last executing test programs: 8.535253255s ago: executing program 1 (id=1334): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x6}, {0x8, 0x1a, 0x0, 0x0, 0x8}]}}]}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000120001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="0000000064995c9898e01bac000000001483350077673000"/36], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x9) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000780)={0x0, 0xd, 0x2, 0x2, 0x2, [], [0xa6, 0x20000000, 0xffff, 0x1], [0x5, 0x2, 0x4, 0x20], [0x8001, 0x3ff, 0x3, 0x3d]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7.055574634s ago: executing program 2 (id=1337): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900", 0x3}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r1, 0x73, &(0x7f0000000180)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f0000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x50) mq_notify(0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x3, 0x5, 0x5}, 0x42, [0x9, 0x2, 0x8, 0x6, 0x2, 0x6, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4004, 0xfffffffb, 0x2004, 0x3, 0x4, 0x34a9ddcd, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x1, 0x8, 0x3, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x6, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0xfffffffd, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3fb, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x1, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x204, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x7, 0x404, 0x4, 0x8, 0x8001, 0x7, 0x9, 0x800e8b, 0x2000005, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x2, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x4, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x4, 0x12, 0x4, 0x10, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0xfff, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') 6.345056979s ago: executing program 2 (id=1340): r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) 6.23171416s ago: executing program 1 (id=1342): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x1a, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4008004) openat$hwrng(0xffffff9c, &(0x7f00000010c0), 0x1e5380, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f00000002c0)={0x2, 0x12c, @ioapic={0x100000, 0x11, 0x4492, 0x5, 0x0, [{0x3, 0x0, 0x2, '\x00', 0x7}, {0x5, 0x3, 0x3, '\x00', 0x5}, {0x0, 0x3, 0x8, '\x00', 0xd3}, {0x7, 0x1, 0x10, '\x00', 0x90}, {0x7, 0x7, 0x48, '\x00', 0x59}, {0x2, 0x2, 0x8c, '\x00', 0x3}, {0x2, 0x7, 0x40, '\x00', 0x6}, {0x6, 0x2a, 0x0, '\x00', 0x6}, {0x3, 0x2, 0x3, '\x00', 0xa5}, {0xac, 0x0, 0x5, '\x00', 0xf}, {0x0, 0x8, 0x6, '\x00', 0x2}, {0xf5, 0x4}, {0x0, 0x0, 0x3f, '\x00', 0x7}, {0x0, 0xd, 0x12, '\x00', 0x7}, {0x1, 0xbb, 0x5a, '\x00', 0xd}, {0x5, 0x7, 0x7, '\x00', 0x4}, {0x10, 0x1, 0xd, '\x00', 0xa}, {0x9, 0x5, 0x4, '\x00', 0x4}, {0x0, 0x7, 0x1, '\x00', 0x3}, {0x8, 0x7f, 0x1}, {0x9, 0x7, 0xff, '\x00', 0x3}, {0x1, 0x5, 0x9, '\x00', 0xa4}, {0x39, 0x4, 0x0, '\x00', 0xe}, {0x2, 0x2, 0x0, '\x00', 0x35}]}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 5.284239706s ago: executing program 2 (id=1346): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, &(0x7f0000000200)) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r4, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.224819616s ago: executing program 1 (id=1348): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b15367"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.057142768s ago: executing program 0 (id=1349): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) close(0x4) 4.213993523s ago: executing program 2 (id=1352): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x8ac, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x880, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x14b9}, @TCA_TBF_PBURST={0x8, 0x7, 0xa64}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xff9d, 0x84d, 0x9, 0x7fff}, {0x1, 0x0, 0xa660, 0xfffd, 0x7, 0xfffffffa}, 0x6, 0xfffffffb, 0x1798}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x55673cfc4de2c680}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000000, 0x7, 0x7, 0x100, 0x2, 0xfffffff1, 0x8bdb, 0x159, 0x2, 0x0, 0x6, 0x5, 0xfffffff7, 0x2, 0x1, 0x1, 0x8, 0x0, 0x9, 0x1, 0x6, 0x3, 0x3, 0x5, 0x3, 0x8, 0x3ff, 0x2, 0x7, 0x4, 0x21, 0x6, 0x6, 0x1, 0x8, 0xfff, 0x8, 0x400, 0x9, 0xffff8000, 0x1, 0x8, 0x4, 0x8, 0x1, 0xc, 0x1ff, 0x2, 0x4, 0x5, 0xe, 0xe, 0x1aa2b372, 0x3, 0x0, 0x6, 0x10000, 0xffffffff, 0x6, 0x9778, 0x5, 0x2, 0xb1ad, 0xffff8000, 0xb, 0x86fe, 0x99, 0x5, 0x6, 0xfffffff7, 0x4, 0xffc00000, 0x5ca0, 0x8, 0x5, 0x80000001, 0x401, 0x1, 0x3, 0xff1, 0x5, 0x0, 0x3, 0x1, 0xde, 0x9, 0x8, 0x7f7, 0x7fe00, 0x0, 0x75e, 0x7, 0x3, 0x6, 0x7, 0x2, 0x401, 0xf, 0x3, 0x1ff, 0x4, 0x7f, 0x3, 0x8, 0x1, 0xaf21, 0xf9, 0xfffffffd, 0x5, 0xec44, 0x7, 0x2, 0x7, 0x9000000, 0x8, 0x2, 0x10001, 0x7fff, 0x10000, 0x84, 0x2, 0xa5ac, 0x0, 0x7fff, 0x8, 0xe, 0x200, 0x6e, 0x7388, 0x0, 0x6, 0xfffffffb, 0x2, 0x80000000, 0x6, 0x2, 0xffffffc0, 0x80000000, 0xfffffffd, 0x3, 0x3, 0x1, 0x100, 0x6, 0x7, 0x200, 0x1a, 0xc20, 0x5, 0x100, 0x400, 0x6, 0x1, 0x0, 0x7, 0x1c00000, 0xf0000000, 0x7, 0x0, 0xffffffff, 0x8, 0x8001, 0x2, 0x3, 0x1, 0x8, 0x7, 0x5, 0x8, 0x7, 0x3, 0x2, 0x6, 0x0, 0xa9, 0x3, 0xff, 0x9, 0x4, 0x1, 0xfffffc01, 0x100, 0x8, 0x4249, 0x6, 0x1, 0x0, 0x9, 0x3ff, 0xb, 0x7, 0x80000000, 0x0, 0x7, 0xd594, 0x9d7, 0x1, 0x2, 0x80, 0x500, 0x7, 0x6, 0x2, 0xfffffb11, 0xfffffffe, 0x1, 0x81, 0x7, 0x7, 0xfffffff9, 0xf, 0x1, 0x62fe, 0x0, 0x10000, 0x1ff, 0x9, 0x70dfabfe, 0x200, 0xf9, 0x14000000, 0x400, 0x4, 0x4, 0x5, 0x20, 0x146, 0x2, 0x9, 0x0, 0x4, 0x4, 0x9, 0x4, 0x1, 0x7f, 0xae6f, 0x5, 0xfffffffa, 0x3, 0x40, 0x8, 0x66cc, 0x0, 0xa, 0x2d, 0x2400, 0x1, 0x3, 0x3, 0x9, 0x77, 0x7, 0x400, 0x200000, 0xfffff1c0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x3, 0x0, 0x9, 0x5}, {0x2, 0x0, 0x1, 0x5, 0x80, 0xc7d}, 0x4, 0x4, 0x1414}}, @TCA_TBF_PTAB={0x404, 0x3, [0xdb90, 0x0, 0x1000, 0x2ee, 0xcf, 0x6, 0xde5d, 0x3, 0x1, 0x3ff, 0x4, 0x6, 0x3ff, 0x4, 0x8, 0x1f4, 0xb, 0x4, 0x7, 0xffffff80, 0x200, 0x239, 0x0, 0x0, 0x1, 0x7, 0x3f0d, 0x1, 0x7, 0x3, 0x8000000, 0x3a, 0x0, 0x9000, 0x9, 0xa58, 0x4131, 0x0, 0xfffffff9, 0x3, 0x6, 0x1, 0x7, 0xe5d6, 0x400, 0x2, 0xfffffffe, 0x1, 0x7fff, 0x80, 0x7, 0x10001, 0x8c3, 0x148, 0x6, 0x1000, 0x6fea, 0x8, 0xdc2, 0xfffffffc, 0x800, 0x0, 0x3, 0x1, 0x4, 0x400, 0x7, 0x401, 0x1, 0x3, 0x0, 0x6c, 0x40, 0x5, 0x5, 0x9e, 0x0, 0x80000000, 0xff, 0x101, 0x7, 0x2, 0x9, 0x401, 0x4, 0x6, 0x8ea2, 0x1, 0x9, 0x7, 0x5, 0x5, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x2, 0x7, 0x2, 0x6, 0x8, 0x7fc00000, 0x527c09f8, 0x8, 0x3, 0x400, 0x80, 0xfffffffc, 0x80, 0x4, 0x20091, 0x1, 0x8, 0x1ff, 0x3, 0x226, 0x9, 0x3, 0x4, 0x101, 0x2, 0x7, 0xffff9a41, 0x10, 0x7, 0xc, 0x7fff, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x8000, 0x7, 0x4, 0xf, 0x82, 0x6, 0x2, 0xfffffffc, 0x3, 0x7, 0x100, 0x860, 0x1, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0x8001, 0x8, 0x8, 0x81, 0x401, 0x5, 0x5, 0x8, 0x0, 0xffffff51, 0x80000001, 0x7, 0x5, 0x8, 0x8, 0xd4, 0x48000000, 0x6, 0x10000, 0x3, 0x3, 0x8, 0x8, 0x5, 0xf1f, 0x6, 0x4, 0x9, 0x4c34, 0x0, 0x0, 0x1, 0x1, 0x60bd, 0x8, 0x7, 0x9, 0x80000000, 0x8, 0x2, 0x7, 0x2, 0xfffffffc, 0x7f, 0x2, 0x8e5, 0xfffffffb, 0x8, 0xd4, 0x1000, 0xffff, 0x6, 0x79, 0x7, 0x0, 0xf2, 0x9b, 0xe6, 0x3, 0x1, 0xfffffff8, 0x8d7, 0xf4f, 0x7ff, 0x80000000, 0x4, 0x6, 0x101, 0x658, 0x5, 0x4, 0x2, 0x4, 0xd6, 0x0, 0xc11, 0x1000, 0x80000000, 0x5, 0x8, 0x8000, 0x2a0, 0x9, 0x2a86, 0xc4, 0x1000, 0x4, 0x7, 0x3ff, 0x2, 0xffffffff, 0x1, 0x4, 0x7ff, 0x2, 0x5, 0xa, 0x8, 0x74f2, 0x9, 0x0, 0x10, 0xd6, 0x13]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1719}]}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001240)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000f40)=""/127, 0x7f, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_io_uring_setup(0x23d, &(0x7f0000000740)={0x0, 0x74cd, 0x10100, 0x0, 0x4, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x2) readv(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) 4.091855714s ago: executing program 4 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.091159234s ago: executing program 2 (id=1355): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x8000000f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, &(0x7f0000000d80)="c32bdcc6bef3e44fb79730255949e6ece6e52bce95ed66648cb6ca6cc0c59c97189f99a21788c37c9f2b10c0ca19b52483452d733c3a36e052cbbc18b7a808dcb2440ff2fb45ca3cba9f574fa92a9da220a1c95c90b7e840c7e064488f51c4ec8d68bfced0455eca486acc8678197c7f3d84c800a6c84c631d29782e4105d78148d56d681f9b9dfa4de1ffb35563222a4a14f50e6f02215f749cfd92a85cfa9f96a66818ad", 0xa5, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)="196496b81af18de8148e3712e74ab180f169d74b639a1f98") getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@initdev, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000001000)=0xffffffffffffff53) fstat(r2, &(0x7f0000001040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000010000000000008000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) 3.943409455s ago: executing program 4 (id=1356): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0xfff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x3) socket$inet(0xa, 0x801, 0x84) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 3.824856286s ago: executing program 4 (id=1357): socket$kcm(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c00000004000000050000000000000c0200000002000000000000110100000006000000050000000000000b040000000b0000000000001308000000050000000000000b030000000c0000000000000100000000510047040b00000044000013010000000b00000009000000730000000900000003000000fd00000008000000b700000003090600000000000000000009000000002e00002d"], &(0x7f0000000300)=""/132, 0xa8, 0x84, 0x0, 0x4}, 0x28) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x184}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5, 0x0, 0x5}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000080)={0x9, 'veth1_to_bond\x00', {0x7ff}, 0x1000}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='rcu_utilization\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 3.729380376s ago: executing program 0 (id=1358): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x1a, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4008004) openat$hwrng(0xffffff9c, &(0x7f00000010c0), 0x1e5380, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f00000002c0)={0x2, 0x12c, @ioapic={0x100000, 0x11, 0x4492, 0x5, 0x0, [{0x3, 0x0, 0x2, '\x00', 0x7}, {0x5, 0x3, 0x3, '\x00', 0x5}, {0x0, 0x3, 0x8, '\x00', 0xd3}, {0x7, 0x1, 0x10, '\x00', 0x90}, {0x7, 0x7, 0x48, '\x00', 0x59}, {0x2, 0x2, 0x8c, '\x00', 0x3}, {0x2, 0x7, 0x40, '\x00', 0x6}, {0x6, 0x2a, 0x0, '\x00', 0x6}, {0x3, 0x2, 0x3, '\x00', 0xa5}, {0xac, 0x0, 0x5, '\x00', 0xf}, {0x0, 0x8, 0x6, '\x00', 0x2}, {0xf5, 0x4}, {0x0, 0x0, 0x3f, '\x00', 0x7}, {0x0, 0xd, 0x12, '\x00', 0x7}, {0x1, 0xbb, 0x5a, '\x00', 0xd}, {0x5, 0x7, 0x7, '\x00', 0x4}, {0x10, 0x1, 0xd, '\x00', 0xa}, {0x9, 0x5, 0x4, '\x00', 0x4}, {0x0, 0x7, 0x1, '\x00', 0x3}, {0x8, 0x7f, 0x1}, {0x9, 0x7, 0xff, '\x00', 0x3}, {0x1, 0x5, 0x9, '\x00', 0xa4}, {0x39, 0x4, 0x0, '\x00', 0xe}, {0x2, 0x2, 0x0, '\x00', 0x35}]}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 3.728574156s ago: executing program 1 (id=1359): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x324, 0x148, 0x1ec, 0xffffffff, 0x148, 0x0, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa4, 0x0, {0x22e}}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id=0x64}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xfc}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x80000003) pread64(r2, &(0x7f00000001c0)=""/109, 0x6d, 0x2d3) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0) 2.165471766s ago: executing program 3 (id=1360): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r0) shmdt(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0x20fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.099647227s ago: executing program 2 (id=1361): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {0x0}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600), 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000640)=0x3, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16, @ANYBLOB="010000000000000000000000000000000000000063c20480b6e864ee5f43e83add789a8cc88dd360ede2f230342cb869a5ba9027f65a41cbb340b8e689f987767d9ab6596a1fb9a478d614c64811901cf9f530b6cfb31601a58d81f1f948ac418590bb55d55f25f85bd2eb803ca23db22e052bd6af6da64ff508414aaadd2544031fcb4a89f3926e0b41d04a4ec3b448a18a5325723ab0254f05c60676a6773f2ecea61117ab377bef862970e6a9ab90151a73bc0874b329df16d415220b644acd4671c96125bb710d4f40ede0f067fdcbcc60e6c6be78df7b505e3c481114aafcf764a6be9d5946d7ed6faf56a92f70", @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000a90100009f218c2ce3cb730999e47a1f9d23bdd51b878e7dbc4ae2f066a73be627d2cb7ec61b874d3c8e9ce484d38b3ea829bbe6c28ff41b4b9300f2f0f87375a2179f1c7c842a696e8f678be7c8fa2315f5", @ANYRES32=0x0, @ANYRES16=r2, @ANYRESHEX=r0, @ANYBLOB="0767d421291c5320b4b4082206163c9449"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6c7, r5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001080), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.915872778s ago: executing program 4 (id=1362): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, &(0x7f0000000200)) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r4, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.915370018s ago: executing program 0 (id=1363): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900", 0x3}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r1, 0x73, &(0x7f0000000180)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f0000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x50) mq_notify(0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x3, 0x5, 0x5}, 0x42, [0x9, 0x2, 0x8, 0x6, 0x2, 0x6, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4004, 0xfffffffb, 0x2004, 0x3, 0x4, 0x34a9ddcd, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x1, 0x8, 0x3, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x6, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0xfffffffd, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3fb, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x1, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x204, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x7, 0x404, 0x4, 0x8, 0x8001, 0x7, 0x9, 0x800e8b, 0x2000005, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x2, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x4, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x4, 0x12, 0x4, 0x10, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0xfff, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') 1.473908051s ago: executing program 3 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x2000c000) 1.175467203s ago: executing program 3 (id=1365): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042022eb"], 0x7a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 361.785598ms ago: executing program 1 (id=1366): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe2e, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x1, 0x70bd37, 0x3, {0x0, 0x0, 0x0, r2, {0xfff1}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) 300.194589ms ago: executing program 0 (id=1367): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cc", 0x1, 0x200980) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x0, 0x20008050}, 0x40004) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x2, 0x8004) accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) 199.824189ms ago: executing