last executing test programs: 17m14.239563853s ago: executing program 4 (id=190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000380), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0'}, 0x74) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@empty}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r5, 0x1) poll(&(0x7f0000000100)=[{r5, 0x84}], 0x1, 0x3ff) sendto$inet(r5, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 17m2.007454382s ago: executing program 4 (id=215): socket(0xa, 0x801, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) 16m59.926059098s ago: executing program 4 (id=218): socket(0xa, 0x801, 0x10000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000098aadef838f1fb45ff1a860000002000000000000000fe"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 16m58.855912971s ago: executing program 4 (id=220): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200}) fcntl$setstatus(r0, 0x4, 0x40000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0xec, 0x30, 0x9, 0x0, 0x10000000, {}, [{0xd8, 0x1, [@m_vlan={0xd4, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0xa7, 0x6, "36554189143730239e1f276aa1212241921cd75ef3b57b5293d577957b2b3b86003b873e62ca049ff51146b88203bc0edef012b02f90654bb3bef91cc352ee24640026c45188793e5bbecd16b5c2e92842da2ea714c587117dd8d7907249809ecdfdd2e6aea44d4999d22bddd2dbd5fa665de35301feefda7d236928ec4319a775932ecf0ec5fd676ff3aae0203bfeb38339f479bb4b4301095bf7591fb401b847a907"}, {0xc}, {0xc}}}]}]}, 0xec}}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110105bd7000ffdbdf250a0000000c0003800800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 16m56.212242415s ago: executing program 4 (id=223): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f00000000c0)={0x1}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) 16m53.727093861s ago: executing program 4 (id=236): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x1, 0x18}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r2, 0x4b9b6000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={0x20, 0x1e, 0x21, 0x70bd25, 0x0, {0x20}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x11}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r6 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r7, &(0x7f0000000300), 0x0, 0x0) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6c9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 16m38.379225207s ago: executing program 32 (id=236): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x1, 0x18}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r2, 0x4b9b6000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={0x20, 0x1e, 0x21, 0x70bd25, 0x0, {0x20}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x11}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r6 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r7, &(0x7f0000000300), 0x0, 0x0) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6c9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 15m6.866845883s ago: executing program 33 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x0, {0xa, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000003c0)=0x2, 0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0x8a8, 0x8, {{0x12, 0x4, 0x3, 0x9, 0x48, 0x65, 0x0, 0x81, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, {[@rr={0x7, 0xb, 0xe0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0x3f, [@rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010101]}, @timestamp={0x44, 0x14, 0x29, 0x0, 0x2, [0x7, 0x6, 0x1d, 0x9]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000900)={0x8c, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x400}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x404c080) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@hci={0x1f, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x62040400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) r12 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r12, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xe0307dcb63f81144}, 0x0) 12m42.295756383s ago: executing program 2 (id=725): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(0xffffffffffffffff, 0x30, 0x100000001, 0x3) mmap(&(0x7f00002d6000/0xe000)=nil, 0xe000, 0xc, 0x11, r4, 0xffff9000) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 12m40.36859788s ago: executing program 2 (id=727): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xac) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x10000201, 0x7, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826, 0xfffffffd], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x0) 12m39.717136493s ago: executing program 2 (id=731): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r4, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) sendfile(r6, r7, 0x0, 0x20000023896) 12m38.606475259s ago: executing program 2 (id=733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000002c0)="c3", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 12m37.374118552s ago: executing program 2 (id=734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 12m29.08789532s ago: executing program 2 (id=749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x0) 12m12.88915219s ago: executing program 34 (id=749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x0) 8m8.446492095s ago: executing program 5 (id=1343): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(0x0, 0xac) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000680)={r6, 0x10000201, 0x7, 0x81, 0x3, [], [0x3fd86826, 0xfffffffd], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) close_range(r1, 0xffffffffffffffff, 0x0) 8m5.928126685s ago: executing program 5 (id=1347): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 8m4.921061406s ago: executing program 5 (id=1352): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 8m4.439093621s ago: executing program 5 (id=1355): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r4, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc"], 0x1c}}, 0x0) 8m1.849100724s ago: executing program 5 (id=1356): r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x800, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="ca9bb559252828f7280f1e9d66aa3f61297e27ee1cee598c4a07dafdcd35cbe58dc20ecc4265f005a6daa4921b1ca68dd3f12459d069c4a08044e8b7837af53779ab199063234d5166e7744eb276399d052cd0e760a76bfdf196d4cb207014823352e28af53d187c448895a05938700791c9c90a8ea8cbd85ff179d8e6a799ab4603abe70b87bbc700ff6b728c0f7a658d155d6096cb21a9a7baf8069bab4e318d700960c30be5ca8f90aa1103043552cf8b6a7ab57199aa4c32c463a32e5da2f1f6b342012f64c0286c1f4ddf63d2acbd0c164d7d915ee3e552ee364e1745cc47059b95b5a050daeecf3f09b2b5f779afd0942579f1eff52485cccc1b49b9e8d6a8cfca0eb55dbdc5da133fc3e0c23a9b63bf5d8e0bca947f4dbaa3b5482b690c1e3eee6555767ecacf477927de85e22cabcb7930ba362bbe7d672102ef3ddc776c7593e38c9182af9b814f4ddc40c5fd1c352476c1f85535420443abf6e064f2099e144b1a0ae954a64e1b114ae1f6c0384e36b321209d2a42fc1d71b992e3b5efee65007c58ce4c9943f0b1caae0828d72bebedda6bd57ff2f1128de8a68cbfb8b8ba293848ba4177f468707749d87decbea303cde7bc9592602545e1447281ca94d6d08b6aad60c29809bc25f6bed7c80e6d7a74eea5f2377eed00257aa1969e19160f51dca402a7293397495e7f3df3347f260747ddcd0abbf47226b21cee04db718bf3173660431f85beb2e816d041040dd1de0dddff4942d201b6cd2fda0456aae6da036a31621606e4f7d9945e7c746b02604a54aaa16610308aa2f9e1546bfbdba943c2a52e386851b723d4f96d0ffbe3e065c7d7d672763019a50a61b2755a4c9fb8216553e06bedeb5809e31af7bb03a4a754f12ea41c50dd306fb8ce05909ba426c677ced4183a174665d5da48becec51dd9123450c76ba60228b341678f0f3b2bd1bcf440a488c785acb98f9f196195363951164215d884f97d2a6077b4e01b4a2b442b32b95db5e8d63c4bd5227e9c63ca9ed99a7fb155d13dc283af1af5363ceea55daa0afc7b8a07b6f4ffb0e230fb845ffaadc5dfe57bebf04753f88a0bd2d66d771cbff8a87882a8597e90e3259d636824a6c2b31b54da0c8383053d369f354a1f972136d3638b3bf052d33b44bde9bc2099641e29c32099fa11290b523a3824eaaa18c6270452ca757ae5eccb9f684771fb54b10ba0fa7cc9381eb1409e2aa2ea153556f254416d210f04661734386f1ff795b41955642821085d107a22712338a8ccfbd5bf5c1a8447364bd2cfe544dfefd70777f4bed14a6d2c4b5f47cc7594839da3ac6cff44e965de5007906014c137ec9b692c78b558a4ea336c7f8ae09f315360ba7bb9b578962ad601b8746d4049a373f0999ec52ab0d59fd76aaf64e2ca4c4a5f5ef915ed6e9df4600bbce1967037f2a20849c06fae29e82aeb3cfb54621d3c28bef9d8afea56c571c76868ce9d61a03d1af94c3c2f4f1b4ed2fe26012e63e8aada2ca21bf1fe7a2cdb916cc80c9847b075fa295507612417e9bf90e65330ad7ca90014cd79373152300743dfde1c3e7943f256a5e706d8030100ab66f6b9069a21703b80d70afdbe1e9d74e4bd16ec24222e45c4cbf6de6981669a8525db8d8dadb3e09c8d0bbd5bcecd138a49d8569dcea0b1867f23df8f9575147d48418f2b4bee2ce146510cb0271fa2e70ab4b749b6ceb2ba44b17e0928f5b4f42c25d7f3720f92ad13a88fdbc070b985bc8231902a3488bb0932cffdc73042425883bbb9556e790ee97e9bbcb17de3b4a935f34c87113a7d7c7dd82031c8b0213bf9fe784fc1d95f8810bf1f643c533d693ba236a5e8595064cb710f9d0c949b87fb1789135645215faeeb7f1871d7c180dfb9b9e89caf5235e634b61b80ef17d30814d2b82cee2905e9911f9b48ba3eac331628689a4767c5044303289d7f5f9fd6c4b7fbeb4cd536ca2b766769255229aad45b742ef4be8615409df469bc0c06f3ea4faf5e1f9797063b9c533e8633e9440550ae47aef2c6985ef893f3b7bda30fff5bef98162b6b6cee7ff7dce60fd1f94c2f25c7b76400f792abdbc90ab81d61a70b8a24efc2beaac8b3419714ab8ae03e2c579b319a0a2422b24de4a96151b757f0ec44b8d0f154059ee20c0f321a60fab07827b9e73b34dee388271167524de1604cccfa9f5ccd8468814589e80dd6622af0041a7e4abc7c3ea945dc8591caf61ef05b61f07b3bcc2a830b4ddd3ffaebb127d980f5f7fe86562e7c54a10dcb3f17b2fe8a1def2a463f72fc17604ec6ab1c1c789b9c53ee147c5c979d1c5ce85bd422414a32bd8b760b6c916c1dc14014dfb047287c245218fe748d6b53b51154ae871749e5bd00411b2f6131c9a44da36049d9b326f8bc1e245ce325d96497c0af51c314272af7ea8e00d7d396dae288434d463efe31446fef7fa343ddc8d8946ea061478f6efeb5b14850adc7cf0985c93acfe8bbb89d134a19db1d3a87176eebe03838bea6c87ff180606ff23aa85526909eca38f4d1e39a13f6895773a98b459ea409ff3848e505032b0e1c1b0a96982eff863e51dad6ad5d353ab60de5c9d43a82b12e26da973dae63ca9807c25a205278166a224a38945ac64ea661fbb44120a1e8697493ba38d41231fdd70117c628ec7b079ac84a7807231d52594d3ffadef5d824ac120d79b8b0d40658fe1f01bd7b92aefd2f9a1417002df418d9c92736f569872a10d1316f4c4fec336fca3d4b376a7fcbf1b65c9b1e7805d2b8205c8c3803b90f8adcba6d1621d10d7ac02849982ada2c6dfb132c8036726d9f99832f9a1b74c85dbad759a4f56c879d34099c9420cda4ae9ba91a055cb4bbb9593527596780c1f33966899f0f077e8d671d328e2afe5604c113e4371d1202390344bfa7c936a4e250db77fa065b51c0d9b10c56090af6cbf3c0cf0de32c7ec21620bc1dc145e81a8e174572e1c4974c1121706b1dbc52488ce42158c41c505fb247640b4807bf28e91ba06af969065cab2d69d988239e5276435fe67a844bb9616392238cd7d41f30cbbe910b2a29bb772ffff87423e02950b7be953566d04e1c0f5d1e6b0deaca591e1f64de6cef048af101b6eb6186b16700aec3ee5cb772867d3bd5545aa912312958b37fc6cb7dd53cd428d456a7240738510a337dba694fe26994cbe866a27868a5989df8b2817e4acb571640c6e15b2f64c5f8ab7edc4cbc21e67addcee5caca0a4cce01015f19a20fdb7f5f3de018954aae79739e3e3cb8e047b654f64192c2ebb7cdf8f48b7d518bfda5fb7b14d2d07ebad7ce33e62f791254e57708ac7c3b107cd5b235038b50f0a5d87ae2fc65a7f363ac69db0637f259a829c385d23a0c44914afec4a58543e52f443cd9a3c2fd1229c26d1392a149d172d8c16b83587a6f6e02958ee1528f621962ddb2abcd8e01f847190ff290b1b2b1269afd7766ff1a892d3c292b6e6f8773898e58235eb4e46d0b4068a345aa92e9205ff441e93b12dfc1c65ecf39af69b6ddef22f38a394c7505d8130b78b332ad4c8168b49dc0e826118b7cd96a0c5efb43c91700b69069d28cb6d17ca8b44034df41519812cb7bb4b22b1a481a97f38b6546ce844166e98251a0b921bba6da12948fea199a85ac6b8086ee5f6786510b22e2c2f255bf42212a3a978e0faceba6726e5835eb2c7574265f6c68efcb0e32228926a35697416d31906c8e39b3a957269a6d1c63ee46026a2af642246a8184a780c846e61e4462a34d38c7ea44ebaf66e81f2a7e3af71884142dec43ae9fdb7cce8c5e432787529a8058a4020fad245e4af841c31200e2bcdf652113001cd06d79e38a5c8857dea57d9bdc73d37bd07b48b6413ffe1fddd7119c13d1ae831a0cbfb26b8448218c630d7fbf32ccd2f68eb10f53bf48ca58a02e948b3a77aba6d02caab96b5c551d8de2da99e8c82ac9092d93711fd6f5473f7bba5c6ea96b2b9665f2b898c18e6a11699da1c6556d48e60e5800ae9a1968491d1e8e5e90ceaf693bb4f151ec8fdfe93bef3d41d11a1df388853a5afb58e01addbc16d8da0302e7394fb46550f26d1fa43cb82410b18910f06ef16d60e30f6e32ef8631488e29b7637b86b2ad9dc076096933fb04b237d89dc25b08d1d6125b98d8b619754290abe1fdf2fafdf4cfe7b8fa5c6656038553857b099a54a45c05d084e3f4f3b4859e41475de8b676ac4c97e59d146da94694f34b1d97a119a2dd6a2321205802bf0d55eb793f5128e14aeaa43e5da3215cdc77420be5f3b62422f2efd24f95e535d3415ddce1c0401272b021243ded28d240cea411b885e5825ab60d4809703cb3586250f22604440088a71f000701938c8b8aa6dcf4aba150306f38d6502f0c4b380801e339fb0f1e415d289642903d1a31d1f051b13a13a16b66155a49a0cc5de60b893ccbc3cde597eb5964cb180fe34338d1617fe004a4993aed5650189c17cfde75b05756e335b02854ab2c0c5b22b9a27c150b5e191e466468d0ba4d10d51a9b8f171a4bf3004df226e762041cb4fe0417e81e6f711a2e5320e9287589250e7928d1a0dbc1d5ed725fbe979e4bdb200c5daa4b2fb9e0d743da090895f150c65c3a323cdc04bcef16320d650b0869a72c7f69b3366aadf578d6e8ecfd7e9e2b68d686326c4651a57a96f1e1fcba447fcc8220efe1a3fdf1d7d235255abd964b2358009910648b00f693801c8440b7fc0fa390f045e21b1224bbf0ae8b1c9f4b3ef52b251637045db02f6ba223269bfd475bc02b0353b04dd5e8630eed360e47db8a5cad0657a08345fffe22746ad68b7a7da812c00b0d615148c80e3744a54836f169230e4a150d36dbb3abbe61822528df234a70be2d53ceb7b23bfbbcc45e6d93cd029b3e035936a2aaa1d46a035da0d5e912732c0ddd0909fec2660703ed4eb87c3811dd90bf6a0c45fadafe99167d6b953184ea3008dcf8900725c8023e9b921058e9ef30e94076d50ebacdcaee88b7420312ee5f55c8cc4b82a89cb34aa41f7966a7055165f0d53d3eef82d123a67270dbd6c94c21295e8be496825886c7296bd7658eef94d775e6a2cea0528a9741f0a1b2b342f62317b3d91f434d0ce788e2e119272d05b6621893d0e7f8178e49da1edb3a5af74c827e018858f9dc5a243c816c15c6616ff9255136bf77dcebec43e29389b257918e086e5e28c238dc6ca3ad57c193b580514fc9a1c3cf30ee12e514c45e7b84460d2ce3b709998b270b181f5a8fff8a7b65f9437916ed964ebf4408153ca9696e90eb4a6e32500fe7dda1ade058c3f9376ed417d2494a3cbeb0375d3db576cbadc05c5e97f1cd788b2dc2ec15b99b585c87259d624781a4bab19e6e72073694521030221e8fe8657ea0d28ef7133c527baf2f509f5c9bb7628d3de9d8c234a586d9feb2c815904b4c77134b9dacb6be80e8f52a2f71a365e472749a914666326fe07d7c941f67aec4c97dcca5"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) sendmmsg$inet(r4, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cff065e0467619", 