last executing test programs: 40.744381848s ago: executing program 3 (id=184): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x44000000) 30.106975396s ago: executing program 3 (id=199): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 19.601937859s ago: executing program 3 (id=214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000dfffffffff0a"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 11.660635252s ago: executing program 4 (id=228): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) 11.363003516s ago: executing program 4 (id=230): sched_setscheduler(0x0, 0x1, 0x0) iopl(0x3) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b78, 0x400, 0x1, 0x237}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0xd, 0x62, 0x100, 0x4bd, 0xb, 0x2, 0x800}}]}}]}, 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r3, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000b00)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x401, 0xf173, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xc4, 0x1, 0xb, [{@broadcast, 0x2}]}, @timestamp={0x44, 0x4, 0x1d, 0x0, 0x5}, @end, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) preadv(r5, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}, {0x0}], 0x2, 0x10007, 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="5b1b629b801c16fedeca7f224be19f01cf09e9bdd090c1aee0dde6cbe41a9a6a0c3b0260e418318efb2eca489323aa4f43c4919af7e4a2e82dc1ab8ced1801b2d09e3191612b59570286d5e7e0983aeecb21fdf03d153cf342746b0caae44c0613267d9bd372c3d42a5f3868699d3809750ff0f8071b4aa942645dfa27272205fa82e50416a8d3e32bb3f57263771952a2f64f2974767ca8aee148b76ffa7d7091e970f5ea3a473d7163e851b54a41bbdc6fd45ca17bf83ad48aee141d8f59cb6bec557616f30c0264f3dd173c49bc339a45e82cd6019bcb3ef9b363d0cf"], 0x53) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r9, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 9.173616362s ago: executing program 0 (id=233): socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x14002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @control={0x9, 0x0, 0xb}}, {0x0, 0x0, 0x0, 0x4, @tick=0x5, {0x8, 0x4}, {}, @result={0x5, 0x4}}], 0x38) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7.947265994s ago: executing program 2 (id=235): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 7.938997724s ago: executing program 1 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioprio_set$pid(0x2, 0x0, 0x6000) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) close(r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4080}, 0x4008000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) socket$inet6(0xa, 0x80002, 0x88) sendfile(r3, r3, 0x0, 0x200000) 7.750287867s ago: executing program 0 (id=237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 7.639195185s ago: executing program 4 (id=238): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r3, &(0x7f0000000c00)="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", 0x13a) 6.830203714s ago: executing program 1 (id=239): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x1}}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r6, 0x731, 0x7, 0x25dfdbff, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2}, 0x8800) 6.56334042s ago: executing program 2 (id=240): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.551776959s ago: executing program 3 (id=241): close(0xffffffffffffffff) socket(0x1e, 0x4, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20000276, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x3}, {0x6}]}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000d06010100000000008c2f17c34b1a0486000140070000000eff03006269746d61703a6970030000006a9752ad3ebdef57cd55e45ad6ce9599e2fc0e6433bb8962e1cef69565f8f28811a30c2a93cf43d9463ab5fcde"], 0x2c}}, 0x0) 5.860951331s ago: executing program 0 (id=242): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x1}}) 5.771429659s ago: executing program 4 (id=243): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, 0x0, 0x0) sendmsg$can_raw(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 5.770074257s ago: executing program 1 (id=244): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r2, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004c80)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x8040) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000007c0)={0x52}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 5.435488433s ago: executing program 2 (id=245): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x44000000) 4.717508645s ago: executing program 0 (id=246): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)={0x3, 'ip6gre0\x00', {0x9}, 0x7}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) ftruncate(0xffffffffffffffff, 0x3f) 4.643545552s ago: executing program 3 (id=247): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x101) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 4.425720406s ago: executing program 1 (id=248): sched_setscheduler(0x0, 0x1, 0x0) iopl(0x3) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b78, 0x400, 0x1, 0x237}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0xd, 0x62, 0x100, 0x4bd, 0xb, 0x2, 0x800}}]}}]}, 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r3, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000b00)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x401, 0xf173, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xc4, 0x1, 0xb, [{@broadcast, 0x2}]}, @timestamp={0x44, 0x4, 0x1d, 0x0, 0x5}, @end, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) preadv(r5, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}, {0x0}], 0x2, 0x10007, 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="5b1b629b801c16fedeca7f224be19f01cf09e9bdd090c1aee0dde6cbe41a9a6a0c3b0260e418318efb2eca489323aa4f43c4919af7e4a2e82dc1ab8ced1801b2d09e3191612b59570286d5e7e0983aeecb21fdf03d153cf342746b0caae44c0613267d9bd372c3d42a5f3868699d3809750ff0f8071b4aa942645dfa27272205fa82e50416a8d3e32bb3f57263771952a2f64f2974767ca8aee148b76ffa7d7091e970f5ea3a473d7163e851b54a41bbdc6fd45ca17bf83ad48aee141d8f59cb6bec557616f30c0264f3dd173c49bc339a45e82cd6019bcb3ef9b363d0cf"], 0x53) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r9, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 3.471292086s ago: executing program 0 (id=249): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x8, @raw_data="0629667915866cb269de1d663df8fcbabe0575dfc9fca6f885cdc2c9da7be6af2903b79147e65af993e23feeedf49fad0ed19f47b860670ec2a3f393e8540398638aa066eefa33bb1e5fa234edb8e9445dd7f92b2fd47a216970aa8569a908e392941267d9ac5035187d0ccf95a5a8c64d44f5d64251ccdae1da316102011290e021b3f2afae16f20ded833b0a1068782bd245a7867d812a9230cf2ca767aa02f4e661e95b60e9d51a87a2d27ec18865d9f5acee889f2f4b67c7ea0338bcc4814ad254890b8eba83"}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in=@broadcast, 