 to 1024 [ 369.169096][ T8445] netlink: 96 bytes leftover after parsing attributes in process `syz.7.773'. [ 369.304135][ T8431] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 369.307114][ T8431] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 369.309962][ T8431] EXT4-fs (loop3): invalid journal inode [ 369.311488][ T8431] EXT4-fs (loop3): can't get journal size [ 369.338106][ T8431] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 369.393856][ T4544] device hsr_slave_0 left promiscuous mode [ 369.477021][ T4544] device hsr_slave_1 left promiscuous mode [ 369.608220][ T4544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.951094][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.078024][ T4544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.130175][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.444659][ T4544] device bridge_slave_1 left promiscuous mode [ 370.446560][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.547633][ T4544] device bridge_slave_0 left promiscuous mode [ 370.549501][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.587060][ T8468] udc-core: couldn't find an available UDC or it's busy [ 370.607111][ T8468] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 370.798832][ T4544] device veth1_macvtap left promiscuous mode [ 370.800790][ T4544] device veth0_macvtap left promiscuous mode [ 370.803360][ T4544] device veth1_vlan left promiscuous mode [ 370.804913][ T4544] device veth0_vlan left promiscuous mode [ 373.596552][ T4544] team0 (unregistering): Port device team_slave_1 removed [ 373.630844][ T4544] team0 (unregistering): Port device team_slave_0 removed [ 373.657155][ T4544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.919482][ T8494] loop4: detected capacity change from 0 to 1024 [ 375.213579][ T8494] EXT4-fs (loop4): Test dummy encryption mode enabled [ 375.215560][ T8494] EXT4-fs (loop4): inline encryption not supported [ 376.002867][ T4544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.994418][ T8494] EXT4-fs: error -4 creating inode table initialization thread [ 377.004789][ T8494] EXT4-fs (loop4): mount failed [ 377.231065][ T4544] bond0 (unregistering): Released all slaves [ 377.809727][ T8517] mip6: mip6_rthdr_init_state: state's mode is not 2: 1 [ 381.751634][ T8584] vhci_hcd: invalid port number 254 [ 381.913591][ T8604] udc-core: couldn't find an available UDC or it's busy [ 381.915462][ T8604] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 381.934930][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.936701][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.740933][ T8679] loop3: detected capacity change from 0 to 1024 [ 387.872816][ T8679] EXT4-fs (loop3): Test dummy encryption mode enabled [ 387.874802][ T8679] EXT4-fs (loop3): inline encryption not supported [ 388.031671][ T8679] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 392.747198][ T8754] xt_hashlimit: size too large, truncated to 1048576 [ 398.280985][ T8795] loop4: detected capacity change from 0 to 512 [ 398.414780][ T8795] EXT4-fs (loop4): Test dummy encryption mode enabled [ 398.683082][ T8795] EXT4-fs error (device loop4): __ext4_iget:4893: inode #11: block 1: comm syz.4.849: invalid block [ 398.692520][ T8795] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.849: couldn't read orphan inode 11 (err -117) [ 398.700848][ T8795] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 399.733011][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 401.246018][ T8818] loop3: detected capacity change from 0 to 1024 [ 401.258787][ T8823] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 401.527809][ T8818] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.856: lblock 2 mapped to illegal pblock 2 (length 1) [ 401.608809][ T8818] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 401.611020][ T8818] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.856: lblock 0 mapped to illegal pblock 48 (length 1) [ 401.637781][ T8818] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 401.640152][ T8818] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.856: Failed to acquire dquot type 0 [ 401.649974][ T8818] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 401.672352][ T8818] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.856: mark_inode_dirty error [ 401.677130][ T8818] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 401.679914][ T8818] EXT4-fs (loop3): 1 orphan inode deleted [ 401.681377][ T8818] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,max_batch_time=0x00000000000008cc,sysvgroups,noblock_validity,,errors=continue. Quota mode: none. [ 401.703771][ T5738] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 401.709021][ T5738] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 401.711390][ T5738] EXT4-fs error (device loop3): ext4_release_dquot:6240: comm kworker/u4:19: Failed to release dquot type 0 [ 401.780764][ T8818] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.856: Invalid inode table block 1 in block_group 0 [ 401.819130][ T8818] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 401.860333][ T8818] EXT4-fs error (device loop3): ext4_quota_off:6510: inode #3: comm syz.3.856: mark_inode_dirty error [ 402.211990][ T8867] udc-core: couldn't find an available UDC or it's busy [ 402.238728][ T8867] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 405.669200][ T8940] device pim6reg1 entered promiscuous mode [ 411.701944][ T8997] loop4: detected capacity change from 0 to 256 [ 412.321823][ T8997] FAT-fs (loop4): Directory bread(block 64) failed [ 412.351330][ T8997] FAT-fs (loop4): Directory bread(block 65) failed [ 412.366710][ T8997] FAT-fs (loop4): Directory bread(block 66) failed [ 412.368555][ T8997] FAT-fs (loop4): Directory bread(block 67) failed [ 412.418020][ T8997] FAT-fs (loop4): Directory bread(block 68) failed [ 412.459804][ T8997] FAT-fs (loop4): Directory bread(block 69) failed [ 412.461627][ T8997] FAT-fs (loop4): Directory bread(block 70) failed [ 412.478657][ T9014] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 