0x67}, {&(0x7f0000000440)="586be182bdcbd16894c06f6ef7d5bd0bdcfecf0bb62a5f07f462c3bac63eacac9bea4f8170651e11a1e5c23c2c5fe7cfe53946bec6a3817f9c6c76e803670a60223080b2b2bb18c8", 0x48}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e886", 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000580)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003640)=[{&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="387a2bdc95dbcb72069213d3d11cda1bf6aabe65fc0e0196e5c083cce6107483c6833bdde3216ab342c361ac907207bf3d000d80ec2985a84d6d8022936680eca269396929188a094c0eff4e04cf6dc8340389221311fcd3b401dd47bbe267989dbd3815db1e290e57422380a6a94e75a9ed2a4e704d6923c4523334af1eb3ed8ff989a91e4d05707015cb7bdfa4ba0d1243301e42b0e027813c480270f1fbfbfcae60c08a3fac65df4d982eefa9f9c89831671541c0f5c7ca0ea0fe23fb1ccf8c1e378196fea6e65cb018363f4abc922f19685759", 0xd5}, {&(0x7f0000003500)="1739886e66d47ce5b7ab017b4eb8f0e0651ebc4e35ce3e160ebca1ef0a446e71a9159322ec6c8acc3a607f883d11184f4f592c7454611217fb62141222d20c3da2893097231b100afe2243a0fd3892a090c77fd9a832111629bacda2051e23a57b982affe8c054282ad7d2c791185e1b0eea", 0x72}, {&(0x7f0000003580)="2cdad85b8d344328e31524f6ced984f1272d03984197e654fa36653485df", 0x1e}, {&(0x7f00000035c0)="6b895b6878f84eb83ab599a7ce7ec0edea466b2c2896e1d6ddb0ee5d3ebdc9c6266f839394a0f3242e9ce459598a30db970f206dcab5a0a2347f5f264e3d9150cf6dcbc7914646d9fd3ee8a4f73de966d3b14f8377b2a144be0571273627e49cc2b74eee9f0b70508628c8939afa1219", 0x70}], 0x5}}], 0x3, 0x20008811) 8m1.091892074s ago: executing program 5 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) io_setup(0x20007ffd, &(0x7f0000000100)) fcntl$setstatus(r3, 0x4, 0x42c00) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) 7m45.716478726s ago: executing program 35 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) io_setup(0x20007ffd, &(0x7f0000000100)) fcntl$setstatus(r3, 0x4, 0x42c00) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) 6m29.819632036s ago: executing program 0 (id=1534): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) 6m21.837224187s ago: executing program 0 (id=1548): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(0xffffffffffffffff, 0x30, 0x100000001, 0x3) mmap(&(0x7f00002d6000/0xe000)=nil, 0xe000, 0xc, 0x11, r4, 0xffff9000) preadv(r0, &(0x7f00000026c0)=[{0x0}], 0x1, 0x15f, 0x0) 6m20.775907332s ago: executing program 0 (id=1551): socket(0x2, 0x80805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x1000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, 0x4, 0x3ff, 0x0) 6m16.266225055s ago: executing program 0 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xe080, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0x8001}, @val={0x5, 0xc9, {0x4, 0xbd, 0x4, "ac0fe90e0a90a0b0cef4e49024e97a7f61c9a10252ac5cb668c9d9f62ee53578e69a50d982b6defbaf01ba2e5316c1a84fb0f162c2625ee738330b793b67ebd0282ff778168395d16960cd276c31309764544ee6e1289e89f1a89bb0879bf86836ac99ca8a58a2e140bc4631994cbf7f368966a5554b480137c0743f2fb78a7ae5bcc940d8fe0afe82e7262f203a70b91db413711c494b1b1e0c9b3c9e93405255cf540e689a872ab5bae76ce9f7a1e20ab7fc495cb2fe3e0195ad741f1c3b51f61b19b98164"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @void, @void}, 0x107) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @loopback, 0x1000}}, 0xfff, 0x6, 0x91, 0x400, 0x9}, &(0x7f0000000200)=0x98) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x241080}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r7, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x400a001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0x30}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900"/64], 0x294}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) 6m15.18385788s ago: executing program 0 (id=1563): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x26e1, 0x80) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) mount$overlay(0x0, 0x0, &(0x7f0000000100), 0x881460, &(0x7f0000000140)={[{@index_off}, {@xino_off}], [{@smackfsdef={'smackfsdef', 0x3d, 'veth1_macvtap\x00'}}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x32, 0x800000000004}, 0x0) 6m12.454442601s ago: executing program 0 (id=1571): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 5m56.726456461s ago: executing program 36 (id=1571): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 5m20.529045026s ago: executing program 7 (id=1669): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc09b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x17, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x5000000) 5m19.09220259s ago: executing program 7 (id=1671): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0xc4, 0x30, 0x9, 0x0, 0x10000000, {}, [{0xb0, 0x1, [@m_vlan={0xac, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x7f, 0x6, "36554189143730239e1f276aa1212241921cd75ef3b57b5293d577957b2b3b86003b873e62ca049ff51146b88203bc0edef012b02f90654bb3bef91cc352ee24640026c45188793e5bbecd16b5c2e92842da2ea714c587117dd8d7907249809ecdfdd2e6aea44d4999d22bddd2dbd5fa665de35301feefda7d2369"}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110105bd7000ffdbdf250a0000000c0003800800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 5m17.287696083s ago: executing program 7 (id=1675): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000a80)={0x10000016}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 5m14.184539043s ago: executing program 7 (id=1677): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc09b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x17, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x8) 5m7.84051388s ago: executing program 7 (id=1684): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0xd8, 0x30, 0x9, 0x0, 0x10000000, {}, [{0xc4, 0x1, [@m_vlan={0xc0, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x93, 0x6, "36554189143730239e1f276aa1212241921cd75ef3b57b5293d577957b2b3b86003b873e62ca049ff51146b88203bc0edef012b02f90654bb3bef91cc352ee24640026c45188793e5bbecd16b5c2e92842da2ea714c587117dd8d7907249809ecdfdd2e6aea44d4999d22bddd2dbd5fa665de35301feefda7d236928ec4319a775932ecf0ec5fd676ff3aae0203bfe"}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110105bd7000ffdbdf250a0000000c0003800800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 