program 3 (id=1368): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) 199.439849ms ago: executing program 0 (id=1369): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xff7fffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x7ffffffe, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 194.171059ms ago: executing program 1 (id=1370): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 175.940849ms ago: executing program 3 (id=1371): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}}}]}]}]}}]}, 0x60}}, 0x40000) 132.956379ms ago: executing program 4 (id=1372): unshare(0x2c020400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) 33.34426ms ago: executing program 4 (id=1373): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x1a, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4008004) openat$hwrng(0xffffff9c, &(0x7f00000010c0), 0x1e5380, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f00000002c0)={0x2, 0x12c, @ioapic={0x100000, 0x11, 0x4492, 0x5, 0x0, [{0x3, 0x0, 0x2, '\x00', 0x7}, {0x5, 0x3, 0x3, '\x00', 0x5}, {0x0, 0x3, 0x8, '\x00', 0xd3}, {0x7, 0x1, 0x10, '\x00', 0x90}, {0x7, 0x7, 0x48, '\x00', 0x59}, {0x2, 0x2, 0x8c, '\x00', 0x3}, {0x2, 0x7, 0x40, '\x00', 0x6}, {0x6, 0x2a, 0x0, '\x00', 0x6}, {0x3, 0x2, 0x3, '\x00', 0xa5}, {0xac, 0x0, 0x5, '\x00', 0xf}, {0x0, 0x8, 0x6, '\x00', 0x2}, {0xf5, 0x4}, {0x0, 0x0, 0x3f, '\x00', 0x7}, {0x0, 0xd, 0x12, '\x00', 0x7}, {0x1, 0xbb, 0x5a, '\x00', 0xd}, {0x5, 0x7, 0x7, '\x00', 0x4}, {0x10, 0x1, 0xd, '\x00', 0xa}, {0x9, 0x5, 0x4, '\x00', 0x4}, {0x0, 0x7, 0x1, '\x00', 0x3}, {0x8, 0x7f, 0x1}, {0x9, 0x7, 0xff, '\x00', 0x3}, {0x1, 0x5, 0x9, '\x00', 0xa4}, {0x39, 0x4, 0x0, '\x00', 0xe}, {0x2, 0x2, 0x0, '\x00', 0x35}]}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 1.04518ms ago: executing program 0 (id=1374): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r0) shmdt(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0x20fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1375): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x168, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x154, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xbc, 0x3, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16fc, 0x8}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x168}}, 0x0) listen(r0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {0x0}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000640)=0x3, 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1a9, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) unshare(0x22020400) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): _1) entered forwarding state [ 52.754966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.768684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.778649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.790993][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.800571][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.814149][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.825831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.834438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.855920][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.866180][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.890224][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.900944][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.912812][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.921441][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.931381][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.941292][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.950489][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.958890][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.968312][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.976952][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.985360][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.994391][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.007024][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.017239][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.054149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.066349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.074976][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.082077][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.096103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.105872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.114987][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.122082][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.130278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.171323][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.191762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.200471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.208609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.220763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.264674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.273416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.284327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.292987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.302575][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.309653][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.317463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.326905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.336027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.344856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.354095][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.361234][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.370364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.379790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.388137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.396693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.405460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.413998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.425071][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.453644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.464518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.497576][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.509466][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.517739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.532054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.546328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.555642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.569731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.577545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.587534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.596086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.606262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.626590][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.638138][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.648171][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.674999][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.698487][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.711961][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.737263][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.749037][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.770854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.792338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.800869][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.808010][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.831333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.857044][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.874196][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.881313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.889576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.899102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.908081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.916983][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.924108][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.934153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.943343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.951103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.963492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.977112][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.986264][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.000811][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.011396][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.020132][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.027237][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.038285][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.054371][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.063467][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.081860][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 54.092261][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 54.102457][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.110956][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.122240][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.130657][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.138226][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.146661][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.156952][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.165290][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 54.168720][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.171311][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 54.179741][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 54.186667][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.199613][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.208304][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.217360][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.226469][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.235026][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.244161][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.253161][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.261370][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.270233][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.278181][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.286054][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.305859][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.316579][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.337063][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.346877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.355394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.365659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.374582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.383010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.391813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.400392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.411344][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.429755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.443128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.470674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.479122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.508990][ T4191] device veth0_vlan entered promiscuous mode [ 54.555430][ T4184] device veth0_vlan entered promiscuous mode [ 54.571960][ T4191] device veth1_vlan entered promiscuous mode [ 54.590033][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.602941][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.612331][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.630884][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.657512][ T4184] device veth1_vlan entered promiscuous mode [ 54.670401][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.679241][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.688290][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.696555][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.705506][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.714011][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.722815][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.730583][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.746242][ T4196] device veth0_vlan entered promiscuous mode [ 54.764379][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.772736][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.787691][ T4191] device veth0_macvtap entered promiscuous mode [ 54.800024][ T4196] device veth1_vlan entered promiscuous mode [ 54.815531][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.828392][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.837606][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.847071][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.855822][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.864010][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.871696][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.884332][ T4191] device veth1_macvtap entered promiscuous mode [ 54.903595][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.928565][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.937189][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.945990][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.954823][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.975070][ T4196] device veth0_macvtap entered promiscuous mode [ 54.984231][ T4184] device veth0_macvtap entered promiscuous mode [ 54.991302][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.999631][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.008803][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.017979][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.027562][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.036481][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.053044][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.064260][ T4196] device veth1_macvtap entered promiscuous mode [ 55.075641][ T4184] device veth1_macvtap entered promiscuous mode [ 55.083419][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.091387][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.100468][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.109457][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.123550][ T4183] device veth0_vlan entered promiscuous mode [ 55.139486][ T4183] device veth1_vlan entered promiscuous mode [ 55.148665][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.159068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.167728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.176677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.184946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.194596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.203502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.213212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.240197][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.253592][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.265401][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.276856][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.287121][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.300425][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.311004][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.325608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.333861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.341904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.349945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.359391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.370568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.380706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.389999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.397999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.413677][ T4189] device veth0_vlan entered promiscuous mode [ 55.422200][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.433630][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.447604][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.473177][ T4189] device veth1_vlan entered promiscuous mode [ 55.484907][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.493210][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.502704][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.529806][ T4183] device veth0_macvtap entered promiscuous mode [ 55.550131][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.560734][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.570915][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.582911][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.593968][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.603936][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.613354][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.622458][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.630914][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.640019][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.656412][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.673475][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.682632][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.691335][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.703110][ T4183] device veth1_macvtap entered promiscuous mode [ 55.710824][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.723299][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.733411][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.744142][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.755183][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.768149][ T4189] device veth0_macvtap entered promiscuous mode [ 55.778427][ T4189] device veth1_macvtap entered promiscuous mode [ 55.791071][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.799299][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.808256][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.818856][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.827425][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.836108][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.845460][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.869252][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.885555][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.896563][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.907519][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.917500][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.929259][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.940371][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.955883][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.964999][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.974282][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.983282][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.006770][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.015662][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.047522][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.058669][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.068711][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.079175][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.089265][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.100636][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.112686][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.134453][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.141753][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.143965][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.158874][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.168254][ T4247] Bluetooth: hci1: command 0x040f tx timeout [ 56.174684][ T4247] Bluetooth: hci0: command 0x040f tx timeout [ 56.175741][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.193239][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.204450][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.214750][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.225489][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.235557][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.242230][ T4174] Bluetooth: hci4: command 0x040f tx timeout [ 56.246973][ T4247] Bluetooth: hci2: command 0x040f tx timeout [ 56.256887][ T4174] Bluetooth: hci3: command 0x040f tx timeout [ 56.258105][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.275139][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.285840][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.298235][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.308277][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.317275][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.328538][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.337345][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.361806][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.370403][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.403869][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.415698][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.425987][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.436651][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.446731][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.457767][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.467856][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.478644][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.493343][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.506368][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.515487][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.524709][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.526711][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.541352][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.556133][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.566495][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.576262][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.585250][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.703967][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.709371][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.720615][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.751803][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.757958][ T374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.774731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.782753][ T374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.789960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.801387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.865993][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.890616][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.907970][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.942830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.974681][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.990083][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.110992][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.155402][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.221547][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.243259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.345515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 57.447875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 57.550501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.602328][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.611362][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.762852][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.778702][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.828469][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.850906][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.862095][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.875306][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.062763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 58.091940][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.107340][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.108202][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.154573][ T4313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.172583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.172650][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.267046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 58.406233][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 58.406287][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 58.431748][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 58.924784][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.948458][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 59.175596][ T4324] serio: Serial port ttyS3 [ 59.231288][ T4245] Bluetooth: hci3: command 0x0419 tx timeout [ 59.381946][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.637423][ T4339] input: syz1 as /devices/virtual/input/input5 [ 60.182267][ T21] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 60.207145][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 60.797425][ T21] usb 4-1: Product: syz [ 61.168755][ T21] usb 4-1: Manufacturer: syz [ 61.178916][ T21] usb 4-1: SerialNumber: syz [ 61.249378][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.268203][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.277064][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.325294][ T4361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19'. [ 62.043421][ T21] usb 4-1: config 0 descriptor?? [ 62.106945][ T4360] device wireguard0 entered promiscuous mode [ 62.140805][ T21] usb 4-1: can't set config #0, error -71 [ 62.210889][ T21] usb 4-1: USB disconnect, device number 2 [ 62.237231][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.681821][ T1111] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 62.731604][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.769884][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.782246][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 62.871857][ T1111] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 62.891047][ T1111] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 62.930881][ T1111] usb 2-1: Manufacturer: syz [ 62.937565][ T1111] usb 2-1: config 0 descriptor?? [ 63.141603][ T1111] usbhid 2-1:0.0: can't add hid device: -71 [ 63.148942][ T1111] usbhid: probe of 2-1:0.0 failed with error -71 [ 63.204142][ T1111] usb 2-1: USB disconnect, device number 2 [ 63.424490][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 63.471894][ T4391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 63.552027][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.288617][ T4391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 64.716011][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.735205][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.743525][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.795372][ T4424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 64.951646][ T21] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 64.960865][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 65.050980][ T21] usb 4-1: Product: syz [ 65.055289][ T21] usb 4-1: Manufacturer: syz [ 65.060347][ T21] usb 4-1: SerialNumber: syz [ 65.079198][ T21] usb 4-1: config 0 descriptor?? [ 65.109960][ T4423] device wireguard0 entered promiscuous mode [ 65.123355][ T21] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 65.138440][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 65.170424][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 65.282369][ T21] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 65.310052][ T21] usb 4-1: media controller created [ 65.346908][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.401805][ T21] cxusb: set interface failed [ 66.407349][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 66.497633][ T21] DVB: Unable to find symbol mt352_attach() [ 67.322571][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 67.795119][ T21] zl10353_read_register: readreg error (reg=127, ret==-121) [ 67.806020][ T21] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 67.981567][ T21] rc_core: IR keymap rc-dvico-mce not found [ 67.987543][ T21] Registered IR keymap rc-empty [ 68.005773][ T21] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 68.038159][ T21] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 68.049275][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 68.104352][ T4454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.45'. [ 68.119573][ T4454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.45'. [ 68.904588][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 68.911617][ T21] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 68.923228][ T21] usb 4-1: USB disconnect, device number 3 [ 69.174936][ T21] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 69.327449][ T4494] Zero length message leads to an empty skb [ 69.951579][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 70.327180][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.340584][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.348878][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.405639][ T4503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 70.741671][ T21] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 70.758487][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 70.771738][ T21] usb 4-1: Product: syz [ 70.775974][ T21] usb 4-1: Manufacturer: syz [ 70.781555][ T21] usb 4-1: SerialNumber: syz [ 70.793051][ T21] usb 4-1: config 0 descriptor?? [ 70.833068][ T21] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 70.841592][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 70.872920][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.284797][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.293183][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.691813][ T21] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 71.711030][ T21] usb 4-1: media controller created [ 71.739267][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.856599][ T4518] input: syz1 as /devices/virtual/input/input7 [ 72.061632][ T21] cxusb: set interface failed [ 72.066502][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 72.091576][ T4329] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.128848][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 72.148888][ T21] DVB: Unable to find symbol mt352_attach() [ 72.149724][ T4528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 72.155626][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 72.171006][ T4528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 72.184371][ T21] zl10353_read_register: readreg error (reg=127, ret==-121) [ 72.199438][ T21] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 