412.511742][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.514929][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.518052][ T8997] FAT-fs (loop4): Directory bread(block 71) failed [ 412.519835][ T8997] FAT-fs (loop4): Directory bread(block 72) failed [ 412.521565][ T8997] FAT-fs (loop4): Directory bread(block 73) failed [ 413.658186][ T8976] loop3: detected capacity change from 0 to 40427 [ 413.716057][ T8976] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 413.717797][ T8976] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 413.752261][ T8976] F2FS-fs (loop3): invalid crc value [ 413.864240][ T8976] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 414.404246][ T9056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.406546][ T9056] IPv6: NLM_F_CREATE should be set when creating new route [ 416.127604][ T9101] loop3: detected capacity change from 0 to 16 [ 417.616204][ T9101] erofs: (device loop3): mounted with root inode @ nid 36. [ 421.501825][ T9166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.503993][ T9166] IPv6: NLM_F_CREATE should be set when creating new route [ 422.605040][ T9201] loop4: detected capacity change from 0 to 1024 [ 422.683918][ T9201] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (47292416 > 530432). [ 422.687530][ T9201] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 422.742078][ T9201] EXT4-fs (loop4): mount failed [ 424.982706][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 425.085106][ T9243] loop4: detected capacity change from 0 to 1024 [ 425.233197][ T9243] EXT4-fs (loop4): Ignoring removed orlov option [ 425.280867][ T9243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c119, mo2=0002] [ 425.339688][ T9243] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,stripe=0x0000000000000003,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nombcache,nodiscard,debug,,errors=continue. Quota mode: none. [ 428.657510][ T9331] loop7: detected capacity change from 0 to 16 [ 431.786134][ T9336] loop4: detected capacity change from 0 to 512 [ 433.186312][ T9331] erofs: (device loop7): mounted with root inode @ nid 36. [ 437.322628][ T9375] xt_bpf: check failed: parse error [ 437.919836][ T9394] udc-core: couldn't find an available UDC or it's busy [ 437.952706][ T9394] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 440.799604][ T9468] loop7: detected capacity change from 0 to 16 [ 441.029304][ T9478] loop4: detected capacity change from 0 to 16 [ 442.033983][ T4106] Bluetooth: hci3: command 0x1003 tx timeout [ 442.035873][ T9439] Bluetooth: hci3: sending frame failed (-49) [ 442.040592][ T9468] erofs: (device loop7): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 443.007928][ T4106] Bluetooth: hci4: command 0x0409 tx timeout [ 443.030198][ T9438] chnl_net:caif_netlink_parms(): no params data found [ 443.724354][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.724537][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.821760][ T9478] erofs: (device loop4): mounted with root inode @ nid 36. [ 445.003433][ T21] Bluetooth: hci3: command 0x1001 tx timeout [ 445.005257][ T9439] Bluetooth: hci3: sending frame failed (-49) [ 445.095848][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 446.103327][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.109600][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.161150][ T9438] device bridge_slave_0 entered promiscuous mode [ 446.203994][ T9511] vhci_hcd: invalid port number 236 [ 446.205462][ T9511] vhci_hcd: invalid port number 236 [ 446.311788][ T9518] loop7: detected capacity change from 0 to 256 [ 446.326168][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.328064][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.332152][ T9438] device bridge_slave_1 entered promiscuous mode [ 446.378970][ T9438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.383923][ T9438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.415222][ T9438] team0: Port device team_slave_0 added [ 446.418903][ T9438] team0: Port device team_slave_1 added [ 446.435226][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.437044][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.444433][ T9438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.448652][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.450534][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.459012][ T9438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.606117][ T9438] device hsr_slave_0 entered promiscuous mode [ 446.717843][ T9438] device hsr_slave_1 entered promiscuous mode [ 446.761787][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.971'. [ 447.001871][ T4263] Bluetooth: hci5: Frame reassembly failed (-84) [ 447.388605][ T4075] Bluetooth: hci3: command 0x1009 tx timeout [ 447.390354][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 447.970192][ T4075] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.972851][ T4075] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.992780][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.560959][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.994833][ T9438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.040838][ T9438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.052733][ T4075] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.052933][ T5275] Bluetooth: hci5: command 0x1003 tx timeout [ 449.056538][ T144] Bluetooth: hci5: sending frame failed (-49) [ 449.084488][ T9438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.129063][ T9438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.338310][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.351126][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.354121][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.358551][ T9438] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.369587][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.372357][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.375399][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.377249][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.397814][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.401180][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.408615][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.411316][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.413247][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.418373][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.436118][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.441760][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.449075][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.452048][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.459822][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.462615][ T5275] Bluetooth: hci4: command 0x0419 tx timeout [ 449.469251][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.472064][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.477784][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.480815][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.493572][ T9438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 449.507204][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.898850][ T332] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.947312][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.949574][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.960573][ T332] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.976622][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.020350][ T332] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.060040][ T332] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.131355][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.135758][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.161688][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.165436][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.172130][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.183677][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.188640][ T9438] device veth0_vlan entered promiscuous mode [ 450.205362][ T9438] device veth1_vlan entered promiscuous mode [ 450.271233][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.276504][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.279009][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.281795][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.287739][ T9438] device veth0_macvtap entered promiscuous mode [ 450.292235][ T9438] device veth1_macvtap entered promiscuous mode [ 450.324469][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.327372][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.329963][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.335392][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.338087][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.340954][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.344131][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.346968][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.349508][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.352289][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.357518][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.363593][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.366937][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.369541][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.372415][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.378048][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.381110][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.385872][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.388794][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.391404][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.395560][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.398209][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.401087][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.404643][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.407441][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.411326][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.421764][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.429309][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 450.473394][ T9438] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.475728][ T9438] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.478000][ T9438] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.481643][ T9438] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.605705][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.608163][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.612948][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 450.767772][ T9618] loop3: detected capacity change from 0 to 16 [ 451.145026][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 451.148752][ T4026] Bluetooth: hci5: sending frame failed (-49) [ 451.214937][ T9618] erofs: (device loop3): mounted with root inode @ nid 36. [ 452.012705][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.367932][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.370455][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.389616][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.928026][ T5275] Bluetooth: hci5: command 0x1009 tx timeout [ 456.290217][ T9685] udc-core: couldn't find an available UDC or it's busy [ 456.292136][ T9685] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 458.561249][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 459.178482][ T9733] loop5: detected capacity change from 0 to 16 [ 460.513176][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.519219][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 460.544554][ T9733] erofs: (device loop5): mounted with root inode @ nid 36. [ 461.513446][ T4075] Bluetooth: hci2: command 0x0406 tx timeout [ 461.732766][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 461.735032][ T21] usb usb9-port6: attempt power cycle [ 462.250455][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 462.557489][ T21] usb usb9-port6: Cannot enable. Maybe the USB cable is bad? [ 462.559818][ T21] usb usb9-port6: unable to enumerate USB device [ 462.571221][ T332] device hsr_slave_0 left promiscuous mode [ 462.614325][ T332] device hsr_slave_1 