0x4e24, 0x5, 0x4e23, 0x50, 0x8, 0x20, 0x0, 0x2}, {0x800, 0x6, 0x1fc, 0x4, 0x6, 0xe, 0x100000001, 0x7}, {0x7fffffff, 0x3, 0x6020001, 0x1000}, 0x5, 0x6e6bb0, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d6, 0x33}, 0xa, @in6=@remote, 0x3507, 0x4, 0x0, 0x5, 0x85, 0x6, 0xc26}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000006ffc)=0x4000000000000200, 0x4) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe030001000000", 0x1b) 3.098961174s ago: executing program 2 (id=250): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 2.646678702s ago: executing program 3 (id=251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000dfffffffff0a"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.433247969s ago: executing program 1 (id=252): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}}, 0x0) 1.668988278s ago: executing program 0 (id=253): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r3, &(0x7f0000000c00)="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", 0x13a) 1.66353256s ago: executing program 4 (id=254): modify_ldt$write2(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x8007, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.634572288s ago: executing program 2 (id=255): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 748.20774ms ago: executing program 2 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) 105.722247ms ago: executing program 4 (id=257): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, 0x0, 0x0) sendmsg$can_raw(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 0s ago: executing program 1 (id=258): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r2, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004c80)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x8040) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000007c0)={0x52}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 83.152154][ T5820] cgroup: Unknown subsys name 'net' [ 83.260990][ T5820] cgroup: Unknown subsys name 'cpuset' [ 83.269947][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.932042][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.637381][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.647352][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.656919][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.668251][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.699337][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.724716][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.757044][ T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.765063][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.772898][ T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.793861][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.815458][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.837647][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.846590][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.856109][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.863579][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.887718][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.916924][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.920410][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.932578][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.947027][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.957292][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.965480][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.973378][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.981365][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.988969][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.395004][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.615746][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.682334][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.690263][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.699809][ T5830] bridge_slave_0: entered allmulticast mode [ 88.707895][ T5830] bridge_slave_0: entered promiscuous mode [ 88.724407][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.731625][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.739019][ T5830] bridge_slave_1: entered allmulticast mode [ 88.746175][ T5830] bridge_slave_1: entered promiscuous mode [ 88.888648][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.919966][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.936341][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.997881][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.091209][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 89.120059][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.128265][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.135592][ T5843] bridge_slave_0: entered allmulticast mode [ 89.143399][ T5843] bridge_slave_0: entered promiscuous mode [ 89.175059][ T5830] team0: Port device team_slave_0 added [ 89.184215][ T5830] team0: Port device team_slave_1 added [ 89.221373][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.228715][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.235855][ T5843] bridge_slave_1: entered allmulticast mode [ 89.243528][ T5843] bridge_slave_1: entered promiscuous mode [ 89.292425][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.300830][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.308754][ T5835] bridge_slave_0: entered allmulticast mode [ 89.315938][ T5835] bridge_slave_0: entered promiscuous mode [ 89.371095][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.379112][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.386270][ T5835] bridge_slave_1: entered allmulticast mode [ 89.393786][ T5835] bridge_slave_1: entered promiscuous mode [ 89.428418][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.435551][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.442840][ T5834] bridge_slave_0: entered allmulticast mode [ 89.450072][ T5834] bridge_slave_0: entered promiscuous mode [ 89.459181][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.466169][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.492171][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.547842][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.557692][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.564854][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.574747][ T5834] bridge_slave_1: entered allmulticast