72.398751][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.413952][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.422201][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.480819][ T4544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.67'. [ 72.491620][ T21] rc_core: IR keymap rc-dvico-mce not found [ 72.551638][ T4329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.562124][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 72.660130][ T21] Registered IR keymap rc-empty [ 72.666063][ T4329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.676074][ T4329] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 72.685394][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.700160][ T21] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 72.712390][ T4329] usb 2-1: config 0 descriptor?? [ 72.718543][ T21] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 72.731349][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 72.738526][ T21] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 72.750638][ T21] usb 4-1: USB disconnect, device number 4 [ 72.816589][ T4289] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.893655][ T21] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 72.948239][ T4553] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 73.061990][ T4289] usb 3-1: Using ep0 maxpacket: 32 [ 73.076995][ T4560] binder: 4549:4560 ioctl 81e8943c 200000000500 returned -22 [ 73.207460][ T4329] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 73.989354][ T4329] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 73.991917][ T4289] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 74.023689][ T4329] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 74.036113][ T4289] usb 3-1: config 0 has no interface number 0 [ 74.037176][ T4329] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 74.051648][ T4329] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 74.059244][ T4289] usb 3-1: config 0 interface 12 has no altsetting 0 [ 74.061671][ T4329] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 74.081048][ T4566] device syzkaller0 entered promiscuous mode [ 74.090749][ T4569] binder: BINDER_SET_CONTEXT_MGR already set [ 74.097977][ T4569] binder: 4567:4569 ioctl 4018620d 200000004a80 returned -16 [ 74.114016][ T4329] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 74.180791][ T4329] usb 2-1: USB disconnect, device number 3 [ 74.232245][ T4289] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 74.251579][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.267939][ T4289] usb 3-1: Product: syz [ 74.273833][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 74.276757][ T4576] fido_id[4576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 74.282700][ T4289] usb 3-1: Manufacturer: syz [ 74.282717][ T4289] usb 3-1: SerialNumber: syz [ 74.288796][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.77'. [ 74.332184][ T4289] usb 3-1: config 0 descriptor?? [ 74.336343][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.77'. [ 77.362732][ T1108] cfg80211: failed to load regulatory.db [ 77.491616][ T4289] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 77.501584][ T4289] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 77.509454][ T4289] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 77.577334][ T4598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'. [ 77.823309][ T4289] f81534: probe of 3-1:0.12 failed with error -71 [ 77.908113][ T4289] usb 3-1: USB disconnect, device number 2 [ 80.353990][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 80.401635][ T4627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 80.553709][ T4627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 81.446700][ T4658] 9pnet_virtio: no channels available for device syz [ 82.782498][ T4192] Bluetooth: hci4: unknown advertising packet type: 0x6b [ 82.782557][ T4192] Bluetooth: hci4: Dropping invalid advertising data [ 82.797146][ T4192] Bluetooth: hci4: Malicious advertising data. [ 82.863089][ T4666] device syzkaller0 entered promiscuous mode [ 82.909052][ T4676] overlayfs: failed to clone upperpath [ 83.547626][ T4701] overlayfs: unrecognized mount option "verity=require" or missing value [ 83.668692][ T4701] ======================================================= [ 83.668692][ T4701] WARNING: The mand mount option has been deprecated and [ 83.668692][ T4701] and is ignored by this kernel. Remove the mand [ 83.668692][ T4701] option from the mount to silence this warning. [ 83.668692][ T4701] ======================================================= [ 84.141443][ T4718] lo speed is unknown, defaulting to 1000 [ 84.147570][ T4718] lo speed is unknown, defaulting to 1000 [ 84.154709][ T4718] lo speed is unknown, defaulting to 1000 [ 84.162703][ T4718] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.172845][ T4718] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.191400][ T4718] lo speed is unknown, defaulting to 1000 [ 84.198167][ T4718] lo speed is unknown, defaulting to 1000 [ 84.204459][ T4718] lo speed is unknown, defaulting to 1000 [ 84.210688][ T4718] lo speed is unknown, defaulting to 1000 [ 84.216953][ T4718] lo speed is unknown, defaulting to 1000 [ 84.376895][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.392268][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.400471][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.456527][ T4727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 85.540812][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 85.684300][ T4766] lo speed is unknown, defaulting to 1000 [ 85.914802][ T4769] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 87.203351][ T4778] sched: RT throttling activated [ 87.362392][ T4780] overlayfs: failed to clone upperpath [ 88.570095][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.578968][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.586473][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.749662][ T4793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.137'. [ 88.942796][ T4804] device wireguard0 entered promiscuous mode [ 90.805526][ T4834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 90.812365][ T4834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.827743][ T4834] vhci_hcd vhci_hcd.0: Device attached [ 90.982391][ T4846] vhci_hcd: connection closed [ 91.001525][ T1266] vhci_hcd: stop threads [ 91.034524][ T1266] vhci_hcd: release socket [ 91.043970][ T1266] vhci_hcd: disconnect device [ 91.091603][ T1108] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 91.099236][ T1108] usb 33-1: enqueue for inactive port 0 [ 91.123046][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.138051][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.146953][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.208110][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.153'. [ 91.381568][ T1108] vhci_hcd: vhci_device speed not set [ 92.918340][ T4868] 9pnet: Insufficient options for proto=fd [ 93.051621][ T4870] Process accounting resumed [ 94.413698][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.422358][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.429786][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.454859][ T4899] input: syz1 as /devices/virtual/input/input9 [ 94.470427][ T150] block nbd4: Attempted send on invalid socket [ 94.477165][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.489638][ T4899] F2FS-fs (nbd4): Unable to read 1th superblock [ 94.496345][ T150] block nbd4: Attempted send on invalid socket [ 94.502572][ T150] blk_update_request: I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.513544][ T4899] F2FS-fs (nbd4): Unable to read 2th superblock [ 94.588810][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.167'. [ 94.666392][ T4900] device wireguard0 entered promiscuous mode [ 94.854209][ T4909] device syzkaller0 entered promiscuous mode [ 94.927909][ T4913] fuse: Unknown parameter 'user_id00000000000000000000' [ 94.986609][ T4913] loop2: detected capacity change from 0 to 1024 [ 95.117773][ T4913] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 95.137128][ T4913] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.617982][ T4913] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 96.625055][ T4942] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 96.770712][ T4942] team0: Cannot enslave team device to itself [ 96.835710][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.852492][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.970693][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.009284][ T4941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.182'. [ 97.375056][ T4954] device syzkaller0 entered promiscuous mode [ 98.095870][ T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 98.505008][ T4972] fuse: Unknown parameter 'user_id00000000000000000000' [ 98.532852][ T4972] loop0: detected capacity change from 0 to 1024 [ 98.598090][ T4972] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 98.610171][ T4972] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.753651][ T4972] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 98.831595][ T21] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 98.841893][ T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.863398][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.871872][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.879288][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.934608][ T4981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 98.957239][ T4981] device wireguard0 entered promiscuous mode [ 98.967667][ T4983] process 'syz.4.196' launched './file2' with NULL argv: empty string added [ 99.081743][ T21] usb 3-1: New USB device found, idVendor=0403, idProduct=dafe, bcdDevice= 0.c4 [ 99.097149][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.111670][ T21] usb 3-1: Product: syz [ 99.116093][ T21] usb 3-1: Manufacturer: syz [ 99.128340][ T21] usb 3-1: SerialNumber: syz [ 99.173342][ T21] usb 3-1: config 0 descriptor?? [ 99.201042][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 99.602914][ T4367] usb 3-1: USB disconnect, device number 3 [ 99.809739][ T5010] input: syz1 as /devices/virtual/input/input10 [ 99.819631][ T150] block nbd1: Attempted send on invalid socket [ 99.826001][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.837635][ T5010] F2FS-fs (nbd1): Unable to read 1th superblock [ 99.845308][ T150] block nbd1: Attempted send on invalid socket [ 99.853185][ T150] blk_update_request: I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.864250][ T5010] F2FS-fs (nbd1): Unable to read 2th superblock [ 100.825095][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.833449][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.840863][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.876831][ T5027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'. [ 100.911635][ T5027] device wireguard0 entered promiscuous mode [ 101.176790][ T5039] device syzkaller0 entered promiscuous mode [ 106.260377][ T5061] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.111161][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.120549][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.131434][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.172435][ T5074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.224'. [ 108.797946][ T5088] netlink: 56 bytes leftover after parsing attributes in process `syz.2.225'. [ 108.823077][ T5089] input: syz1 as /devices/virtual/input/input11 [ 109.562538][ T150] block nbd1: Attempted send on invalid socket [ 109.568724][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.587367][ T5087] F2FS-fs (nbd1): Unable to read 1th superblock [ 109.618262][ T263] block nbd1: Attempted send on invalid socket [ 109.625840][ T263] blk_update_request: I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.637052][ T5087] F2FS-fs (nbd1): Unable to read 2th superblock [ 109.719522][ T5094] tunl0: Master is either lo or non-ether device [ 110.141598][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.087987][ T5104] netlink: 52 bytes leftover after parsing attributes in process `syz.4.234'. [ 111.168997][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 111.263190][ T5111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.311715][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 111.494095][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.506692][ T7] usb 1-1: config 0 has no interface number 0 [ 111.522827][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.538671][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.554765][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.582339][ T7] usb 1-1: config 0 descriptor?? [ 111.642631][ T7] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.679029][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.697933][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.720934][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.767985][ T5116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.238'. [ 111.804824][ T5104] syz.4.234 (5104) used greatest stack depth: 20832 bytes left [ 111.855397][ T5096] udc-core: couldn't find an available UDC or it's busy [ 111.891834][ T5096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.908427][ T5096] udc-core: couldn't find an available UDC or it's busy [ 112.747649][ T5096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.695783][ T4230] usb 1-1: USB disconnect, device number 2 [ 115.677210][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.685664][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.693196][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.727277][ T5154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'. [ 115.906385][ T5156] device wireguard0 entered promiscuous mode [ 116.601710][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.652402][ T5168] input: syz1 as /devices/virtual/input/input12 [ 116.700939][ T150] block nbd4: Attempted send on invalid socket [ 116.707258][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.720834][ T5168] F2FS-fs (nbd4): Unable to read 1th superblock [ 116.738362][ T150] block nbd4: Attempted send on invalid socket [ 116.748765][ T150] blk_update_request: I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.760400][ T5168] F2FS-fs (nbd4): Unable to read 2th superblock [ 117.075982][ T5177] netlink: 80 bytes leftover after parsing attributes in process `syz.4.258'. [ 117.091797][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 117.119340][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.152368][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.175836][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 117.281986][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 117.301610][ T21] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 117.309899][ T21] usb 2-1: Manufacturer: syz [ 117.317272][ T21] usb 2-1: config 0 descriptor?? [ 117.833879][ T21] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 117.883662][ T21] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 117.921987][ T21] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 120.228033][ T5197] block device autoloading is deprecated and will be removed. [ 120.339300][ T5205] device vlan2 entered promiscuous mode [ 120.382910][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 120.958534][ T5211] netlink: 'syz.0.268': attribute type 27 has an invalid length. [ 121.684047][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.692156][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.087104][ T21] usb 2-1: USB disconnect, device number 4 [ 