left promiscuous mode [ 462.821032][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.823220][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.827240][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.829225][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.855689][ T332] device bridge_slave_1 left promiscuous mode [ 462.858334][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.904142][ T332] device bridge_slave_0 left promiscuous mode [ 462.907352][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.736220][ T332] device veth1_macvtap left promiscuous mode [ 463.794419][ T332] device veth0_macvtap left promiscuous mode [ 463.796213][ T332] device veth1_vlan left promiscuous mode [ 463.798439][ T332] device veth0_vlan left promiscuous mode [ 463.949660][ T9794] loop4: detected capacity change from 0 to 512 [ 464.055331][ T9794] EXT4-fs (loop4): orphan cleanup on readonly fs [ 464.057306][ T9794] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 464.101652][ T9794] EXT4-fs (loop4): 1 truncate cleaned up [ 464.135233][ T9794] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 464.374112][ T332] team0 (unregistering): Port device team_slave_1 removed [ 464.403887][ T332] team0 (unregistering): Port device team_slave_0 removed [ 464.435781][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.482805][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.746784][ T332] bond0 (unregistering): Released all slaves [ 465.098048][ T9822] netlink: 'syz.4.1013': attribute type 12 has an invalid length. [ 465.133901][ T9822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1013'. [ 465.272546][ T9822] loop4: detected capacity change from 0 to 1024 [ 465.793490][ T9822] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 465.880570][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1015'. [ 467.822356][ T9857] udc-core: couldn't find an available UDC or it's busy [ 467.840570][ T9857] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 468.440091][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1025'. [ 473.214057][ T9966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.652750][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.179195][T10026] loop5: detected capacity change from 0 to 1024 [ 478.313134][T10026] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 480.345714][T10060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1054'. [ 481.668666][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1069'. [ 481.672966][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1069'. [ 481.686150][T10129] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1070'. [ 484.493830][T10194] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 484.496013][T10194] netlink: 'syz.4.1083': attribute type 12 has an invalid length. [ 484.509256][T10194] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1083'. [ 484.550801][T10193] syz.1.1082 uses obsolete (PF_INET,SOCK_PACKET) [ 485.629897][T10207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1087'. [ 490.320458][T10403] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 490.442406][T10357] chnl_net:caif_netlink_parms(): no params data found [ 490.599112][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.603456][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.608394][T10357] device bridge_slave_0 entered promiscuous mode [ 490.650199][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.652136][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.662282][T10357] device bridge_slave_1 entered promiscuous mode [ 490.785306][T10455] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 490.798369][T10357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.818631][T10357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.891272][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1141'. [ 490.930870][T10357] team0: Port device team_slave_0 added [ 490.996219][T10357] team0: Port device team_slave_1 added [ 491.143545][T10357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.145654][T10357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.177942][T10486] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 491.184161][T10357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.226248][T10357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.228221][T10357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.270966][T10357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.393963][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 491.569174][T10357] device hsr_slave_0 entered promiscuous mode [ 491.612972][ T5275] Bluetooth: hci3: command 0x0409 tx timeout [ 491.615250][T10357] device hsr_slave_1 entered promiscuous mode [ 491.654993][T10357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.657682][T10357] Cannot create hsr debugfs directory [ 491.660139][T10511] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1156'. [ 492.257045][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 492.522956][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 492.742098][T10608] netlink: 'syz.1.1178': attribute type 2 has an invalid length. [ 492.779703][T10608] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 493.596856][T10357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.662871][T10357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.692582][ T1533] Bluetooth: hci3: command 0x041b tx timeout [ 493.712030][T10680] netlink: 'syz.7.1193': attribute type 1 has an invalid length. [ 493.714724][T10680] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1193'. [ 493.719487][T10357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.774318][T10357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 494.131919][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1201'. [ 