5m6.513956888s ago: executing program 7 (id=1689): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000000)=0x28, 0x4) shmget$private(0x0, 0x2000, 0xfa71340b9fef182d, &(0x7f0000ffe000/0x2000)=nil) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe0, &(0x7f0000000180)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x0, [{@broadcast}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000408010800000000000000000a000000060002408906000008000300840000002555794e9bc483b70000d5d3b04ca9a816fc4a7193abaa011c73cc5a58f7f8aa859128e9dca608653d6671f09104815894f225"], 0x24}, 0x1, 0x0, 0x0, 0x615800b14e775758}, 0x0) listen(r0, 0x3) syz_open_procfs(0x0, 0x0) 4m50.818097427s ago: executing program 37 (id=1689): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000000)=0x28, 0x4) shmget$private(0x0, 0x2000, 0xfa71340b9fef182d, &(0x7f0000ffe000/0x2000)=nil) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe0, &(0x7f0000000180)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x0, [{@broadcast}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000408010800000000000000000a000000060002408906000008000300840000002555794e9bc483b70000d5d3b04ca9a816fc4a7193abaa011c73cc5a58f7f8aa859128e9dca608653d6671f09104815894f225"], 0x24}, 0x1, 0x0, 0x0, 0x615800b14e775758}, 0x0) listen(r0, 0x3) syz_open_procfs(0x0, 0x0) 2m30.708856435s ago: executing program 8 (id=1942): socket(0xa, 0x801, 0x10000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x107, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x8}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) 2m29.552968224s ago: executing program 8 (id=1945): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m26.742198969s ago: executing program 8 (id=1951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m17.355757193s ago: executing program 8 (id=1963): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) sendfile(r6, r7, 0x0, 0x20000023896) 2m16.645724239s ago: executing program 8 (id=1964): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_normal', 0xc0a82, 0x146) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 2m15.244917542s ago: executing program 8 (id=1966): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e08000740000000"], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) syz_usb_connect(0x0, 0x1b, &(0x7f00000002c0)={{0x12, 0x1, 0x210, 0x2c, 0xca, 0x20, 0x8, 0x61d, 0xc1a0, 0x4c13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xf8, 0x5, 0x80, 0xd}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x87, 0x0}]}) 1m59.234659777s ago: executing program 38 (id=1966): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e08000740000000"], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) syz_usb_connect(0x0, 0x1b, &(0x7f00000002c0)={{0x12, 0x1, 0x210, 0x2c, 0xca, 0x20, 0x8, 0x61d, 0xc1a0, 0x4c13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xf8, 0x5, 0x80, 0xd}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x87, 0x0}]}) 25.573620252s ago: executing program 1 (id=2137): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xffff6c6b, 0xfffffffd, 0x7, 0x2, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0xa}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 23.397799654s ago: executing program 1 (id=2140): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff6, 0x0, 0x0, 0x200004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) syz_open_dev$cec(0x0, 0x0, 0x101000) 21.893019321s ago: executing program 1 (id=2142): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 14.501264183s ago: executing program 6 (id=2151): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff6, 0x0, 0x0, 0x200004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) syz_open_dev$cec(0x0, 0x0, 0x101000) 13.526432153s ago: executing program 3 (id=2153): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc09b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x8) 13.112934654s ago: executing program 1 (id=2154): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc09b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x17, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x5000000) 12.79998563s ago: executing program 6 (id=2156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) sendmsg$nl_generic(r3, 0x0, 0x20008080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000040), 0x3e) ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = syz_open_dev$sg(0x0, 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x5381, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) pwritev(r7, 0x0, 0x0, 0xffffff01, 0xa) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, 0x0) 11.742213115s ago: executing program 6 (id=2157): socket(0xa, 0x801, 0x10000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000098aadef838f1fb45ff1a860000002000000000000000fe"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x107, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x8}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) 10.711268867s ago: executing program 3 (id=2158): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00f4dddc06ea67b65b4a000a1c0000bffb06749cfa4abfff3f5a000b0a0102000000000000000005000000080005400000000d1400"], 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000140)={0x7, 0x2, 0x3, 0x0, 0x7, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) 10.642130511s ago: executing program 6 (id=2159): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x101001) socket(0x10, 0x80002, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff00", @ANYRES32=0x0], 0x48}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x6, @raw_data="fe118e3eb2153c75a38df82fdddb48d44b40f31011ffaa89a41154dc8a67e6f26f676a463ec2bff394da4af3b21d29a45b6537d7abbb1c30e970088bb79be4846f03e3eff249ff5f21853999f15c984892417f2bf8f9901f99da5af3ac50d49dfc58186324f6bbe84b7b612abe39727b538c8019a136a34bcc16c07321ad3953add0c4004cb30293b970bcc4f61b81f206aaec9e3677aa70ad8abcfffe850d7ee9a4ecd5b9c4e518dd6aa7411735d22b2c63fdb218f766c569c8604691a0ebdfefdedd35b205afa0"}) 8.268574074s ago: executing program 3 (id=2161): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xffff6c6b, 0xfffffffd, 0x7, 0x2, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0xa}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 8.256598774s ago: executing program 6 (id=2162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffefff) timer_create(0x0, 0x0, &(0x7f0000000300)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) 6.526150053s ago: executing program 6 (id=2164): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc09b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x17, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r5, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x5000000) 