124.043213][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.132507][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.669806][ T374] Bluetooth: hci5: Frame reassembly failed (-84) [ 125.918735][ T5211] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.932399][ T5211] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.945242][ T5211] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.955347][ T5211] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.273589][ T5211] syz.0.268 (5211) used greatest stack depth: 20480 bytes left [ 126.292234][ T5273] tipc: Started in network mode [ 126.310443][ T5273] tipc: Node identity 800000000000000002, cluster identity 4711 [ 126.345184][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.353509][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.360872][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.384290][ T5275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 126.536114][ T5282] device wireguard0 entered promiscuous mode [ 128.233119][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 128.241258][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 128.473788][ T5303] tipc: Enabling of bearer rejected, failed to enable media [ 128.530268][ T5309] device syzkaller0 entered promiscuous mode [ 128.701670][ T4367] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.111747][ T4367] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 129.128377][ T4367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.142522][ T4367] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.156562][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.169614][ T4367] usb 5-1: config 0 descriptor?? [ 129.225199][ T4367] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 129.748354][ T5323] tmpfs: Unknown parameter 'grpquota' [ 130.321704][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 130.383870][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 131.190290][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.198835][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.206367][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.243579][ T5340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'. [ 131.390039][ T5342] device wireguard0 entered promiscuous mode [ 131.489456][ T4367] usb 5-1: USB disconnect, device number 2 [ 131.612521][ T5349] device syzkaller0 entered promiscuous mode [ 131.819139][ T26] audit: type=1326 audit(1762364624.504:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 132.401592][ T4230] Bluetooth: hci5: command 0x1009 tx timeout [ 132.723594][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.729960][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.759327][ T5375] netlink: 76 bytes leftover after parsing attributes in process `syz.0.315'. [ 134.031280][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.039991][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.047674][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.098730][ T5385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 134.131208][ T5385] device wireguard0 entered promiscuous mode [ 134.299879][ T5393] device syzkaller0 entered promiscuous mode [ 136.191190][ T5401] capability: warning: `syz.1.326' uses deprecated v2 capabilities in a way that may be insecure [ 136.481813][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.639775][ T5427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'. [ 136.686720][ T5427] device wireguard0 entered promiscuous mode [ 136.982294][ T21] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 137.025432][ T21] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 137.461752][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.470832][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.551711][ T21] usb 5-1: Product: syz [ 137.555923][ T21] usb 5-1: Manufacturer: Ћ [ 137.569756][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 137.607972][ T5436] netlink: 'syz.4.337': attribute type 10 has an invalid length. [ 137.618291][ T21] usb 5-1: can't set config #1, error -71 [ 138.454840][ T5445] binder: 5444:5445 ioctl c0306201 0 returned -14 [ 138.491698][ T21] usb 5-1: USB disconnect, device number 3 [ 138.515643][ T5445] binder: BINDER_SET_CONTEXT_MGR already set [ 138.522343][ T5445] binder: 5444:5445 ioctl 4018620d 200000004a80 returned -16 [ 138.573045][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.580925][ T5436] team0: Port device bond0 added [ 138.624204][ T5455] device syzkaller0 entered promiscuous mode [ 138.701120][ T5453] tipc: Enabling of bearer rejected, failed to enable media [ 138.807991][ T5466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.832472][ T5465] lo speed is unknown, defaulting to 1000 [ 138.883220][ T5470] netlink: 52 bytes leftover after parsing attributes in process `syz.2.347'. [ 138.935078][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.943369][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.950966][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.976821][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.350'. [ 139.002036][ T5474] device wireguard0 entered promiscuous mode [ 139.399414][ T5488] binder: 5487:5488 ioctl c0306201 0 returned -14 [ 139.551450][ T5499] device syzkaller0 entered promiscuous mode [ 139.693819][ T5501] device bond1 entered promiscuous mode [ 139.702169][ T5501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.916945][ T5517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.934169][ T5517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.943729][ T5517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.002564][ T5518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 140.249902][ T5516] netlink: 80 bytes leftover after parsing attributes in process `syz.0.362'. [ 140.719494][ T5535] 9pnet_virtio: no channels available for device syz [ 141.819943][ T5556] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 142.272002][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.287981][ T5574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 142.330748][ T5576] device wireguard0 entered promiscuous mode [ 142.861242][ T5590] 9pnet: Insufficient options for proto=fd [ 142.900781][ T5593] netlink: 108 bytes leftover after parsing attributes in process `syz.2.384'. [ 142.931917][ T5590] netlink: 64 bytes leftover after parsing attributes in process `syz.4.383'. [ 143.223330][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.621666][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 143.632155][ T5608] device syzkaller0 entered promiscuous mode [ 143.641828][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50786, setting to 1024 [ 143.661699][ T5606] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 143.680905][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.711619][ T1111] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.730926][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.758859][ T1111] usb 5-1: config 0 descriptor?? [ 143.801904][ T5590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.914889][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.930103][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.938514][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.999152][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.390'. [ 144.334579][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 144.400060][ T1111] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 144.441799][ T1111] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 144.682248][ T5630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.395'. [ 145.899747][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 146.298937][ T5692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.313440][ T5692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.322206][ T5692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.485523][ T1108] usb 5-1: USB disconnect, device number 4 [ 146.850161][ T5699] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 147.995056][ T5717] devpts: called with bogus options [ 148.064455][ T26] audit: type=1326 audit(1762364640.754:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 148.149156][ T26] audit: type=1326 audit(1762364640.784:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 148.240091][ T5716] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[5716] [ 148.295336][ T26] audit: type=1326 audit(1762364640.784:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 148.456262][ T26] audit: type=1326 audit(1762364640.784:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 148.642690][ T26] audit: type=1326 audit(1762364640.784:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 148.728087][ T5724] 9pnet_virtio: no channels available for device syz [ 148.777728][ T26] audit: type=1326 audit(1762364640.784:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 148.828451][ T26] audit: type=1326 audit(1762364640.784:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 148.904346][ T26] audit: type=1326 audit(1762364640.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 149.049400][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 149.050354][ T26] audit: type=1326 audit(1762364640.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 149.142190][ T26] audit: type=1326 audit(1762364640.804:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5709 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 150.070085][ T5755] fuse: Unknown parameter 'fd0x0000000000000003' [ 151.053889][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 153.113708][ T5792] devpts: called with bogus options [ 153.348973][ T5794] netlink: 'syz.0.441': attribute type 5 has an invalid length. [ 153.464438][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 153.464450][ T26] audit: type=1326 audit(1762364646.154:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 153.590328][ T5801] fuse: Unknown parameter 'fd0x0000000000000003' [ 153.598382][ T26] audit: type=1326 audit(1762364646.194:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 153.691569][ T26] audit: type=1326 audit(1762364646.194:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 153.711695][ T4238] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.772513][ T26] audit: type=1326 audit(1762364646.194:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 153.876440][ T26] audit: type=1326 audit(1762364646.194:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 153.991652][ T4238] usb 2-1: Using ep0 maxpacket: 32 [ 154.010634][ T26] audit: type=1326 audit(1762364646.194:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 154.061706][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.095464][ T5818] device geneve2 entered promiscuous mode [ 154.101420][ T26] audit: type=1326 audit(1762364646.194:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 154.111709][ T4238] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.176832][ T4238] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.206037][ T4238] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.211588][ T26] audit: type=1326 audit(1762364646.194:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 154.231115][ T4238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.285894][ T4238] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.316100][ T4238] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.331541][ T26] audit: type=1326 audit(1762364646.194:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 154.356909][ T4238] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.371910][ T4230] usb 1-1: no configurations [ 154.376549][ T4230] usb 1-1: can't read configurations, error -22 [ 154.397069][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.415836][ T26] audit: type=1326 audit(1762364646.194:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 154.425464][ T4238] usb 2-1: config 0 descriptor?? [ 154.541648][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.719760][ T5798] udc-core: couldn't find an available UDC or it's busy [ 154.731049][ T5828] 9pnet: p9_fd_create_tcp (5828): problem connecting socket to 127.0.0.1 [ 154.742653][ T4238] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.756092][ T5798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 154.818435][ T4238] usb 2-1: USB disconnect, device number 5 [ 154.832970][ T4230] usb 1-1: no configurations [ 154.839883][ T4230] usb 1-1: can't read configurations, error -22 [ 154.848545][ T4238] usblp0: removed [ 154.858071][ T4230] usb usb1-port1: attempt power cycle [ 155.271665][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.402295][ T4230] usb 1-1: no configurations [ 155.407056][ T4230] usb 1-1: can't read configurations, error -22 [ 155.545132][ T5844] loop1: detected capacity change from 0 to 1024 [ 155.613826][ T5844] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 155.631683][ T5844] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.351898][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 156.420079][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.551785][ T4230] usb 1-1: no configurations [ 156.556552][ T4230] usb 1-1: can't read configurations, error -22 [ 156.557086][ T5861] netlink: 'syz.2.458': attribute type 3 has an invalid length. [ 156.576995][ T4230] usb usb1-port1: unable to enumerate USB device [ 157.123765][ T5883] mmap: syz.3.465 (5883) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 157.351647][ T4367] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.772654][ T5897] tipc: Enabling of bearer rejected, failed to enable media [ 157.939511][ T5902] loop0: detected capacity change from 0 to 1024 [ 158.005977][ T5902] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 158.023806][ T5902] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.135149][ T5902] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 158.171760][ T4367] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 158.221971][ T4367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 158.266202][ T4367] usb 5-1: Product: syz [ 158.288529][ T4367] usb 5-1: Manufacturer: syz [ 158.317336][ T4367] usb 5-1: SerialNumber: syz [ 158.342319][ T4367] usb 5-1: config 0 descriptor?? [ 158.403395][ T4367] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 158.419392][ T5910] device syzkaller0 entered promiscuous mode [ 158.430406][ T4367] dvb-usb: bulk message failed: -22 (2/0) [ 158.453459][ T4367] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.501832][ T4367] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 158.510589][ T4367] usb 5-1: media controller created [ 158.540610][ T4367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.352713][ T4367] cxusb: set interface failed [ 159.359276][ T4367] dvb-usb: bulk message failed: -22 (1/0) [ 159.535901][ T4367] DVB: Unable to find symbol mt352_attach() [ 159.546746][ T4367] dvb-usb: bulk message failed: -22 (5/0) [ 159.581629][ T4367] zl10353_read_register: readreg error (reg=127, ret==-121) [ 159.619625][ T4367] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 159.831603][ T4367] rc_core: IR keymap rc-dvico-mce not found [ 159.837650][ T4367] Registered IR keymap rc-empty [ 159.881860][ T4367] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 159.919339][ T4367] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 159.979206][ T4367] dvb-usb: schedule remote query interval to 100 msecs. [ 159.986897][ T4367] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 160.047234][ T4367] usb 5-1: USB disconnect, device number 5 [ 160.156927][ T4367] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 