494.298572][T10357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.430773][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.438800][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.510830][T10357] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.344440][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.355712][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.373563][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.375367][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.377653][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.386625][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.394580][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.396471][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.398744][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.414553][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 495.417506][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 495.423645][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.441064][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 495.444595][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.447262][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 495.449820][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.452900][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 495.459078][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.472654][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 495.476488][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 495.479766][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.774281][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 495.838402][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.840620][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.913412][T10357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.921569][T10767] sctp: [Deprecated]: syz.5.1211 (pid 10767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.921569][T10767] Use struct sctp_sack_info instead [ 496.071213][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 496.081262][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.093921][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 496.305127][T10357] device veth0_vlan entered promiscuous mode [ 496.309473][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.312360][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.343543][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.355392][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.494147][T10357] device veth1_vlan entered promiscuous mode [ 496.754684][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.757675][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.769605][T10357] device veth0_macvtap entered promiscuous mode [ 496.790353][T10357] device veth1_macvtap entered promiscuous mode [ 496.807512][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.810258][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.817656][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.820466][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.855454][T10817] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 496.864631][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.881646][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.889961][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.904379][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.912458][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.929581][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.945054][T10357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.976423][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.979144][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.981729][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.987802][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.995587][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 497.021632][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.025527][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.036627][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.049858][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.055674][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.058425][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.061011][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.070824][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.093197][T10357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.099456][T10357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.115096][T10357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.127661][T10834] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 497.137721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 497.140524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.171584][T10834] netlink: 'syz.1.1224': attribute type 3 has an invalid length. [ 497.184860][T10357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.188560][T10834] netlink: 'syz.1.1224': attribute type 4 has an invalid length. [ 497.197423][T10834] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1224'. [ 497.207060][T10357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.209708][T10357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.217838][T10357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.397638][T10851] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 497.399842][T10851] netlink: 'syz.4.1237': attribute type 3 has an invalid length. [ 497.402029][T10851] netlink: 'syz.4.1237': attribute type 4 has an invalid length. [ 497.414581][T10851] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1237'. [ 497.437655][ T4119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.451209][ T4119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.477838][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 497.528348][ T1714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.530699][ T1714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.855110][ T4161] Bluetooth: hci3: command 0x0419 tx timeout [ 497.951073][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.368120][T10865] bridge0: port 3(veth0_to_bridge) entered blocking state [ 498.370199][T10865] bridge0: port 3(veth0_to_bridge) entered disabled state [ 498.377549][T10865] device veth0_to_bridge entered promiscuous mode [ 498.379475][T10865] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.407883][T10865] bridge0: port 3(veth0_to_bridge) entered