6.263253387s ago: executing program 9 (id=2165): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x0, 0x10}, &(0x7f00000005c0)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000600)={r0, 0xfffffff8}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close(r3) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x11, &(0x7f0000000040)="0200000009", 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) 6.045726168s ago: executing program 9 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) sendmsg$nl_generic(r3, 0x0, 0x20008080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000040), 0x3e) ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = syz_open_dev$sg(0x0, 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x5381, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) pwritev(r7, 0x0, 0x0, 0xffffff01, 0xa) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, 0x0) 4.941250595s ago: executing program 9 (id=2167): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 4.691758467s ago: executing program 3 (id=2168): socket(0xa, 0x801, 0x10000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000098aadef838f1fb45ff1a860000002000000000000000fe"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x107, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x8}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) 4.594871943s ago: executing program 1 (id=2169): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_normal', 0xc0a82, 0x146) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3.723643018s ago: executing program 9 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00f4dddc06ea67b65b4a000a1c0000bffb06749cfa4abfff3f5a000b0a0102000000000000000005000000080005400000000d1400"], 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000140)={0x7, 0x2, 0x3, 0x0, 0x7, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) 3.521291078s ago: executing program 3 (id=2171): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x101001) socket(0x10, 0x80002, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff00", @ANYRES32=0x0], 0x48}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x6, @raw_data="fe118e3eb2153c75a38df82fdddb48d44b40f31011ffaa89a41154dc8a67e6f26f676a463ec2bff394da4af3b21d29a45b6537d7abbb1c30e970088bb79be4846f03e3eff249ff5f21853999f15c984892417f2bf8f9901f99da5af3ac50d49dfc58186324f6bbe84b7b612abe39727b538c8019a136a34bcc16c07321ad3953add0c4004cb30293b970bcc4f61b81f206aaec9e3677aa70ad8abcfffe850d7ee9a4ecd5b9c4e518dd6aa7411735d22b2c63fdb218f766c569c8604691a0ebdfefdedd35b205afa0"}) 1.179956809s ago: executing program 9 (id=2172): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) sendfile(r6, r7, 0x0, 0x20000023896) 810.741687ms ago: executing program 1 (id=2173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffefff) timer_create(0x0, 0x0, &(0x7f0000000300)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) 287.277834ms ago: executing program 3 (id=2174): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xa6}]}}]}, 0x38}}, 0x24040084) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fddfffff000000000008000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000009b080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300090a00000040000000000000000300060000000e0002000000e00000090000000000000000020001"], 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) getpeername$netlink(r8, &(0x7f00000000c0), &(0x7f0000000100)=0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)) 0s ago: executing program 9 (id=2175): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x56f2be14c64fc14d}, 0x400c000) recvfrom(r1, &(0x7f0000000380)=""/60, 0x3c, 0x10122, 0x0, 0xffffffffffffffa6) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): from 0 to 7 [ 689.679103][ T9992] Dev loop5: unable to read RDB block 7 [ 689.685030][ T9992] loop5: AHDI p1 [ 689.736834][ T9992] loop5: partition table partially beyond EOD, truncated [ 690.480815][T10002] Cannot find set identified by id 0 to match [ 691.399448][T10010] Bluetooth: hci0: unsupported parameter 255 [ 691.418464][T10010] Bluetooth: hci0: unsupported parameter 255 [ 696.210746][T10035] input: syz0 as /devices/virtual/input/input8 [ 696.898582][T10043] lo speed is unknown, defaulting to 1000 [ 698.248820][T10043] chnl_net:caif_netlink_parms(): no params data found [ 698.507908][ T4230] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 698.498080][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.664587][ T4230] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 698.704402][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.712935][T10043] device bridge_slave_0 entered promiscuous mode [ 698.722533][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.736724][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.792508][T10043] device bridge_slave_1 entered promiscuous mode [ 698.846253][T10066] loop5: detected capacity change from 0 to 7 [ 698.866789][ T4248] Bluetooth: hci4: command 0x0409 tx timeout [ 700.473932][ T9268] Dev loop5: unable to read RDB block 7 [ 700.544991][ T9268] loop5: AHDI p1 [ 700.629542][ T9268] loop5: partition table partially beyond EOD, truncated [ 700.767198][T10062] fido_id[10062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 700.797332][T10066] Dev loop5: unable to read RDB block 7 [ 700.806450][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.816635][T10066] loop5: AHDI p1 [ 700.851010][T10066] loop5: partition table partially beyond EOD, truncated [ 700.889753][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.936831][ T3520] Bluetooth: hci4: command 0x041b tx timeout [ 701.776595][T10043] team0: Port device team_slave_0 added [ 701.785263][T10043] team0: Port device team_slave_1 added [ 701.834871][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.861153][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.890198][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.912385][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.929332][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.967132][T10079] binder: 10077:10079 ioctl c0306201 0 returned -14 [ 702.030772][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.016780][ T3520] Bluetooth: hci4: command 0x040f tx timeout [ 703.044175][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.171387][T10043] device hsr_slave_0 entered promiscuous mode [ 703.277379][T10043] device hsr_slave_1 entered promiscuous mode [ 703.342943][T10087] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 703.351021][T10087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'. [ 703.802672][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.102878][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.234775][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.560820][ T4173] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 704.707984][ T4173] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 705.098358][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 705.864947][T10043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 705.899151][T10043] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 706.988606][T10043] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 707.074127][T10043] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 707.519506][T10129] fido_id[10129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 708.448080][T10043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.069017][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 709.167301][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 709.274095][T10043] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.976939][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 709.985872][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 710.092800][T10152] loop5: detected capacity change from 0 to 7 [ 710.419007][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.426260][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.437412][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 710.449139][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 710.458584][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.466021][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.478410][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 712.175332][T10162] binder: 10161:10162 ioctl c0306201 0 returned -14 [ 712.429069][T10152] Dev loop5: unable to read RDB block 7 [ 712.434911][T10152] loop5: AHDI p1 [ 712.763598][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 713.067984][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 713.102068][T10152] loop5: partition table partially beyond EOD, truncated [ 713.114697][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 714.320236][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 714.365448][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 714.399868][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1425'. [ 714.409047][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1425'. [ 714.418050][T10167] netlink: 'syz.7.1425': attribute type 13 has an invalid length. [ 714.425966][T10167] netlink: 'syz.7.1425': attribute type 12 has an invalid length. [ 714.617687][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 714.779840][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 714.815117][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 714.827564][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 714.837406][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 714.846349][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 714.859531][T10043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 715.953818][ T154] device hsr_slave_0 left promiscuous mode [ 716.039661][ T154] device hsr_slave_1 left promiscuous mode [ 716.148462][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.156223][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.164501][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.172543][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.181867][ T154] device dummy0 left promiscuous mode [ 716.188266][ T154] bridge0: port 4(dummy0) entered disabled state [ 716.196442][ T154] bridge0: port 3(batadv0) entered disabled state [ 716.204941][ T154] device bridge_slave_1 left promiscuous mode [ 716.211442][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.220732][ T154] device bridge_slave_0 left promiscuous mode [ 716.227218][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.277667][ T154] device veth1_macvtap left promiscuous mode [ 716.292787][ T154] device veth0_macvtap left promiscuous mode [ 716.300213][ T154] device veth1_vlan left promiscuous mode [ 716.313830][ T154] device veth0_vlan left promiscuous mode [ 716.471889][ T154] bond1 (unregistering): Released all slaves [ 716.859025][ T154] team0 (unregistering): Port device team_slave_1 removed [ 716.917370][ T154] team0 (unregistering): Port device team_slave_0 removed [ 716.966652][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.013388][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.285045][ T154] bond0 (unregistering): Released all slaves [ 717.482501][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 717.949646][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 718.523288][T10043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.776738][T10245] netlink: 'syz.0.1436': attribute type 3 has an invalid length. [ 722.091548][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 722.167357][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.460000][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 723.469892][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 723.480117][T10259] netlink: 'syz.1.1437': attribute type 13 has an invalid length. [ 723.489741][T10259] netlink: 'syz.1.1437': attribute type 12 has an invalid length. [ 723.967251][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 723.993673][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.047663][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 724.081051][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 724.145536][T10043] device veth0_vlan entered promiscuous mode [ 724.248238][T10043] device veth1_vlan entered promiscuous mode [ 725.095454][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 725.143334][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.193340][T10043] device veth0_macvtap entered promiscuous mode [ 725.238719][T10043] device veth1_macvtap entered promiscuous mode [ 725.957789][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.107704][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.118616][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.129882][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.142986][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.154805][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.165356][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.176347][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.190872][T10043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.207064][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 726.247606][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 726.308702][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 726.367741][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 