mode [ 89.582749][ T5834] bridge_slave_1: entered promiscuous mode [ 89.604205][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.611257][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.637547][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.687775][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.699714][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.741639][ T5830] hsr_slave_0: entered promiscuous mode [ 89.748125][ T5830] hsr_slave_1: entered promiscuous mode [ 89.770663][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.777920][ T5838] Bluetooth: hci0: command tx timeout [ 89.811538][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.825717][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.835664][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.843129][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.850879][ T5845] bridge_slave_0: entered allmulticast mode [ 89.858455][ T5845] bridge_slave_0: entered promiscuous mode [ 89.920199][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.928313][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.935481][ T5845] bridge_slave_1: entered allmulticast mode [ 89.943394][ T5845] bridge_slave_1: entered promiscuous mode [ 89.950146][ T5838] Bluetooth: hci1: command tx timeout [ 89.970769][ T5835] team0: Port device team_slave_0 added [ 89.980616][ T5835] team0: Port device team_slave_1 added [ 89.989159][ T5843] team0: Port device team_slave_0 added [ 90.020787][ T5846] Bluetooth: hci3: command tx timeout [ 90.026602][ T5838] Bluetooth: hci2: command tx timeout [ 90.051022][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.076304][ T5843] team0: Port device team_slave_1 added [ 90.085758][ T5834] team0: Port device team_slave_0 added [ 90.097005][ T5838] Bluetooth: hci4: command tx timeout [ 90.109262][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.132963][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.140374][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.166487][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.193971][ T5834] team0: Port device team_slave_1 added [ 90.220454][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.230150][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.257111][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.335892][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.342993][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.369685][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.383157][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.390399][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.417083][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.434874][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.442166][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.468466][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.482425][ T5845] team0: Port device team_slave_0 added [ 90.491707][ T5845] team0: Port device team_slave_1 added [ 90.523369][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.530555][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.557568][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.641785][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.649191][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.675290][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.689147][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.696134][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.722164][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.745762][ T5835] hsr_slave_0: entered promiscuous mode [ 90.752604][ T5835] hsr_slave_1: entered promiscuous mode [ 90.759562][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.767384][ T5835] Cannot create hsr debugfs directory [ 90.849524][ T5843] hsr_slave_0: entered promiscuous mode [ 90.856261][ T5843] hsr_slave_1: entered promiscuous mode [ 90.864368][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.872213][ T5843] Cannot create hsr debugfs directory [ 90.896427][ T5834] hsr_slave_0: entered promiscuous mode [ 90.905336][ T5834] hsr_slave_1: entered promiscuous mode [ 90.911623][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.921593][ T5834] Cannot create hsr debugfs directory [ 91.008121][ T5845] hsr_slave_0: entered promiscuous mode [ 91.014376][ T5845] hsr_slave_1: entered promiscuous mode [ 91.021225][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.028881][ T5845] Cannot create hsr debugfs directory [ 91.214696][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.227805][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.275516][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.330833][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.535118][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.546478][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.566233][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.586960][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.666015][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.685676][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.724185][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.735791][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.789457][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.841178][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.857511][ T5838] Bluetooth: hci0: command tx timeout [ 91.863650][ T48] cfg80211: failed to load regulatory.db [ 91.880756][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.893327][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.908832][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.926942][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.978656][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.985832][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.016902][ T5838] Bluetooth: hci1: command tx timeout [ 92.024365][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.034671][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.046125][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.057022][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.074347][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.081561][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.097265][ T5838] Bluetooth: hci2: command tx timeout [ 92.097299][ T5846] Bluetooth: hci3: command tx timeout [ 92.128918][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.176917][ T5838] Bluetooth: hci4: command tx timeout [ 