160.287215][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.301109][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.309472][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.104461][ T5949] loop1: detected capacity change from 0 to 1024 [ 162.136176][ T5952] device syzkaller0 entered promiscuous mode [ 162.166042][ T5949] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 162.193650][ T5949] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.539405][ T5949] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 162.857487][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.872434][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.880980][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.452640][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.113016][ T6004] device syzkaller0 entered promiscuous mode [ 166.400628][ T6019] device syzkaller0 entered promiscuous mode [ 166.684586][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.506'. [ 166.973339][ T6026] loop4: detected capacity change from 0 to 1024 [ 167.097080][ T6033] vivid-003: ================= START STATUS ================= [ 167.105371][ T6033] vivid-003: ================== END STATUS ================== [ 167.118626][ T6026] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 167.158158][ T6026] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.290199][ T6026] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 167.421644][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.331099][ T6041] 9pnet_virtio: no channels available for device syz [ 168.431629][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 168.573315][ T21] usb 2-1: config 1 interface 0 has no altsetting 0 [ 168.746544][ T21] usb 2-1: New USB device found, idVendor=0596, idProduct=0502, bcdDevice= 0.40 [ 168.765680][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.807638][ T21] usb 2-1: Product: syz [ 168.841556][ T21] usb 2-1: Manufacturer: syz [ 168.858587][ T21] usb 2-1: SerialNumber: syz [ 169.540323][ T21] usbhid 2-1:1.0: can't add hid device: -71 [ 170.380832][ T21] usbhid: probe of 2-1:1.0 failed with error -71 [ 170.504373][ T21] usb 2-1: USB disconnect, device number 6 [ 170.531912][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.586582][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.519'. [ 170.665710][ T6087] device wireguard0 entered promiscuous mode [ 170.709175][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 170.738004][ T6094] loop4: detected capacity change from 0 to 1024 [ 170.816104][ T6094] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 170.881854][ T6094] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.990309][ T6094] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 171.335211][ T6107] overlayfs: unrecognized mount option "verity=require" or missing value [ 171.676999][ T6118] vivid-001: ================= START STATUS ================= [ 171.684851][ T6118] vivid-001: ================== END STATUS ================== [ 171.761882][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.770218][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.777768][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.801339][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.532'. [ 171.961617][ T1111] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.076729][ T6129] device wireguard0 entered promiscuous mode [ 172.211665][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 172.341814][ T1111] usb 1-1: config 1 interface 0 has no altsetting 0 [ 172.507890][ T6143] netlink: 80 bytes leftover after parsing attributes in process `syz.2.534'. [ 172.594271][ T1111] usb 1-1: New USB device found, idVendor=0596, idProduct=0502, bcdDevice= 0.40 [ 172.617166][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.648096][ T1111] usb 1-1: Product: syz [ 172.660051][ T1111] usb 1-1: Manufacturer: syz [ 172.669386][ T1111] usb 1-1: SerialNumber: syz [ 174.416679][ T1111] usbhid 1-1:1.0: can't add hid device: -71 [ 174.433574][ T1111] usbhid: probe of 1-1:1.0 failed with error -71 [ 174.480231][ T1111] usb 1-1: USB disconnect, device number 8 [ 174.656098][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 175.487593][ T6188] device wireguard0 entered promiscuous mode [ 175.602022][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 175.610428][ T6195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.859477][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 175.869617][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 175.880406][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 175.886691][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 175.892997][ T6201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.552'. [ 176.395243][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 176.466156][ T6186] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 176.914821][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 177.397759][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.563'. [ 177.426024][ T6236] device wireguard0 entered promiscuous mode [ 178.704381][ T6268] serio: Serial port ttyS3 [ 178.894785][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'. [ 179.535494][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.575'. [ 181.747012][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.585'. [ 181.770040][ T6325] device erspan0 entered promiscuous mode [ 181.966989][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.589'. [ 182.019233][ T6333] device wireguard0 entered promiscuous mode [ 182.857164][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 182.857177][ T26] audit: type=1326 audit(1762364675.544:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 182.921571][ T26] audit: type=1326 audit(1762364675.584:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.007371][ T6352] tipc: Started in network mode [ 183.012352][ T26] audit: type=1326 audit(1762364675.584:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.051336][ T6352] tipc: Node identity b6a61a9685a1, cluster identity 4711 [ 183.069695][ T6352] tipc: Enabled bearer , priority 0 [ 183.271747][ T6356] device syzkaller0 entered promiscuous mode [ 183.288061][ T26] audit: type=1326 audit(1762364675.584:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.489290][ T26] audit: type=1326 audit(1762364675.584:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.521774][ T6374] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 183.583572][ T26] audit: type=1326 audit(1762364675.584:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.628551][ T26] audit: type=1326 audit(1762364675.584:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.665153][ T26] audit: type=1326 audit(1762364675.594:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.697863][ T26] audit: type=1326 audit(1762364675.594:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.704450][ T6343] netlink: 'syz.3.593': attribute type 3 has an invalid length. [ 183.722988][ T26] audit: type=1326 audit(1762364675.594:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 183.774349][ T6380] team0 (unregistering): Port device team_slave_0 removed [ 183.781553][ T6343] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 183.798734][ T6380] team0 (unregistering): Port device team_slave_1 removed [ 183.852757][ T6343] syz.3.593 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.896463][ T6377] tipc: Resetting bearer [ 183.937482][ T6377] tipc: Disabling bearer [ 183.957675][ T6343] batman_adv: batadv0: Adding interface: gretap1 [ 183.965540][ T6343] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.000337][ T6343] batman_adv: batadv0: Interface activated: gretap1 [ 184.189759][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 184.934630][ T6394] device wireguard0 entered promiscuous mode [ 185.500264][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 185.575033][ T6424] sctp: failed to load transform for md5: -2 [ 185.729509][ T6446] devpts: called with bogus options [ 185.790103][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.624'. [ 185.835722][ T6449] device wireguard0 entered promiscuous mode [ 187.358355][ T6477] netlink: 56 bytes leftover after parsing attributes in process `syz.1.634'. [ 188.093659][ T6490] binder: BINDER_SET_CONTEXT_MGR already set [ 188.206293][ T6489] 9pnet_virtio: no channels available for device syz [ 188.589145][ T6490] binder: 6488:6490 ioctl 4018620d 200000004a80 returned -16 [ 189.968898][ T6528] netlink: 'syz.1.651': attribute type 3 has an invalid length. [ 190.395893][ T6540] netlink: 56 bytes leftover after parsing attributes in process `syz.2.654'. [ 190.490504][ T6542] devpts: called with bogus options [ 190.559072][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 190.559086][ T26] audit: type=1326 audit(1762364683.244:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 190.618845][ T26] audit: type=1326 audit(1762364683.244:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 190.793978][ T26] audit: type=1326 audit(1762364683.254:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 190.816958][ T26] audit: type=1326 audit(1762364683.254:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 190.849723][ T26] audit: type=1326 audit(1762364683.254:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 190.902008][ T26] audit: type=1326 audit(1762364683.254:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 190.925418][ T26] audit: type=1326 audit(1762364683.274:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 190.972024][ T26] audit: type=1326 audit(1762364683.284:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 191.147861][ T26] audit: type=1326 audit(1762364683.284:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 191.276994][ T26] audit: type=1326 audit(1762364683.284:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ff65ec6c9 code=0x7ffc0000 [ 191.714905][ T6570] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x91 [ 191.896182][ T6576] netlink: 'syz.1.665': attribute type 3 has an invalid length. [ 192.126725][ T6584] serio: Serial port ttyS3 [ 193.245747][ T6605] device vlan2 entered promiscuous mode [ 193.355433][ T6614] binder: 6613:6614 ioctl c0306201 0 returned -14 [ 194.872254][ T6628] devpts: called with bogus options [ 195.025411][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.032113][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.861241][ T6637] serio: Serial port ttyS3 [ 195.943112][ T6644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.980676][ T6647] netlink: 'syz.1.688': attribute type 3 has an invalid length. [ 196.008893][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 196.176796][ T6656] binder: 6652:6656 ioctl c0306201 0 returned -14 [ 196.203472][ T6654] device wireguard0 entered promiscuous mode [ 196.823204][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.697'. [ 197.456918][ T6700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.701'. [ 197.497638][ T6704] binder: 6703:6704 ioctl c0306201 0 returned -14 [ 197.722042][ T6688] devpts: called with bogus options [ 197.930180][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.938394][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.945982][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.218081][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.706'. [ 199.489552][ T6719] device wireguard0 entered promiscuous mode [ 200.101209][ T6724] loop1: detected capacity change from 0 to 1024 [ 200.185310][ T6724] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 200.236099][ T6724] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.385272][ T6724] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 200.767623][ T6740] device syzkaller0 entered promiscuous mode [ 201.005560][ T6752] netlink: 'syz.1.719': attribute type 3 has an invalid length. [ 201.018389][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 201.104157][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.132959][ T6754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'. [ 201.295484][ T6763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.724'. [ 201.316766][ T6765] device wireguard0 entered promiscuous mode [ 201.560073][ T6776] device syzkaller0 entered promiscuous mode [ 201.794409][ T6788] netlink: 'syz.4.730': attribute type 13 has an invalid length. [ 201.831672][ T6788] netlink: 'syz.4.730': attribute type 17 has an invalid length. [ 201.944815][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.985439][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.014492][ T6788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.063990][ T6788] syz.4.730 (6788) used greatest stack depth: 20160 bytes left [ 202.323730][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.332194][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.339580][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.389283][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.739'. [ 202.520853][ T6825] device wireguard0 entered promiscuous mode [ 202.860777][ T6838] netlink: 108 bytes leftover after parsing attributes in process `syz.4.748'. [ 202.944786][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 205.484786][ T6888] netlink: 'syz.3.765': attribute type 21 has an invalid length. [ 205.565603][ T6888] netlink: 156 bytes leftover after parsing attributes in process `syz.3.765'. [ 206.414108][ T6893] netlink: 108 bytes leftover after parsing attributes in process `syz.3.768'. [ 207.437158][ T6913] netlink: 'syz.4.774': attribute type 3 has an invalid length. [ 208.124952][ T6927] netlink: 80 bytes leftover after parsing attributes in process `syz.2.779'. [ 208.684558][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 209.388779][ T6982] netlink: 'syz.2.800': attribute type 3 has an invalid length. [ 209.389519][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 209.507995][ T6983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.584461][ T6987] bond1: (slave macsec0): Error -34 calling dev_set_mtu [ 209.855243][ T7000] device vlan2 entered promiscuous mode [ 210.041377][ T7020] netlink: 'syz.3.813': attribute type 3 has an invalid length. [ 210.114300][ T7021] serio: Serial port ttyS3 [ 210.146429][ T7026] netlink: 108 bytes leftover after parsing attributes in process `syz.1.814'. [ 210.291069][ T7034] netlink: 'syz.3.816': attribute type 12 has an invalid length. [ 211.709519][ T7072] netlink: 'syz.0.827': attribute type 3 has an invalid length. [ 211.821809][ T7076] device vlan2 entered promiscuous mode [ 212.127720][ T7084] devpts: called with bogus options [ 212.176223][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 212.182943][ T26] audit: type=1326 audit(1762364704.844:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 213.036646][ T26] audit: type=1326 audit(1762364704.844:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 213.433035][ T26] audit: type=1326 audit(1762364704.844:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 213.582325][ T7088] team0: Port device bond0 removed [ 214.314635][ T7091] netlink: 80 bytes leftover after parsing attributes in process `syz.3.833'. [ 214.360713][ T26] audit: type=1326 audit(1762364704.844:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 214.572249][ T7101] device syzkaller0 entered promiscuous mode [ 214.612406][ T26] audit: type=1326 audit(1762364704.844:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 214.684734][ T26] audit: type=1326 audit(1762364704.844:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 214.725001][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'. [ 214.749523][ T7108] device