726.443134][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.503084][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.666644][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.743953][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.820899][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.923819][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.964259][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.975311][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.987074][T10043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.997648][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 727.018445][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 727.037745][T10043] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.056995][T10043] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.086615][T10043] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.156686][T10043] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.291935][T10282] Cannot find set identified by id 0 to match [ 727.678247][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.692228][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.730329][T10289] Cannot find set identified by id 0 to match [ 727.739210][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 727.851230][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.891830][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.962002][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 728.213122][T10299] device syzkaller0 entered promiscuous mode [ 728.850542][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1446'. [ 730.110537][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1448'. [ 730.119758][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1448'. [ 730.129396][T10311] netlink: 'syz.8.1448': attribute type 13 has an invalid length. [ 730.137502][T10311] netlink: 'syz.8.1448': attribute type 12 has an invalid length. [ 733.534268][T10334] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 733.543995][T10334] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 736.166101][ T4230] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 736.187808][T10350] device syzkaller0 entered promiscuous mode [ 736.204412][ T4230] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 736.265337][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 736.844719][T10355] fido_id[10355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 740.178202][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.186186][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.633599][T10394] loop5: detected capacity change from 0 to 7 [ 741.651365][T10394] Dev loop5: unable to read RDB block 7 [ 741.657405][T10394] loop5: AHDI p1 [ 741.661119][T10394] loop5: partition table partially beyond EOD, truncated [ 742.378496][T10402] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 745.277567][T10442] tipc: Started in network mode [ 745.282691][T10442] tipc: Node identity , cluster identity 4711 [ 745.288955][T10442] tipc: Failed to obtain node identity [ 745.294753][T10442] tipc: Enabling of bearer rejected, failed to enable media [ 747.341580][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.348276][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.895445][T10465] loop5: detected capacity change from 0 to 7 [ 750.907247][T10465] Dev loop5: unable to read RDB block 7 [ 750.913400][T10465] loop5: AHDI p1 [ 750.917918][T10465] loop5: partition table partially beyond EOD, truncated [ 751.562526][T10483] netlink: 'syz.8.1485': attribute type 3 has an invalid length. [ 754.355745][T10499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.140635][T10525] loop5: detected capacity change from 0 to 7 [ 757.202899][T10525] Dev loop5: unable to read RDB block 7 [ 757.208886][T10525] loop5: AHDI p1 [ 757.212572][T10525] loop5: partition table partially beyond EOD, truncated [ 757.570610][T10523] Bluetooth: hci0: unsupported parameter 255 [ 757.624605][T10523] Bluetooth: hci0: unsupported parameter 255 [ 757.926410][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 757.935628][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 757.944882][T10544] netlink: 'syz.0.1501': attribute type 13 has an invalid length. [ 757.952947][T10544] netlink: 'syz.0.1501': attribute type 12 has an invalid length. [ 759.207913][T10553] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1505'. [ 759.446870][T10560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.905505][T10576] loop5: detected capacity change from 0 to 7 [ 760.956304][ T9272] Dev loop5: unable to read RDB block 7 [ 761.080461][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1514'. [ 761.089836][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1514'. [ 761.099421][T10585] netlink: 'syz.7.1514': attribute type 13 has an invalid length. [ 761.107669][T10585] netlink: 'syz.7.1514': attribute type 12 has an invalid length. [ 761.327176][ T9272] loop5: AHDI p1 [ 761.370223][ T9272] loop5: partition table partially beyond EOD, truncated [ 761.505898][T10576] Dev loop5: unable to read RDB block 7 [ 761.536684][T10170] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 761.589848][T10576] loop5: AHDI p1 [ 761.606618][T10576] loop5: partition table partially beyond EOD, truncated [ 761.688785][T10597] netlink: 'syz.7.1516': attribute type 3 has an invalid length. [ 762.646804][T10170] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 762.686413][T10170] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.719382][T10170] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 762.746282][T10170] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.006819][T10170] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 763.026267][T10170] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 763.065717][T10170] usb 2-1: Product: syz [ 763.070523][T10170] usb 2-1: Manufacturer: syz [ 763.103382][T10611] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1520'. [ 763.147777][T10170] cdc_wdm 2-1:1.0: skipping garbage [ 763.153399][T10170] cdc_wdm 2-1:1.0: skipping garbage [ 763.208720][T10170] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 763.214935][T10170] cdc_wdm 2-1:1.0: Unknown control protocol [ 764.016366][T10625] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 764.024998][T10625] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 764.033986][T10625] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 764.084104][ T4231] usb 2-1: USB disconnect, device number 8 [ 764.090506][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 764.090862][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 764.090907][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 766.916398][T10170] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 767.034861][T10170] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 