92.215348][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.240594][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.270595][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.277849][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.324588][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.331746][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.351977][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.409538][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.417158][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.433829][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.441095][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.525974][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.612902][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.684196][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.722166][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.760113][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.783179][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.790419][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.840800][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.848038][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.892046][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.899300][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.911701][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.918924][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.943394][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.023214][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.060367][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.248943][ T5830] veth0_vlan: entered promiscuous mode [ 93.300550][ T5845] veth0_vlan: entered promiscuous mode [ 93.332511][ T5830] veth1_vlan: entered promiscuous mode [ 93.381992][ T5845] veth1_vlan: entered promiscuous mode [ 93.486605][ T5830] veth0_macvtap: entered promiscuous mode [ 93.534376][ T5830] veth1_macvtap: entered promiscuous mode [ 93.594292][ T5845] veth0_macvtap: entered promiscuous mode [ 93.621557][ T5845] veth1_macvtap: entered promiscuous mode [ 93.632423][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.648112][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.662270][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.684812][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.725416][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.735284][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.744530][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.753481][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.778413][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.789648][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.801056][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.813185][ T5835] veth0_vlan: entered promiscuous mode [ 93.844922][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.856516][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.869830][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.883992][ T5835] veth1_vlan: entered promiscuous mode [ 93.892663][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.901935][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.910885][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.919889][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.937493][ T5838] Bluetooth: hci0: command tx timeout [ 93.999677][ T5834] veth0_vlan: entered promiscuous mode [ 94.036468][ T5843] veth0_vlan: entered promiscuous mode [ 94.056016][ T5835] veth0_macvtap: entered promiscuous mode [ 94.077968][ T5835] veth1_macvtap: entered promiscuous mode [ 94.095549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.099205][ T5834] veth1_vlan: entered promiscuous mode [ 94.104008][ T5838] Bluetooth: hci1: command tx timeout [ 94.120644][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.153689][ T5843] veth1_vlan: entered promiscuous mode [ 94.176924][ T5838] Bluetooth: hci2: command tx timeout [ 94.177578][ T5846] Bluetooth: hci3: command tx timeout [ 94.192410][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.203579][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.215577][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.226442][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.239005][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.272872][ T5846] Bluetooth: hci4: command tx timeout [ 94.292416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.304279][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.321014][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.331597][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.341929][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.354731][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.366133][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.392651][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.404219][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.413572][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.423023][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.451592][ T5834] veth0_macvtap: entered promiscuous mode [ 94.461366][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.471486][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.499021][ T5843] veth0_macvtap: entered promiscuous mode [ 94.527118][ T5834] veth1_macvtap: entered promiscuous mode [ 94.552225][ T5843] veth1_macvtap: entered promiscuous mode [ 94.578989][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.621649][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.636339][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.654491][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.662904][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.675043][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.688028][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.697924][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.708504][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.720407][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.732358][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.748719][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.758848][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.770126][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.780139][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.791713][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.803621][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.824896][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.840551][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.849450][