blocking state [ 498.409871][T10865] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 500.773967][T10960] device bond0 entered promiscuous mode [ 500.775506][T10960] device bond_slave_0 entered promiscuous mode [ 500.777254][T10960] device bond_slave_1 entered promiscuous mode [ 500.833923][T10960] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.925345][T10960] device bond0 left promiscuous mode [ 500.926902][T10960] device bond_slave_0 left promiscuous mode [ 500.928589][T10960] device bond_slave_1 left promiscuous mode [ 500.952024][T10963] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 502.409654][T11002] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 502.607011][ T5194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.670553][ T5194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.731461][ T5194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.824846][ T5194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.193442][T11085] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 504.227311][T11085] [ 504.227949][T11085] ====================================================== [ 504.229787][T11085] WARNING: possible circular locking dependency detected [ 504.231655][T11085] 5.15.185-syzkaller #0 Not tainted [ 504.232980][T11085] ------------------------------------------------------ [ 504.234840][T11085] syz.1.1285/11085 is trying to acquire lock: [ 504.236451][T11085] ffff0000e8d84120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x20c/0x590 [ 504.238959][T11085] [ 504.238959][T11085] but task is already holding lock: [ 504.240943][T11085] ffff8000162886e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 504.243064][T11085] [ 504.243064][T11085] which lock already depends on the new lock. [ 504.243064][T11085] [ 504.245782][T11085] [ 504.245782][T11085] the existing dependency chain (in reverse order) is: [ 504.248246][T11085] [ 504.248246][T11085] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 504.250191][T11085] __mutex_lock_common+0x194/0x1edc [ 504.251805][T11085] mutex_lock_nested+0xac/0x11c [ 504.253244][T11085] rtnl_lock+0x20/0x2c [ 504.254518][T11085] ax25_setsockopt+0x870/0xa5c [ 504.255958][T11085] __sys_setsockopt+0x2f8/0x4b0 [ 504.257399][T11085] __arm64_sys_setsockopt+0xb8/0xd4 [ 504.258951][T11085] invoke_syscall+0x98/0x2b8 [ 504.260326][T11085] el0_svc_common+0x138/0x258 [ 504.261755][T11085] do_el0_svc+0x58/0x14c [ 504.263080][T11085] el0_svc+0x78/0x1e0 [ 504.264268][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.265820][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.267150][T11085] [ 504.267150][T11085] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 504.269317][T11085] __lock_acquire+0x2928/0x651c [ 504.270785][T11085] lock_acquire+0x1f4/0x620 [ 504.272138][T11085] lock_sock_nested+0xd8/0x1d4 [ 504.273558][T11085] ax25_device_event+0x20c/0x590 [ 504.275165][T11085] raw_notifier_call_chain+0xd4/0x164 [ 504.276727][T11085] __dev_notify_flags+0x250/0x46c [ 504.278241][T11085] dev_change_flags+0xc8/0x154 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 504.279627][T11085] dev_ifsioc+0x504/0xef4 [ 504.280932][T11085] dev_ioctl+0x4d0/0xc94 [ 504.282254][T11085] sock_do_ioctl+0x18c/0x240 [ 504.283627][T11085] sock_ioctl+0x5c8/0x87c [ 504.284939][T11085] __arm64_sys_ioctl+0x14c/0x1c8 [ 504.286421][T11085] invoke_syscall+0x98/0x2b8 [ 504.287790][T11085] el0_svc_common+0x138/0x258 [ 504.289142][T11085] do_el0_svc+0x58/0x14c [ 504.290412][T11085] el0_svc+0x78/0x1e0 [ 504.291584][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.293063][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.294460][T11085] [ 504.294460][T11085] other info that might help us debug this: [ 504.294460][T11085] [ 504.297152][T11085] Possible unsafe locking scenario: [ 504.297152][T11085] [ 504.299103][T11085] CPU0 CPU1 [ 504.300533][T11085] ---- ---- [ 504.302007][T11085] lock(rtnl_mutex); [ 504.303069][T11085] lock(sk_lock-AF_AX25); [ 504.304861][T11085] lock(rtnl_mutex); [ 504.306574][T11085] lock(sk_lock-AF_AX25); [ 504.307724][T11085] [ 504.307724][T11085] *** DEADLOCK *** [ 504.307724][T11085] [ 504.309895][T11085] 1 lock held by syz.1.1285/11085: [ 504.311242][T11085] #0: ffff8000162886e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 504.313526][T11085] [ 504.313526][T11085] stack backtrace: [ 504.315057][T11085] CPU: 1 PID: 11085 Comm: syz.1.1285 Not tainted 5.15.185-syzkaller #0 [ 504.317243][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.319943][T11085] Call trace: [ 504.320785][T11085] dump_backtrace+0x0/0x43c [ 504.321977][T11085] show_stack+0x2c/0x3c [ 504.323083][T11085] __dump_stack+0x30/0x40 [ 504.324244][T11085] dump_stack_lvl+0xf8/0x160 [ 504.325399][T11085] dump_stack+0x1c/0x5c [ 504.326482][T11085] print_circular_bug+0x148/0x1b0 [ 504.327808][T11085] check_noncircular+0x240/0x2d4 [ 504.329111][T11085] __lock_acquire+0x2928/0x651c [ 504.330409][T11085] lock_acquire+0x1f4/0x620 [ 504.331587][T11085] lock_sock_nested+0xd8/0x1d4 [ 504.332831][T11085] ax25_device_event+0x20c/0x590 [ 504.334143][T11085] raw_notifier_call_chain+0xd4/0x164 [ 504.335613][T11085] __dev_notify_flags+0x250/0x46c [ 504.336920][T11085] dev_change_flags+0xc8/0x154 [ 504.338218][T11085] dev_ifsioc+0x504/0xef4 [ 504.339368][T11085] dev_ioctl+0x4d0/0xc94 [ 504.340499][T11085] sock_do_ioctl+0x18c/0x240 [ 504.341697][T11085] sock_ioctl+0x5c8/0x87c [ 504.342856][T11085] __arm64_sys_ioctl+0x14c/0x1c8 [ 504.344180][T11085] invoke_syscall+0x98/0x2b8 [ 504.345412][T11085] el0_svc_common+0x138/0x258 [ 504.346626][T11085] do_el0_svc+0x58/0x14c [ 504.347761][T11085] el0_svc+0x78/0x1e0 [ 504.348796][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.350114][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.384835][T11085] ================================================================== [ 504.387089][T11085] BUG: KASAN: use-after-free in ax25_dev_device_down+0x354/0x67c [ 504.389158][T11085] Write of size 4 at addr ffff0000f513eab8 by task syz.1.1285/11085 [ 504.391277][T11085] [ 504.391836][T11085] CPU: 0 PID: 11085 Comm: syz.1.1285 Not tainted 5.15.185-syzkaller #0 [ 504.394041][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.396745][T11085] Call trace: [ 504.397619][T11085] dump_backtrace+0x0/0x43c [ 504.398842][T11085] show_stack+0x2c/0x3c [ 504.399994][T11085] __dump_stack+0x30/0x40 [ 504.401132][T11085] dump_stack_lvl+0xf8/0x160 [ 504.402340][T11085] print_address_description+0x78/0x30c [ 504.403788][T11085] kasan_report+0xec/0x15c [ 504.404958][T11085] kasan_check_range+0x270/0x2b0 [ 504.406279][T11085] __kasan_check_write+0x44/0x54 [ 504.407611][T11085] ax25_dev_device_down+0x354/0x67c [ 504.409011][T11085] ax25_device_event+0x538/0x590 [ 504.410355][T11085] raw_notifier_call_chain+0xd4/0x164 [ 504.411772][T11085] __dev_notify_flags+0x250/0x46c [ 504.413092][T11085] dev_change_flags+0xc8/0x154 [ 504.414366][T11085] dev_ifsioc+0x504/0xef4 [ 504.415492][T11085] dev_ioctl+0x4d0/0xc94 [ 504.416594][T11085] sock_do_ioctl+0x18c/0x240 [ 504.417783][T11085] sock_ioctl+0x5c8/0x87c [ 504.418953][T11085] __arm64_sys_ioctl+0x14c/0x1c8 [ 504.420283][T11085] invoke_syscall+0x98/0x2b8 [ 504.421475][T11085] el0_svc_common+0x138/0x258 [ 504.422735][T11085] do_el0_svc+0x58/0x14c [ 504.423834][T11085] el0_svc+0x78/0x1e0 [ 504.424881][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.426250][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.427416][T11085] [ 504.427991][T11085] Allocated by task 11085: [ 504.429142][T11085] __kasan_kmalloc+0xb0/0xf0 [ 504.430395][T11085] kmem_cache_alloc_trace+0x274/0x3fc [ 504.431810][T11085] ax25_dev_device_up+0x5c/0x540 [ 504.433083][T11085] ax25_device_event+0x504/0x590 [ 504.434391][T11085] raw_notifier_call_chain+0xd4/0x164 [ 504.435821][T11085] __dev_notify_flags+0x250/0x46c [ 504.437170][T11085] dev_change_flags+0xc8/0x154 [ 504.438454][T11085] dev_ifsioc+0x504/0xef4 [ 504.439613][T11085] dev_ioctl+0x4d0/0xc94 [ 504.440778][T11085] sock_do_ioctl+0x18c/0x240 [ 504.441994][T11085] sock_ioctl+0x5c8/0x87c [ 504.443125][T11085] __arm64_sys_ioctl+0x14c/0x1c8 [ 504.444463][T11085] invoke_syscall+0x98/0x2b8 [ 504.445643][T11085] el0_svc_common+0x138/0x258 [ 504.446942][T11085] do_el0_svc+0x58/0x14c [ 504.448067][T11085] el0_svc+0x78/0x1e0 [ 504.449136][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.450505][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.451706][T11085] [ 504.452320][T11085] Freed by task 11085: [ 504.453403][T11085] kasan_set_track+0x4c/0x84 [ 504.454625][T11085] kasan_set_free_info+0x28/0x4c [ 504.455946][T11085] ____kasan_slab_free+0x118/0x164 [ 504.457403][T11085] __kasan_slab_free+0x18/0x28 [ 504.458649][T11085] slab_free_freelist_hook+0x128/0x1e8 [ 504.460122][T11085] kfree+0x170/0x40c [ 504.461141][T11085] ax25_dev_device_down+0x1ac/0x67c [ 504.462536][T11085] ax25_device_event+0x538/0x590 [ 504.463842][T11085] raw_notifier_call_chain+0xd4/0x164 [ 504.465428][T11085] __dev_notify_flags+0x250/0x46c [ 504.466809][T11085] dev_change_flags+0xc8/0x154 [ 504.468194][T11085] dev_ifsioc+0x504/0xef4 [ 504.469510][T11085] dev_ioctl+0x4d0/0xc94 [ 504.470685][T11085] sock_do_ioctl+0x18c/0x240 [ 504.471920][T11085] sock_ioctl+0x5c8/0x87c [ 504.473135][T11085] __arm64_sys_ioctl+0x14c/0x1c8 [ 504.474535][T11085] invoke_syscall+0x98/0x2b8 [ 504.475790][T11085] el0_svc_common+0x138/0x258 [ 504.477056][T11085] do_el0_svc+0x58/0x14c [ 504.478187][T11085] el0_svc+0x78/0x1e0 [ 504.479257][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.480721][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.481989][T11085] [ 504.482616][T11085] Last potentially related work creation: [ 504.484314][T11085] kasan_save_stack+0x38/0x68 [ 504.485613][T11085] kasan_record_aux_stack+0xcc/0x114 [ 504.487092][T11085] call_rcu+0x110/0x8f0 [ 504.488205][T11085] neigh_parms_release+0x1ac/0x224 [ 504.489594][T11085] inetdev_event+0x5e0/0x127c [ 504.490863][T11085] raw_notifier_call_chain+0xd4/0x164 [ 504.492364][T11085] unregister_netdevice_many+0xe10/0x17d0 [ 504.493930][T11085] unregister_netdevice_queue+0x2ac/0x2f8 [ 504.495531][T11085] __tun_detach+0xb14/0x126c [ 504.496784][T11085] tun_chr_close+0x118/0x20c [ 504.498019][T11085] __fput+0x1c0/0x7f8 [ 504.499083][T11085] ____fput+0x20/0x30 [ 504.500183][T11085] task_work_run+0x12c/0x1e0 [ 504.501441][T11085] do_notify_resume+0x24b4/0x3128 [ 504.502786][T11085] el0_svc+0xf0/0x1e0 [ 504.503860][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.505252][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.506449][T11085] [ 504.507069][T11085] The buggy address belongs to the object at ffff0000f513ea00 [ 504.507069][T11085] which belongs to the cache kmalloc-256 of size 256 [ 504.510899][T11085] The buggy address is located 184 bytes inside of [ 504.510899][T11085] 256-byte region [ffff0000f513ea00, ffff0000f513eb00) [ 504.514495][T11085] The buggy address belongs to the page: [ 504.516002][T11085] page:00000000ad0ba33e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13513e [ 504.518876][T11085] head:00000000ad0ba33e order:1 compound_mapcount:0 [ 504.520655][T11085] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 504.522837][T11085] raw: 05ffc00000010200 fffffc0003405480 0000000200000002 ffff0000c0002480 [ 504.525162][T11085] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 504.527449][T11085] page dumped because: kasan: bad access detected [ 504.529196][T11085] [ 504.529823][T11085] Memory state around the buggy address: [ 504.531403][T11085] ffff0000f513e980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 504.533631][T11085] ffff0000f513ea00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.535864][T11085] >ffff0000f513ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.538058][T11085] ^ [ 504.539633][T11085] ffff0000f513eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 504.541864][T11085] ffff0000f513eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 504.544052][T11085] ================================================================== [ 504.566835][T11085] ------------[ cut here ]------------ [ 504.568342][T11085] refcount_t: underflow; use-after-free. [ 504.570118][T11085] WARNING: CPU: 1 PID: 11085 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 