syzkaller0 entered promiscuous mode [ 214.758495][ T26] audit: type=1326 audit(1762364704.854:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 214.790769][ T26] audit: type=1326 audit(1762364704.854:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 214.821843][ T26] audit: type=1326 audit(1762364704.854:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 214.883532][ T26] audit: type=1326 audit(1762364704.854:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b879fe6c9 code=0x7ffc0000 [ 215.329415][ T7123] netlink: 80 bytes leftover after parsing attributes in process `syz.4.846'. [ 215.670704][ T7135] netlink: 'syz.2.852': attribute type 3 has an invalid length. [ 216.043251][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.858'. [ 216.110387][ T7155] tipc: Started in network mode [ 216.126575][ T7155] tipc: Node identity bef00d0e1591, cluster identity 4711 [ 216.140414][ T7155] tipc: Enabled bearer , priority 0 [ 216.178209][ T7157] device syzkaller0 entered promiscuous mode [ 216.243786][ T7155] tipc: Resetting bearer [ 216.298683][ T7154] tipc: Resetting bearer [ 216.339907][ T7154] tipc: Disabling bearer [ 216.357164][ T7170] device lo entered promiscuous mode [ 216.363484][ T7170] device tunl0 entered promiscuous mode [ 216.370038][ T7170] device gre0 entered promiscuous mode [ 216.377572][ T7170] device gretap0 entered promiscuous mode [ 216.384499][ T7170] device erspan0 entered promiscuous mode [ 216.391220][ T7170] device ip_vti0 entered promiscuous mode [ 216.398479][ T7170] device ip6_vti0 entered promiscuous mode [ 216.407218][ T7170] device sit0 entered promiscuous mode [ 216.419302][ T7170] device ip6tnl0 entered promiscuous mode [ 216.429798][ T7170] device ip6gre0 entered promiscuous mode [ 216.443675][ T7170] device syz_tun entered promiscuous mode [ 216.462814][ T7170] device ip6gretap0 entered promiscuous mode [ 216.470315][ T7170] device bridge0 entered promiscuous mode [ 216.483296][ T7170] device vcan0 entered promiscuous mode [ 216.489088][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.497291][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.504786][ T7170] device bond0 entered promiscuous mode [ 216.510642][ T7170] device bond_slave_0 entered promiscuous mode [ 216.522654][ T7170] device bond_slave_1 entered promiscuous mode [ 216.529887][ T7170] device dummy0 entered promiscuous mode [ 216.546048][ T7170] device nlmon0 entered promiscuous mode [ 216.577729][ T7170] device caif0 entered promiscuous mode [ 216.592800][ T7170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.512362][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 217.911452][ T7262] netlink: 332 bytes leftover after parsing attributes in process `syz.4.895'. [ 217.930683][ T7267] netlink: 'syz.2.896': attribute type 6 has an invalid length. [ 217.971693][ T7262] netlink: 'syz.4.895': attribute type 9 has an invalid length. [ 218.009733][ T7262] netlink: 'syz.4.895': attribute type 5 has an invalid length. [ 218.181152][ T7274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.897'. [ 218.762182][ T7280] netlink: 'syz.1.901': attribute type 3 has an invalid length. [ 218.788013][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 219.046726][ T7284] input: syz1 as /devices/virtual/input/input15 [ 219.081582][ T263] block nbd1: Attempted send on invalid socket [ 219.087893][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.099278][ T7284] F2FS-fs (nbd1): Unable to read 1th superblock [ 219.107446][ T263] block nbd1: Attempted send on invalid socket [ 219.113777][ T263] blk_update_request: I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.125426][ T7284] F2FS-fs (nbd1): Unable to read 2th superblock [ 221.419040][ T7315] netlink: 51 bytes leftover after parsing attributes in process `syz.0.916'. [ 221.484886][ T7316] device vlan1 entered promiscuous mode [ 222.395763][ T7338] device syzkaller0 entered promiscuous mode [ 222.452044][ T7339] netlink: 56 bytes leftover after parsing attributes in process `syz.2.921'. [ 223.041767][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 223.752645][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.934'. [ 223.866239][ T7368] device syzkaller0 entered promiscuous mode [ 226.821926][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.957'. [ 228.545462][ T7439] netlink: 56 bytes leftover after parsing attributes in process `syz.3.961'. [ 228.794698][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 229.889648][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 230.002806][ T7500] team0: No ports can be present during mode change [ 232.436486][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 232.762191][ T7570] netlink: 80 bytes leftover after parsing attributes in process `syz.1.992'. [ 233.066779][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 233.374037][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 233.427760][ T7606] device bond_slave_0 entered promiscuous mode [ 233.434403][ T7606] device bond_slave_1 entered promiscuous mode [ 233.448701][ T7606] device macvtap1 entered promiscuous mode [ 233.462303][ T7606] device bond0 entered promiscuous mode [ 233.472360][ T7606] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 233.480835][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 234.034882][ T7616] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1010'. [ 234.587207][ T7658] device bond1 entered promiscuous mode [ 235.160583][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 235.266884][ T7679] device macvtap2 entered promiscuous mode [ 235.342810][ T7679] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 235.636799][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 235.816809][ T7706] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 235.857080][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1029'. [ 235.926673][ T7710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1029'. [ 236.430849][ T7736] device macvtap3 entered promiscuous mode [ 236.459344][ T7736] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 238.190484][ T7786] __nla_validate_parse: 2 callbacks suppressed [ 238.190501][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 238.292062][ T7786] device macvtap0 entered promiscuous mode [ 238.305809][ T7786] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 238.413483][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 239.341115][ T7829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.360646][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'. [ 239.533904][ T7829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.699987][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 239.744621][ T7847] device bond_slave_0 entered promiscuous mode [ 239.750877][ T7847] device bond_slave_1 entered promiscuous mode [ 239.758398][ T7847] device macvtap1 entered promiscuous mode [ 239.764538][ T7847] device bond0 entered promiscuous mode [ 239.771422][ T7847] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 239.818127][ T7829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.903297][ T7829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.990242][ T7856] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1071'. [ 240.347569][ T7829] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.651900][ T7829] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.072603][ T7829] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.132548][ T7829] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.304935][ T7864] tipc: Started in network mode [ 241.309833][ T7864] tipc: Node identity a2c390bb42e5, cluster identity 4711 [ 241.404206][ T7864] tipc: Enabled bearer , priority 0 [ 241.460157][ T7868] tipc: Resetting bearer [ 242.522098][ T7] tipc: Node number set to 3760623803 [ 242.691041][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 242.832868][ T7882] device macvtap0 entered promiscuous mode [ 242.838716][ T7882] device bond0 entered promiscuous mode [ 242.922877][ T7882] device bond_slave_0 entered promiscuous mode [ 242.951245][ T7879] infiniband !yz!: set down [ 242.955577][ T7882] device bond_slave_1 entered promiscuous mode [ 242.970150][ T7879] infiniband !yz!: added team_slave_0 [ 242.975214][ T7882] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 243.070205][ T7879] RDS/IB: !yz!: added [ 243.100594][ T7879] smc: adding ib device !yz! with port count 1 [ 243.136508][ T7879] smc: ib device !yz! port 1 has pnetid [ 243.277969][ T7899] serio: Serial port ttyS3 [ 244.011213][ T7923] serio: Serial port ttyS3 [ 244.960666][ T7937] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1092'. [ 245.278578][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 245.384196][ T7949] device macvtap1 entered promiscuous mode [ 245.441876][ T7949] device bond0 entered promiscuous mode [ 245.461131][ T7949] device bond_slave_0 entered promiscuous mode [ 245.481455][ T7949] device bond_slave_1 entered promiscuous mode [ 245.504902][ T7949] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 245.540522][ T7952] tipc: Enabling of bearer rejected, already enabled [ 245.555463][ T7961] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 247.777851][ T7990] netlink: 'syz.0.1113': attribute type 3 has an invalid length. [ 247.786181][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 247.862948][ T7992] device macvtap1 entered promiscuous mode [ 247.869600][ T7992] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 247.950446][ T7996] tipc: Enabling of bearer rejected, already enabled [ 248.341677][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 248.701009][ T8031] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1125'. [ 249.298978][ T8040] device syzkaller0 entered promiscuous mode [ 250.043357][ T8054] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1134'. [ 250.062623][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1136'. [ 250.087165][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1136'. [ 250.136889][ T8051] netlink: 'syz.4.1134': attribute type 13 has an invalid length. [ 250.611842][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.619499][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.000565][ T8069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1138'. [ 251.495669][ T8051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.523493][ T8051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.762521][ T8051] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.772068][ T8051] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.780942][ T8051] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.789897][ T8051] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.910705][ T8051] device bond0 left promiscuous mode [ 251.916336][ T8051] device bond_slave_0 left promiscuous mode [ 251.922861][ T8051] device bond_slave_1 left promiscuous mode [ 253.194332][ T8121] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1149'. [ 253.233346][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 253.267056][ T8119] device bridge0 entered promiscuous mode [ 253.292646][ T8119] device bridge0 left promiscuous mode [ 253.514883][ T8127] device syzkaller0 entered promiscuous mode [ 254.238893][ T8146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1161'. [ 254.329794][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 254.354053][ T8148] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 254.399574][ T8148] device bond2 entered promiscuous mode [ 254.409099][ T8148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.608043][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.636780][ T8158] bond0: (slave rose0): Enslaving as an active interface with an up link [ 254.752124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 254.759886][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 254.891200][ T8173] device syzkaller0 entered promiscuous mode [ 254.966584][ T8181] input: syz1 as /devices/virtual/input/input16 [ 254.990980][ T263] block nbd4: Attempted send on invalid socket [ 254.997677][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.008936][ T8181] F2FS-fs (nbd4): Unable to read 1th superblock [ 255.017742][ T263] block nbd4: Attempted send on invalid socket [ 255.024175][ T263] blk_update_request: I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.035580][ T8181] F2FS-fs (nbd4): Unable to read 2th superblock [ 255.604064][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.610362][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.889591][ T8192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.962179][ T8190] tipc: Enabling of bearer rejected, failed to enable media [ 256.207196][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 256.389181][ T8210] device macvtap2 entered promiscuous mode [ 256.405749][ T8210] device bond0 entered promiscuous mode [ 256.415047][ T8210] device bond_slave_0 entered promiscuous mode [ 256.422566][ T8210] device bond_slave_1 entered promiscuous mode [ 256.518526][ T8223] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1177'. [ 256.518640][ T8210] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 256.681348][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 256.808334][ T8217] device bond0 left promiscuous mode [ 256.870767][ T8217] device bond_slave_0 left promiscuous mode [ 256.956388][ T8217] device bond_slave_1 left promiscuous mode [ 258.789576][ T8252] tipc: Enabled bearer , priority 0 [ 258.902319][ T8257] device syzkaller0 entered promiscuous mode [ 258.963433][ T8252] tipc: Resetting bearer [ 258.990012][ T8251] tipc: Resetting bearer [ 259.042289][ T8251] tipc: Disabling bearer [ 259.104025][ T8268] netlink: 'syz.3.1189': attribute type 13 has an invalid length. [ 259.139027][ T8268] netlink: 'syz.3.1189': attribute type 17 has an invalid length. [ 259.167768][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.258808][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.432178][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.451238][ T8268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.482239][ T8295] tipc: Enabling of bearer rejected, already enabled [ 259.755194][ T8308] netlink: 'syz.4.1202': attribute type 3 has an invalid length. [ 260.425291][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1207'. [ 261.245331][ T8341] input: syz1 as /devices/virtual/input/input17 [ 261.269163][ T150] block nbd4: Attempted send on invalid socket [ 261.275612][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.286785][ T8341] F2FS-fs (nbd4): Unable to read 1th superblock [ 261.294046][ T150] block nbd4: Attempted send on invalid socket [ 261.300359][ T150] blk_update_request: I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.311757][ T8341] F2FS-fs (nbd4): Unable to read 2th superblock [ 262.288483][ T8355] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 262.449568][ T8363] 8021q: VLANs not supported on caif0 [ 262.604951][ T8371] IPVS: rr: FWM 3 0x00000003 - no destination available [ 263.155219][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1220'. [ 263.257712][ T8387] input: syz1 as /devices/virtual/input/input18 [ 263.281435][ T150] block nbd1: Attempted send on invalid socket [ 263.288406][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.299745][ T8387] F2FS-fs (nbd1): Unable to read 1th superblock [ 263.307285][ T150] block nbd1: Attempted send on invalid socket [ 263.314206][ T150] blk_update_request: I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.325818][ T8387] F2FS-fs (nbd1): Unable to read 2th superblock [ 264.767426][ T8391] syz.4.1225 (8391) used obsolete PPPIOCDETACH ioctl [ 265.393624][ T8411] 8021q: VLANs not supported on nlmon0 [ 265.411698][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1237'. [ 265.504725][ T8416] device wireguard0 entered promiscuous mode [ 268.045165][ T8471] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1257'. [ 268.110087][ T8471] netlink: 'syz.4.1257': attribute type 12 has an invalid length. [ 268.428394][ T8476] serio: Serial port ttyS3 [ 268.673798][ T8490] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001 [ 268.896874][ T8499] device wg1 entered promiscuous mode [ 268.955632][ T8500] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1266'. [ 269.042016][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 270.162515][ T8520] devpts: called with bogus options [ 270.241957][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 270.241975][ T26] audit: type=1326 audit(1762364762.864:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.421121][ T26] audit: type=1326 audit(1762364762.864:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.506726][ T26] audit: type=1326 audit(1762364762.864:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.596707][ T26] audit: type=1326 audit(1762364762.864:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.656373][ T26] audit: type=1326 audit(1762364762.864:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.708472][ T26] audit: type=1326 audit(1762364762.864:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.771926][ T26] audit: type=1326 audit(1762364762.864:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.832633][ T26] audit: type=1326 audit(1762364762.864:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.862114][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1279'. [ 270.911637][ T26] audit: type=1326 audit(1762364762.864:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 270.992070][ T26] audit: type=1326 audit(1762364762.864:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5d5da6c9 code=0x7ffc0000 [ 271.052956][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 272.890596][ T8543] syz.4.1281 (8543) used greatest stack depth: 18560 bytes left [ 273.095566][ T8573] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 273.504351][ T8580] devpts: called with bogus options [ 274.409529][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 274.443205][ T8600] tipc: Enabling of bearer rejected, failed to enable media [ 274.702571][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1301'. [ 274.738968][ T8611] device wireguard0 entered promiscuous mode [ 275.995309][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 276.194972][ T8663] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 277.162692][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.228525][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 277.244391][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1320'. [ 279.378044][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.385715][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.409129][ T8700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.501872][ T8710] devpts: called with bogus options [ 280.696322][ T8712] serio: Serial port ttyS3 [ 280.861197][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 280.861211][ T26] audit: type=1326 audit(1762364773.544:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 280.977255][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.273269][ T26] audit: type=1326 audit(1762364773.544:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c40ad6c9 code=0x7ffc0000 [ 281.390825][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 281.438310][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 282.996287][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'. [ 284.035452][ T8781] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 284.192246][ T8781] device bond1 entered promiscuous mode [ 284.229894][ T8781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.337757][ T8784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.389026][ T8784] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 284.401885][ T8784] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 284.664435][ T8784] bond1: (slave gre1): making interface the new active one [ 284.671894][ T8784] device gre1 entered promiscuous mode [ 284.679564][ T8784] bond1: (slave gre1): Enslaving as an active interface with an up link [ 284.688894][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 286.761965][ T8818] input: syz1 as /devices/virtual/input/input19 [ 286.784582][ T263] block nbd0: Attempted send on invalid socket [ 286.790919][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.802188][ T8818] F2FS-fs (nbd0): Unable to read 1th superblock [ 286.810218][ T263] block nbd0: Attempted send on invalid socket [ 286.816835][ T263] blk_update_request: I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.827745][ T8818] F2FS-fs (nbd0): Unable to read 2th superblock [ 287.787462][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1366'. [ 287.958641][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 287.967827][ T8839] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1370'. [ 287.989591][ T8839] unsupported nlmsg_type 40 [ 288.006628][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 288.056733][ T8839] [ 288.059187][ T8839] ============================= [ 288.064814][ T8839] WARNING: suspicious RCU usage [ 288.070161][ T8839] syzkaller #0 Not tainted [ 288.075808][ T8839] ----------------------------- [ 288.108083][ T8839] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 288.128952][ T8839] [ 288.128952][ T8839] other info that might help us debug this: [ 288.128952][ T8839] [ 288.221664][ T8839] [ 288.221664][ T8839] rcu_scheduler_active = 2, debug_locks = 1 [ 288.305595][ T8839] 1 lock held by syz.1.1370/8839: [ 288.368506][ T8839] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 288.433554][ T8839] [ 288.433554][ T8839] stack backtrace: [ 288.439491][ T8839] CPU: 1 PID: 8839 Comm: syz.1.1370 Not tainted syzkaller #0 [ 288.446875][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.456957][ T8839] Call Trace: [ 288.460310][ T8839] [ 288.463284][ T8839] dump_stack_lvl+0x168/0x230 [ 288.467986][ T8839] ? load_image+0x3b0/0x3b0 [ 288.472513][ T8839] ? show_regs_print_info+0x20/0x20 [ 288.477739][ T8839] ? lockdep_rcu_suspicious+0x110/0x180 [ 288.483292][ T8839] ? local_bh_enable+0x20/0x20 [ 288.488149][ T8839] rhltable_lookup+0x77b/0x790 [ 288.492925][ T8839] ? mr_mfc_find_parent+0x190/0x190 [ 288.498137][ T8839] ? mark_lock+0x94/0x320 [ 288.502542][ T8839] ? local_bh_enable+0x20/0x20 [ 288.507329][ T8839] ? mark_lock+0x94/0x320 [ 288.511688][ T8839] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 288.517694][ T8839] ? lock_chain_count+0x20/0x20 [ 288.522565][ T8839] mr_mfc_find_any_parent+0xb6/0x1e0 [ 288.527869][ T8839] ? local_bh_enable+0x20/0x20 [ 288.532637][ T8839] ip_mr_forward+0x24c/0xf90 [ 288.537250][ T8839] ipmr_mfc_add+0x2466/0x2eb0 [ 288.542027][ T8839] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 288.546978][ T8839] ? __lock_acquire+0x7c60/0x7c60 [ 288.552023][ T8839] ip_mroute_setsockopt+0xe33/0x11a0 [ 288.557334][ T8839] ? ipmr_rule_default+0x70/0x70 [ 288.562283][ T8839] ? __might_sleep+0xf0/0xf0 [ 288.567063][ T8839] ip_setsockopt+0x4ad/0x3070 [ 288.571744][ T8839] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 288.577128][ T8839] ? aa_sk_perm+0x7b4/0x8f0 [ 288.581635][ T8839] ? aa_af_perm+0x2b0/0x2b0 [ 288.586149][ T8839] ? __fget_files+0x40f/0x480 [ 288.590823][ T8839] ? aa_sock_opt_perm+0x74/0x100 [ 288.596298][ T8839] ? sock_common_setsockopt+0x32/0xb0 [ 288.601674][ T8839] ? raw_setsockopt+0xc5/0x180 [ 288.606453][ T8839] ? sock_common_recvmsg+0x1b0/0x1b0 [ 288.611736][ T8839] __sys_setsockopt+0x2bf/0x3d0 [ 288.616619][ T8839] __x64_sys_setsockopt+0xb1/0xc0 [ 288.621650][ T8839] do_syscall_64+0x4c/0xa0 [ 288.626080][ T8839] ? clear_bhb_loop+0x30/0x80 [ 288.630772][ T8839] ? clear_bhb_loop+0x30/0x80 [ 288.635447][ T8839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.641368][ T8839] RIP: 0033:0x7f92852df6c9 [ 288.645783][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.665403][ T8839] RSP: 002b:00007f9283546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.673824][ T8839] RAX: ffffffffffffffda RBX: 00007f9285535fa0 RCX: 00007f92852df6c9 [ 288.681823][ T8839] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 288.689800][ T8839] RBP: 00007f9285361f91 R08: 000000000000003c R09: 0000000000000000 [ 288.697768][ T8839] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 288.705742][ T8839] R13: 00007f9285536038 R14: 00007f9285535fa0 R15: 00007ffc850296b8 [ 288.713744][ T8839] [ 288.717963][ T8839] [ 288.720308][ T8839] ============================= [ 288.725805][ T8839] WARNING: suspicious RCU usage [ 288.730983][ T8839] syzkaller #0 Not tainted [ 288.735601][ T8839] ----------------------------- [ 288.740447][ T8839] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 288.749167][ T8839] [ 288.749167][ T8839] other info that might help us debug this: [ 288.749167][ T8839] [ 288.759844][ T8839] [ 288.759844][ T8839] rcu_scheduler_active = 2, debug_locks = 1 [ 288.767954][ T8839] 1 lock held by syz.1.1370/8839: [ 288.773022][ T8839] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 288.782869][ T8839] [ 288.782869][ T8839] stack backtrace: [ 288.788761][ T8839] CPU: 1 PID: 8839 Comm: syz.1.1370 Not tainted syzkaller #0 [ 288.796146][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.806218][ T8839] Call Trace: [ 288.809515][ T8839] [ 288.812457][ T8839] dump_stack_lvl+0x168/0x230 [ 288.817161][ T8839] ? load_image+0x3b0/0x3b0 [ 288.821682][ T8839] ? show_regs_print_info+0x20/0x20 [ 288.826902][ T8839] ? lockdep_rcu_suspicious+0x110/0x180 [ 288.832443][ T8839] ? local_bh_enable+0x20/0x20 [ 288.837214][ T8839] rhltable_lookup+0x504/0x790 [ 288.841979][ T8839] ? local_bh_enable+0x20/0x20 [ 288.846745][ T8839] ? mr_mfc_find_parent+0x190/0x190 [ 288.851934][ T8839] ? mark_lock+0x94/0x320 [ 288.856269][ T8839] ? local_bh_enable+0x20/0x20 [ 288.861015][ T8839] ? mark_lock+0x94/0x320 [ 288.865341][ T8839] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 288.871331][ T8839] ? lock_chain_count+0x20/0x20 [ 288.876172][ T8839] mr_mfc_find_any_parent+0xb6/0x1e0 [ 288.881468][ T8839] ? local_bh_enable+0x20/0x20 [ 288.886242][ T8839] ip_mr_forward+0x24c/0xf90 [ 288.890832][ T8839] ipmr_mfc_add+0x2466/0x2eb0 [ 288.895507][ T8839] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 288.900429][ T8839] ? __lock_acquire+0x7c60/0x7c60 [ 288.905544][ T8839] ip_mroute_setsockopt+0xe33/0x11a0 [ 288.910829][ T8839] ? ipmr_rule_default+0x70/0x70 [ 288.915780][ T8839] ? __might_sleep+0xf0/0xf0 [ 288.920367][ T8839] ip_setsockopt+0x4ad/0x3070 [ 288.925043][ T8839] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 288.930407][ T8839] ? aa_sk_perm+0x7b4/0x8f0 [ 288.934908][ T8839] ? aa_af_perm+0x2b0/0x2b0 [ 288.939421][ T8839] ? __fget_files+0x40f/0x480 [ 288.944106][ T8839] ? aa_sock_opt_perm+0x74/0x100 [ 288.949030][ T8839] ? sock_common_setsockopt+0x32/0xb0 [ 288.954394][ T8839] ? raw_setsockopt+0xc5/0x180 [ 288.959178][ T8839] ? sock_common_recvmsg+0x1b0/0x1b0 [ 288.965342][ T8839] __sys_setsockopt+0x2bf/0x3d0 [ 288.970205][ T8839] __x64_sys_setsockopt+0xb1/0xc0 [ 288.975256][ T8839] do_syscall_64+0x4c/0xa0 [ 288.979679][ T8839] ? clear_bhb_loop+0x30/0x80 [ 288.984354][ T8839] ? clear_bhb_loop+0x30/0x80 [ 288.989017][ T8839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.994899][ T8839] RIP: 0033:0x7f92852df6c9 [ 288.999321][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.018919][ T8839] RSP: 002b:00007f9283546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.027333][ T8839] RAX: ffffffffffffffda RBX: 00007f9285535fa0 RCX: 00007f92852df6c9 [ 289.035306][ T8839] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 289.043377][ T8839] RBP: 00007f9285361f91 R08: 000000000000003c R09: 0000000000000000 [ 289.051391][ T8839] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 289.059353][ T8839] R13: 00007f9285536038 R14: 00007f9285535fa0 R15: 00007ffc850296b8 [ 289.067327][ T8839] [ 289.072250][ T8839] [ 289.074604][ T8839] ============================= [ 289.079483][ T8839] WARNING: suspicious RCU usage [ 289.084420][ T8839] syzkaller #0 Not tainted [ 289.088834][ T8839] ----------------------------- [ 289.093715][ T8839] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 289.102456][ T8839] [ 289.102456][ T8839] other info that might help us debug this: [ 289.102456][ T8839] [ 289.112918][ T8839] [ 289.112918][ T8839] rcu_scheduler_active = 2, debug_locks = 1 [ 289.121119][ T8839] 1 lock held by syz.1.1370/8839: [ 289.130834][ T8839] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 289.140648][ T8839] [ 289.140648][ T8839] stack backtrace: [ 289.146659][ T8839] CPU: 1 PID: 8839 Comm: syz.1.1370 Not tainted syzkaller #0 [ 289.154126][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.164188][ T8839] Call Trace: [ 289.167454][ T8839] [ 289.170460][ T8839] dump_stack_lvl+0x168/0x230 [ 289.175127][ T8839] ? load_image+0x3b0/0x3b0 [ 289.179617][ T8839] ? show_regs_print_info+0x20/0x20 [ 289.184821][ T8839] ? lockdep_rcu_suspicious+0x110/0x180 [ 289.190362][ T8839] ? local_bh_enable+0x20/0x20 [ 289.195118][ T8839] rhltable_lookup+0x5f8/0x790 [ 289.199965][ T8839] ? local_bh_enable+0x20/0x20 [ 289.204716][ T8839] ? mr_mfc_find_parent+0x190/0x190 [ 289.209903][ T8839] ? mark_lock+0x94/0x320 [ 289.214230][ T8839] ? local_bh_enable+0x20/0x20 [ 289.219002][ T8839] ? mark_lock+0x94/0x320 [ 289.223348][ T8839] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.229337][ T8839] ? lock_chain_count+0x20/0x20 [ 289.234214][ T8839] mr_mfc_find_any_parent+0xb6/0x1e0 [ 289.239509][ T8839] ? local_bh_enable+0x20/0x20 [ 289.244343][ T8839] ip_mr_forward+0x24c/0xf90 [ 289.248926][ T8839] ipmr_mfc_add+0x2466/0x2eb0 [ 289.253611][ T8839] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 289.258558][ T8839] ? __lock_acquire+0x7c60/0x7c60 [ 289.263687][ T8839] ip_mroute_setsockopt+0xe33/0x11a0 [ 289.268987][ T8839] ? ipmr_rule_default+0x70/0x70 [ 289.273938][ T8839] ? __might_sleep+0xf0/0xf0 [ 289.278538][ T8839] ip_setsockopt+0x4ad/0x3070 [ 289.283815][ T8839] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 289.289171][ T8839] ? aa_sk_perm+0x7b4/0x8f0 [ 289.293671][ T8839] ? aa_af_perm+0x2b0/0x2b0 [ 289.298181][ T8839] ? __fget_files+0x40f/0x480 [ 289.302942][ T8839] ? aa_sock_opt_perm+0x74/0x100 [ 289.307883][ T8839] ? sock_common_setsockopt+0x32/0xb0 [ 289.313246][ T8839] ? raw_setsockopt+0xc5/0x180 [ 289.318015][ T8839] ? sock_common_recvmsg+0x1b0/0x1b0 [ 289.323294][ T8839] __sys_setsockopt+0x2bf/0x3d0 [ 289.328224][ T8839] __x64_sys_setsockopt+0xb1/0xc0 [ 289.333240][ T8839] do_syscall_64+0x4c/0xa0 [ 289.337655][ T8839] ? clear_bhb_loop+0x30/0x80 [ 289.342318][ T8839] ? clear_bhb_loop+0x30/0x80 [ 289.346998][ T8839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.352875][ T8839] RIP: 0033:0x7f92852df6c9 [ 289.357292][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.376887][ T8839] RSP: 002b:00007f9283546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.385308][ T8839] RAX: ffffffffffffffda RBX: 00007f9285535fa0 RCX: 00007f92852df6c9 [ 289.393287][ T8839] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 289.401265][ T8839] RBP: 00007f9285361f91 R08: 000000000000003c R09: 0000000000000000 [ 289.409240][ T8839] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 289.417201][ T8839] R13: 00007f9285536038 R14: 00007f9285535fa0 R15: 00007ffc850296b8 [ 289.425189][ T8839]