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.859888][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.872446][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.884134][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.895942][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.907539][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.918790][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.941886][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.956308][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.968079][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.979930][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.998252][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.009132][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.019696][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.030213][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.040125][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.050683][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.144100][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.176499][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.333304][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.758940][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.793854][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.804299][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.814010][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.910716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.017813][ T5846] Bluetooth: hci0: command tx timeout [ 96.064466][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.078331][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.187421][ T5846] Bluetooth: hci1: command tx timeout [ 96.256907][ T5838] Bluetooth: hci3: command tx timeout [ 96.262772][ T5846] Bluetooth: hci2: command tx timeout [ 96.264567][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.337084][ T5846] Bluetooth: hci4: command tx timeout [ 96.462961][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.486852][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.520352][ T5905] usb 2-1: config index 0 descriptor too short (expected 37067, got 18) [ 96.534595][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.539591][ T5905] usb 2-1: config 123 has too many interfaces: 206, using maximum allowed: 32 [ 96.548560][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.569807][ T5905] usb 2-1: config 123 has an invalid descriptor of length 82, skipping remainder of the config [ 96.603706][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.611643][ T5905] usb 2-1: config 123 has 0 interfaces, different from the descriptor's value: 206 [ 96.617582][ T5905] usb 2-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=fe.29 [ 96.624729][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.654779][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.838249][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.847097][ T5905] usb 2-1: Product: syz [ 96.852102][ T5905] usb 2-1: Manufacturer: syz [ 96.856906][ T5905] usb 2-1: SerialNumber: syz [ 96.888146][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.727741][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.735654][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.786789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.866698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.959269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.477375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 99.617792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.656820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.698217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.707791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.756753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.835351][ T5953] veth0_vlan: entered allmulticast mode [ 102.112617][ T5887] usb 2-1: USB disconnect, device number 2 [ 102.221208][ T5965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.743150][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 104.959899][ T5986] veth0_vlan: entered allmulticast mode [ 106.246209][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 107.521056][ T5887] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.785511][ T5887] usb 5-1: config index 0 descriptor too short (expected 37067, got 18) [ 107.806564][ T5887] usb 5-1: config 123 has too many interfaces: 206, using maximum allowed: 32 [ 107.844369][ T5887] usb 5-1: config 123 has an invalid descriptor of length 82, skipping remainder of the config [ 107.887180][ T5887] usb 5-1: config 123 has 0 interfaces, different from the descriptor's value: 206 [ 107.970418][ T5887] usb 5-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=fe.29 [ 107.981874][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.997648][ T5887] usb 5-1: Product: syz [ 108.002480][ T5887] usb 5-1: Manufacturer: syz [ 108.009408][ T5887] usb 5-1: SerialNumber: syz [ 109.958221][ T6023] Zero length message leads to an empty skb [ 110.009995][ T5887] usb 5-1: USB disconnect, device number 2 [ 110.231952][ T6028] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.270260][ T6028] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.213921][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.788437][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.803039][ T10] usb 4-1: config 0 has no interface number 0 [ 111.864619][ T10] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.895962][ T10] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.969842][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.735279][ T10] usb 4-1: config 0 interface 2 has no altsetting 0 [ 112.752385][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 112.772005][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.801685][ T10] usb 4-1: config 0 descriptor?? [ 113.771084][ T5165] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 114.097388][ T5165] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.130435][ T5165] usb 5-1: config 0 has no interface number 0 [ 114.156905][ T5165] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.352402][ T5165] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.363038][ T5165] usb 5-1: config 0 interface 2 has no altsetting 0 [ 114.370033][ T5165] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 114.403906][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.339760][ T5165] usb 5-1: config 0 descriptor?? [ 115.643523][ T10] usbhid 4-1:0.2: can't add hid device: -71 [ 115.732735][ T10] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 116.321669][ T6069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.737106][ T10] usb 4-1: USB disconnect, device number 2 [ 117.929735][ T5887] usb 5-1: USB disconnect, device number 3 [ 128.223682][ T6158] veth0_vlan: entered allmulticast mode [ 130.846086][ T6170] loop3: detected capacity change from 0 to 32768 [ 132.720421][ T6194] loop2: detected capacity change from 0 to 512 [ 133.649917][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.656514][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.707992][ T6194] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.71: casefold flag without casefold feature [ 133.872159][ T6194] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.71: couldn't read orphan inode 15 (err -117) [ 134.297539][ T6194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.854222][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.110584][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 142.676829][ T5885] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 143.252908][ T5885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 143.316508][ T5885] usb 5-1: config 0 has no interface number 0 [ 143.391122][ T5885] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.510027][ T5885] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.366006][ T5885] usb 5-1: config 0 interface 2 has no altsetting 0 [ 144.576741][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 144.683029][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'. [ 144.902709][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.161825][ T6262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.637444][ T5885] usb 5-1: config 0 descriptor?? [ 145.735003][ T5885] usb 5-1: can't set config #0, error -71 [ 145.747735][ T5885] usb 5-1: USB disconnect, device number 4 [ 146.807172][ T6272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.154365][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 149.392688][ T6303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.468416][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 149.660094][ T24] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 149.679147][ T24] usb 3-1: config 0 has no interface number 0 [ 149.685370][ T24] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.711088][ T24] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.740641][ T24] usb 3-1: config 0 interface 2 has no altsetting 0 [ 149.761305][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 149.798689][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.840965][ T24] usb 3-1: config 0 descriptor?? [ 150.429512][ T6307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.777599][ T10] usb 3-1: USB disconnect, device number 2 [ 155.265551][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'. [ 155.483579][ T6344] loop2: detected capacity change from 0 to 512 [ 156.893900][ T6344] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.108: casefold flag without casefold feature [ 156.945166][ T6344] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.108: couldn't read orphan inode 15 (err -117) [ 156.969588][ T6349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.022925][ T6344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.806150][ T6357] loop3: detected capacity change from 0 to 2048 [ 157.837580][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.515759][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 158.552559][ T6357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.776888][ T6379] tipc: Started in network mode [ 160.781990][ T6379] tipc: Node identity ac14140f, cluster identity 4711 [ 160.789378][ T6379] tipc: New replicast peer: 255.255.255.255 [ 160.797437][ T6379] tipc: Enabled bearer , priority 10 [ 161.908240][ T48] tipc: Node number set to 2886997007 [ 161.913913][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 162.029485][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 162.235720][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 162.257985][ T10] usb 2-1: config 0 has no interface number 0 [ 162.283104][ T10] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.316698][ T10] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.361468][ T10] usb 2-1: config 0 interface 2 has no altsetting 0 [ 162.381767][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 162.416378][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.450174][ T10] usb 2-1: config 0 descriptor?? [ 162.521957][ T6392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.646856][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 163.759270][ T6383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.858518][ T24] usb 1-1: config index 0 descriptor too short (expected 37067, got 18) [ 163.883522][ T24] usb 1-1: config 123 has too many interfaces: 206, using maximum allowed: 32 [ 163.913506][ T24] usb 1-1: config 123 has an invalid descriptor of length 82, skipping remainder of the config [ 163.938624][ T24] usb 1-1: config 123 has 0 interfaces, different from the descriptor's value: 206 [ 163.976984][ T24] usb 1-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=fe.29 [ 163.986190][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.997068][ T10] usb 2-1: USB disconnect, device number 3 [ 164.022634][ T24] usb 1-1: Product: syz [ 164.037275][ T24] usb 1-1: Manufacturer: syz [ 164.041908][ T24] usb 1-1: SerialNumber: syz [ 165.406968][ T24] usb 1-1: USB disconnect, device number 2 [ 167.239258][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 167.935047][ T6436] x_tables: ip_tables: ah match: only valid for protocol 51 [ 169.455269][ T6442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.499881][ T6457] Bluetooth: MGMT ver 1.23 [ 169.656482][ T6447] veth0_vlan: entered allmulticast mode [ 172.202734][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 172.257226][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 172.835876][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.921499][ T6505] netlink: 44 bytes leftover after parsing attributes in process `syz.3.147'. [ 177.878769][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 178.928058][ T6538] veth0_vlan: entered allmulticast mode [ 179.587331][ T6543] veth0_vlan: left promiscuous mode [ 179.593663][ T6543] veth0_vlan: entered promiscuous mode [ 179.646980][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 179.839228][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.859008][ T24] usb 2-1: config 0 has no interface number 0 [ 179.906761][ T24] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.976812][ T24] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.203398][ T24] usb 2-1: config 0 interface 2 has no altsetting 0 [ 180.230024][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 180.267717][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.021450][ T24] usb 2-1: config 0 descriptor?? [ 183.526795][ T24] usb 2-1: USB disconnect, device number 4 [ 188.023273][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 189.770767][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.178'. [ 191.125401][ T6629] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 192.417042][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 192.903592][ T6647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.709748][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727951][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.603162][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 196.468080][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.188'. [ 197.860244][ T6672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.193'. [ 201.789700][ T6688] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 201.972419][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 202.538526][ T6697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.383249][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'. [ 208.407533][ T6725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.204'. [ 212.231419][ T6749] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 212.336862][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 212.352840][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 212.359832][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 212.365911][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 212.373025][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 213.035875][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.213'. [ 214.214102][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 215.356739][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.218'. [ 222.942974][ T6824] tipc: Started in network mode [ 222.948177][ T6824] tipc: Node identity 7add8f93c74, cluster identity 4711 [ 222.980892][ T6824] tipc: Enabled bearer , priority 10 [ 224.145744][ T5885] tipc: Node number set to 3181219731 [ 228.046680][ T6882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.246'. [ 228.726870][ T6876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.247'. [ 229.505776][ T6878] tipc: Started in network mode [ 229.521967][ T6878] tipc: Node identity 6aabab216575, cluster identity 4711 [ 229.551482][ T6878] tipc: Enabled bearer , priority 10 [ 230.703483][ T6900] tipc: Enabling of bearer rejected, already enabled [ 230.770006][ T5884] tipc: Node number set to 266251041 [ 232.141739][ T2970] ================================================================== [ 232.149864][ T2970] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x1c1/0x5a0 [ 232.157549][ T2970] Read of size 4 at addr ffff8880278f31b8 by task kworker/u8:7/2970 [ 232.165558][ T2970] [ 232.167937][ T2970] CPU: 0 UID: 0 PID: 2970 Comm: kworker/u8:7 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 232.167964][ T2970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.167978][ T2970] Workqueue: events_unbound netfs_write_collection_worker [ 232.168017][ T2970] Call Trace: [ 232.168026][ T2970] [ 232.168034][ T2970] dump_stack_lvl+0x241/0x360 [ 232.168069][ T2970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.168098][ T2970] ? rcu_is_watching+0x15/0xb0 [ 232.168123][ T2970] ? __virt_addr_valid+0x183/0x530 [ 232.168149][ T2970] ? lock_release+0x4e/0x3e0 [ 232.168170][ T2970] ? __virt_addr_valid+0x183/0x530 [ 232.168195][ T2970] ? __virt_addr_valid+0x183/0x530 [ 232.168222][ T2970] print_report+0x16e/0x5b0 [ 232.168248][ T2970] ? __virt_addr_valid+0x183/0x530 [ 232.168272][ T2970] ? __virt_addr_valid+0x183/0x530 [ 232.168296][ T2970] ? __virt_addr_valid+0x45f/0x530 [ 232.168322][ T2970] ? __phys_addr+0xba/0x170 [ 232.168347][ T2970] ? iov_iter_revert+0x1c1/0x5a0 [ 232.168369][ T2970] kasan_report+0x143/0x180 [ 232.168397][ T2970] ? iov_iter_revert+0x1c1/0x5a0 [ 232.168423][ T2970] iov_iter_revert+0x1c1/0x5a0 [ 232.168449][ T2970] netfs_retry_writes+0x17f2/0x19d0 [ 232.168473][ T2970] ? do_raw_spin_unlock+0x13c/0x8b0 [ 232.168508][ T2970] ? do_raw_spin_lock+0x151/0x370 [ 232.168535][ T2970] ? __pfx_netfs_retry_writes+0x10/0x10 [ 232.168562][ T2970] ? do_raw_spin_lock+0x151/0x370 [ 232.168603][ T2970] netfs_write_collection_worker+0x2fc0/0x3bf0 [ 232.168653][ T2970] ? process_scheduled_works+0x9cb/0x18e0 [ 232.168675][ T2970] process_scheduled_works+0xac3/0x18e0 [ 232.168710][ T2970] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.168736][ T2970] ? assign_work+0x367/0x3d0 [ 232.168759][ T2970] worker_thread+0x870/0xd50 [ 232.168788][ T2970] ? __kthread_parkme+0x1a8/0x200 [ 232.168812][ T2970] ? __pfx_worker_thread+0x10/0x10 [ 232.168834][ T2970] kthread+0x7b7/0x940 [ 232.168860][ T2970] ? __pfx_worker_thread+0x10/0x10 [ 232.168882][ T2970] ? __pfx_kthread+0x10/0x10 [ 232.168905][ T2970] ? __pfx_kthread+0x10/0x10 [ 232.168930][ T2970] ? __pfx_kthread+0x10/0x10 [ 232.168955][ T2970] ? __pfx_kthread+0x10/0x10 [ 232.168979][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.168998][ T2970] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.169020][ T2970] ? __pfx_kthread+0x10/0x10 [ 232.169045][ T2970] ret_from_fork+0x4b/0x80 [ 232.169064][ T2970] ? __pfx_kthread+0x10/0x10 [ 232.169088][ T2970] ret_from_fork_asm+0x1a/0x30 [ 232.169116][ T2970] [ 232.169124][ T2970] [ 232.411690][ T2970] Allocated by task 6904: [ 232.416019][ T2970] kasan_save_track+0x3f/0x80 [ 232.420709][ T2970] __kasan_kmalloc+0x9d/0xb0 [ 232.425304][ T2970] __kmalloc_cache_noprof+0x236/0x370 [ 232.430681][ T2970] tty_ldisc_get+0x236/0x290 [ 232.435268][ T2970] tty_ldisc_init+0x19/0x70 [ 232.439770][ T2970] alloc_tty_struct+0xf5/0x7e0 [ 232.444550][ T2970] tty_init_dev+0x5b/0x4c0 [ 232.448991][ T2970] tty_open+0x9de/0xde0 [ 232.453148][ T2970] chrdev_open+0x514/0x600 [ 232.457576][ T2970] do_dentry_open+0xdec/0x1960 [ 232.462345][ T2970] vfs_open+0x3b/0x370 [ 232.466415][ T2970] path_openat+0x2caf/0x35d0 [ 232.471006][ T2970] do_filp_open+0x284/0x4e0 [ 232.475508][ T2970] do_sys_openat2+0x12b/0x1d0 [ 232.480190][ T2970] __x64_sys_openat+0x249/0x2a0 [ 232.485052][ T2970] do_syscall_64+0xf3/0x230 [ 232.489573][ T2970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.495463][ T2970] [ 232.497784][ T2970] Freed by task 6903: [ 232.501756][ T2970] kasan_save_track+0x3f/0x80 [ 232.506434][ T2970] kasan_save_free_info+0x40/0x50 [ 232.511463][ T2970] __kasan_slab_free+0x59/0x70 [ 232.516228][ T2970] kfree+0x198/0x430 [ 232.520124][ T2970] tty_ldisc_kill+0x127/0x1a0 [ 232.524799][ T2970] tty_ldisc_release+0x174/0x200 [ 232.529733][ T2970] tty_release_struct+0x2b/0xe0 [ 232.534582][ T2970] tty_release+0xd07/0x12c0 [ 232.539083][ T2970] __fput+0x3e9/0x9f0 [ 232.543060][ T2970] task_work_run+0x251/0x310 [ 232.547654][ T2970] syscall_exit_to_user_mode+0x13f/0x340 [ 232.553286][ T2970] do_syscall_64+0x100/0x230 [ 232.557879][ T2970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.563768][ T2970] [ 232.566085][ T2970] The buggy address belongs to the object at ffff8880278f31a0 [ 232.566085][ T2970] which belongs to the cache kmalloc-16 of size 16 [ 232.579957][ T2970] The buggy address is located 8 bytes to the right of [ 232.579957][ T2970] allocated 16-byte region [ffff8880278f31a0, ffff8880278f31b0) [ 232.594358][ T2970] [ 232.596682][ T2970] The buggy address belongs to the physical page: [ 232.603093][ T2970] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880278f3260 pfn:0x278f3 [ 232.613153][ T2970] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 232.620706][ T2970] page_type: f5(slab) [ 232.624689][ T2970] raw: 00fff00000000000 ffff88801b041640 0000000000000000 0000000000000001 [ 232.633286][ T2970] raw: ffff8880278f3260 0000000080800010 00000000f5000000 0000000000000000 [ 232.641860][ T2970] page dumped because: kasan: bad access detected [ 232.648278][ T2970] page_owner tracks the page as allocated [ 232.653989][ T2970] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3017, tgid 3017 (kworker/u8:8), ts 198594100210, free_ts 188833219660 [ 232.673261][ T2970] post_alloc_hook+0x1f4/0x240 [ 232.678039][ T2970] get_page_from_freelist+0x360a/0x37a0 [ 232.683581][ T2970] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 232.689387][ T2970] alloc_pages_mpol+0x339/0x690 [ 232.694243][ T2970] allocate_slab+0x8f/0x3a0 [ 232.698748][ T2970] ___slab_alloc+0xc3b/0x1500 [ 232.703432][ T2970] __slab_alloc+0x58/0xa0 [ 232.707766][ T2970] __kmalloc_cache_noprof+0x26a/0x370 [ 232.713143][ T2970] fuse_writepage_args_setup+0x165/0x9f0 [ 232.718781][ T2970] fuse_writepages_fill+0x74e/0x10e0 [ 232.724068][ T2970] write_cache_pages+0xd2/0x240 [ 232.728939][ T2970] fuse_writepages+0x2b7/0x4a0 [ 232.733701][ T2970] do_writepages+0x38c/0x640 [ 232.738299][ T2970] __writeback_single_inode+0x14f/0x10d0 [ 232.743934][ T2970] writeback_sb_inodes+0x822/0x1360 [ 232.749134][ T2970] __writeback_inodes_wb+0x11b/0x260 [ 232.754419][ T2970] page last free pid 5887 tgid 5887 stack trace: [ 232.760738][ T2970] __free_frozen_pages+0xde8/0x10a0 [ 232.765938][ T2970] kasan_depopulate_vmalloc_pte+0x65/0x70 [ 232.771655][ T2970] __apply_to_page_range+0x85e/0xdb0 [ 232.776942][ T2970] kasan_release_vmalloc+0xa5/0xd0 [ 232.782050][ T2970] purge_vmap_node+0x231/0x8e0 [ 232.786824][ T2970] __purge_vmap_area_lazy+0x753/0xb20 [ 232.792202][ T2970] drain_vmap_area_work+0x27/0x40 [ 232.797228][ T2970] process_scheduled_works+0xac3/0x18e0 [ 232.802785][ T2970] worker_thread+0x870/0xd50 [ 232.807388][ T2970] kthread+0x7b7/0x940 [ 232.811464][ T2970] ret_from_fork+0x4b/0x80 [ 232.815878][ T2970] ret_from_fork_asm+0x1a/0x30 [ 232.820644][ T2970] [ 232.822968][ T2970] Memory state around the buggy address: [ 232.828598][ T2970] ffff8880278f3080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 232.836659][ T2970] ffff8880278f3100: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 232.844716][ T2970] >ffff8880278f3180: 00 00 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc [ 232.852768][ T2970] ^ [ 232.858652][ T2970] ffff8880278f3200: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 232.866710][ T2970] ffff8880278f3280: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 232.874765][ T2970] ================================================================== [ 232.936306][ T2970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 232.943569][ T2970] CPU: 0 UID: 0 PID: 2970 Comm: kworker/u8:7 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 232.955229][ T2970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.965310][ T2970] Workqueue: events_unbound netfs_write_collection_worker [ 232.972456][ T2970] Call Trace: [ 232.975757][ T2970] [ 232.978704][ T2970] dump_stack_lvl+0x241/0x360 [ 232.983421][ T2970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.988653][ T2970] ? __pfx__printk+0x10/0x10 [ 232.993275][ T2970] ? vscnprintf+0x5d/0x90 [ 232.997637][ T2970] panic+0x349/0x880 [ 233.001581][ T2970] ? check_panic_on_warn+0x21/0xb0 [ 233.006716][ T2970] ? __pfx_panic+0x10/0x10 [ 233.011138][ T2970] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 233.017114][ T2970] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.023437][ T2970] ? print_report+0x519/0x5b0 [ 233.028116][ T2970] check_panic_on_warn+0x86/0xb0 [ 233.033060][ T2970] ? iov_iter_revert+0x1c1/0x5a0 [ 233.037997][ T2970] end_report+0x77/0x160 [ 233.042247][ T2970] kasan_report+0x154/0x180 [ 233.046752][ T2970] ? iov_iter_revert+0x1c1/0x5a0 [ 233.051684][ T2970] iov_iter_revert+0x1c1/0x5a0 [ 233.056460][ T2970] netfs_retry_writes+0x17f2/0x19d0 [ 233.061696][ T2970] ? do_raw_spin_unlock+0x13c/0x8b0 [ 233.066931][ T2970] ? do_raw_spin_lock+0x151/0x370 [ 233.071981][ T2970] ? __pfx_netfs_retry_writes+0x10/0x10 [ 233.077654][ T2970] ? do_raw_spin_lock+0x151/0x370 [ 233.082712][ T2970] netfs_write_collection_worker+0x2fc0/0x3bf0 [ 233.088914][ T2970] ? process_scheduled_works+0x9cb/0x18e0 [ 233.094651][ T2970] process_scheduled_works+0xac3/0x18e0 [ 233.100229][ T2970] ? __pfx_process_scheduled_works+0x10/0x10 [ 233.106235][ T2970] ? assign_work+0x367/0x3d0 [ 233.110848][ T2970] worker_thread+0x870/0xd50 [ 233.115472][ T2970] ? __kthread_parkme+0x1a8/0x200 [ 233.120545][ T2970] ? __pfx_worker_thread+0x10/0x10 [ 233.125677][ T2970] kthread+0x7b7/0x940 [ 233.129776][ T2970] ? __pfx_worker_thread+0x10/0x10 [ 233.134913][ T2970] ? __pfx_kthread+0x10/0x10 [ 233.139526][ T2970] ? __pfx_kthread+0x10/0x10 [ 233.144139][ T2970] ? __pfx_kthread+0x10/0x10 [ 233.148766][ T2970] ? __pfx_kthread+0x10/0x10 [ 233.153377][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.158593][ T2970] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.163815][ T2970] ? __pfx_kthread+0x10/0x10 [ 233.168431][ T2970] ret_from_fork+0x4b/0x80 [ 233.172875][ T2970] ? __pfx_kthread+0x10/0x10 [ 233.177493][ T2970] ret_from_fork_asm+0x1a/0x30 [ 233.182301][ T2970] [ 233.185688][ T2970] Kernel Offset: disabled [ 233.190014][ T2970] Rebooting in 86400 seconds..