504.572663][T11085] Modules linked in: [ 504.573705][T11085] CPU: 1 PID: 11085 Comm: syz.1.1285 Tainted: G B 5.15.185-syzkaller #0 [ 504.576262][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.578979][T11085] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 504.581056][T11085] pc : refcount_warn_saturate+0x154/0x1f8 [ 504.582589][T11085] lr : refcount_warn_saturate+0x154/0x1f8 [ 504.584077][T11085] sp : ffff80001f5e7690 [ 504.585150][T11085] x29: ffff80001f5e7690 x28: ffff8000163c1020 x27: 1fffe0001ea27d42 [ 504.587276][T11085] x26: ffff80001b1d0000 x25: 1fffe0001a2c086d x24: dfff800000000000 [ 504.589476][T11085] x23: 0000000000000001 x22: ffff0000f513eab8 x21: 0000000000000007 [ 504.591560][T11085] x20: ffff0000f513eab8 x19: ffff80001659e000 x18: 0000000000000001 [ 504.593705][T11085] x17: 0000000000000002 x16: ffff8000111a97c4 x15: 00000000ffffffff [ 504.595826][T11085] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000080000 [ 504.597943][T11085] x11: 000000000005436c x10: ffff80002606b000 x9 : 2c565d6088d92000 [ 504.600110][T11085] x8 : 2c565d6088d92000 x7 : 0000000000000001 x6 : 0000000000000001 [ 504.602267][T11085] x5 : ffff80001f5e6f78 x4 : ffff80001423f280 x3 : ffff800008503958 [ 504.604488][T11085] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 504.606683][T11085] Call trace: [ 504.607540][T11085] refcount_warn_saturate+0x154/0x1f8 [ 504.608947][T11085] ax25_dev_device_down+0x528/0x67c [ 504.610344][T11085] ax25_device_event+0x538/0x590 [ 504.611666][T11085] raw_notifier_call_chain+0xd4/0x164 [ 504.613094][T11085] __dev_notify_flags+0x250/0x46c [ 504.614457][T11085] dev_change_flags+0xc8/0x154 [ 504.615744][T11085] dev_ifsioc+0x504/0xef4 [ 504.616881][T11085] dev_ioctl+0x4d0/0xc94 [ 504.618021][T11085] sock_do_ioctl+0x18c/0x240 [ 504.619246][T11085] sock_ioctl+0x5c8/0x87c [ 504.620442][T11085] __arm64_sys_ioctl+0x14c/0x1c8 [ 504.621783][T11085] invoke_syscall+0x98/0x2b8 [ 504.623016][T11085] el0_svc_common+0x138/0x258 [ 504.624296][T11085] do_el0_svc+0x58/0x14c [ 504.625441][T11085] el0_svc+0x78/0x1e0 [ 504.626487][T11085] el0t_64_sync_handler+0xcc/0xe4 [ 504.627819][T11085] el0t_64_sync+0x1a0/0x1a4 [ 504.629002][T11085] irq event stamp: 2623 [ 504.630079][T11085] hardirqs last enabled at (2623): [] __local_bh_enable_ip+0x1f8/0x380 [ 504.632736][T11085] hardirqs last disabled at (2621): [] __local_bh_enable_ip+0x178/0x380 [ 504.635387][T11085] softirqs last enabled at (2622): [] ax25_device_event+0x200/0x590 [ 504.637922][T11085] softirqs last disabled at (2620): [] ax25_device_event+0x100/0x590 [ 504.640590][T11085] ---[ end trace d465600876f7713d ]--- [ 504.824705][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.826417][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.146344][ T5194] device hsr_slave_0 left promiscuous mode [ 506.182769][ T5194] device hsr_slave_1 left promiscuous mode [ 506.252861][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.254980][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.258169][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.260192][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.263044][ T5194] device bridge_slave_1 left promiscuous mode [ 506.264745][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.313462][ T5194] device bridge_slave_0 left promiscuous mode [ 506.315208][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.452801][ T5194] device veth1_macvtap left promiscuous mode [ 506.454607][ T5194] device veth0_macvtap left promiscuous mode [ 506.456271][ T5194] device veth1_vlan left promiscuous mode [ 506.457816][ T5194] device veth0_vlan left promiscuous mode [ 506.617142][ T5194] team0 (unregistering): Port device team_slave_1 removed [ 506.624398][ T5194] team0 (unregistering): Port device team_slave_0 removed [ 506.630972][ T5194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.680875][ T5194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.822265][ T5194] bond0 (unregistering): Released all slaves [ 508.013073][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.133450][ T5194] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.169075][ T5194] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.233442][ T5194] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.287737][ T5194] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.471569][ T5194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.508407][ T5194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.570987][ T5194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.627420][ T5194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.775218][ T5194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.821733][ T5194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.879317][ T5194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.944147][ T5194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.789416][ T5194] device hsr_slave_0 left promiscuous mode [ 513.817123][ T5194] device hsr_slave_1 left promiscuous mode [ 513.902683][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.904783][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.907184][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.909164][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.911455][ T5194] device bridge_slave_1 left promiscuous mode [ 513.913579][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.943476][ T5194] device bridge_slave_0 left promiscuous mode [ 513.945238][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.985800][ T5194] device hsr_slave_0 left promiscuous mode [ 514.022850][ T5194] device hsr_slave_1 left promiscuous mode [ 514.122703][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.124793][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.128087][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.130149][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.132995][ T5194] device bridge_slave_1 left promiscuous mode [ 514.134732][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.193556][ T5194] device bridge_slave_0 left promiscuous mode [ 514.195397][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state