767.411702][T10637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.713849][T10640] fido_id[10640]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 768.733758][T10650] netlink: 'syz.0.1527': attribute type 10 has an invalid length. [ 768.742484][T10650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1527'. [ 769.714748][T10675] netlink: 'syz.6.1532': attribute type 10 has an invalid length. [ 769.722881][T10675] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1532'. [ 770.710816][ T23] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 770.802202][ T23] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 771.209423][T10696] Cannot find set identified by id 0 to match [ 773.459103][ T4230] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 774.438736][ T4230] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 775.420801][T10715] input: syz0 as /devices/virtual/input/input9 [ 776.248221][T10727] loop5: detected capacity change from 0 to 7 [ 776.316565][T10727] Dev loop5: unable to read RDB block 7 [ 776.326841][T10727] loop5: AHDI p1 [ 776.331245][T10727] loop5: partition table partially beyond EOD, truncated [ 782.578453][T10811] Cannot find set identified by id 0 to match [ 782.636559][ T4231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 782.906638][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 783.066783][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 783.166695][ T4231] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 783.213155][ T4231] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 783.241729][ T4231] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.268891][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.277198][ T4231] usb 2-1: config 1 interface 0 has no altsetting 0 [ 783.586920][ T4231] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 783.610080][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.738427][ T4231] usb 2-1: Product: syz [ 783.802282][ T4231] usb 2-1: Manufacturer: syz [ 783.872212][ T4231] usb 2-1: SerialNumber: syz [ 784.102419][T10810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 784.421286][ T4231] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 785.156879][ T3545] bcm5974 2-1:1.0: could not write to device [ 785.317003][ T4231] bcm5974 2-1:1.0: could not read from device [ 785.516740][ T3545] bcm5974 2-1:1.0: could not read from device [ 785.712809][T10841] Cannot find set identified by id 0 to match [ 785.817949][T10843] ======================================================= [ 785.817949][T10843] WARNING: The mand mount option has been deprecated and [ 785.817949][T10843] and is ignored by this kernel. Remove the mand [ 785.817949][T10843] option from the mount to silence this warning. [ 785.817949][T10843] ======================================================= [ 786.917250][ T4231] input: failed to attach handler mousedev to device input10, error: -5 [ 786.964331][ T4231] usb 2-1: USB disconnect, device number 9 [ 786.970678][ T3545] bcm5974 2-1:1.0: could not read from device [ 787.029563][ T3545] bcm5974 2-1:1.0: could not read from device [ 788.458393][T10864] device syzkaller0 entered promiscuous mode [ 788.477853][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1572'. [ 790.380165][T10891] Cannot find set identified by id 0 to match [ 792.116435][T10910] Cannot find set identified by id 0 to match [ 793.658460][T10928] Cannot find set identified by id 0 to match [ 794.072371][T10938] Cannot find set identified by id 0 to match [ 794.854995][ T4193] Bluetooth: Frame is too long (len 18, expected len 8) [ 795.901378][T10957] Cannot find set identified by id 0 to match [ 797.542585][T10968] Cannot find set identified by id 0 to match [ 799.082520][T10987] device syzkaller0 entered promiscuous mode [ 799.093047][T10988] netlink: 'syz.1.1590': attribute type 3 has an invalid length. [ 799.174645][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1596'. [ 800.426339][T11003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.293810][T11039] Cannot find set identified by id 0 to match [ 805.504193][T11042] lo speed is unknown, defaulting to 1000 [ 807.196179][T11069] netlink: 'syz.8.1613': attribute type 10 has an invalid length. [ 807.204229][T11069] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1613'. [ 807.213870][T11069] bridge0: port 3(dummy0) entered blocking state [ 807.220853][T11069] bridge0: port 3(dummy0) entered disabled state [ 807.228717][T11069] device dummy0 entered promiscuous mode [ 807.416663][T11057] Bluetooth: hci5: command 0x0409 tx timeout [ 807.862827][T11087] Cannot find set identified by id 0 to match [ 808.163187][T11042] chnl_net:caif_netlink_parms(): no params data found [ 808.322960][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.789260][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.795807][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.295120][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.393054][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.424104][T11105] netlink: 'syz.1.1615': attribute type 3 has an invalid length. [ 809.719035][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.764635][T11057] Bluetooth: hci5: command 0x041b tx timeout [ 809.771633][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.780769][T11042] device bridge_slave_0 entered promiscuous mode [ 809.798018][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.805329][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.847595][T11042] device bridge_slave_1 entered promiscuous mode [ 809.910071][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.966682][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.007263][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.935684][T11042] team0: Port device team_slave_0 added [ 810.980067][T11042] team0: Port device team_slave_1 added [ 811.105942][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.283745][ T1107] Bluetooth: hci5: command 0x040f tx timeout [ 812.304377][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.605280][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.620349][ T144] tipc: Left network mode [ 812.665641][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.686653][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.835088][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.930772][T11142] Cannot find set identified by id 0 to match [ 813.462897][T11146] netlink: 'syz.1.1624': attribute type 10 has an invalid length. [ 813.471572][T11146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1624'. [ 813.624350][T11152] vxcan0: tx address claim with dlc 0 [ 815.015032][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 816.483884][T11042] device hsr_slave_0 entered promiscuous mode [ 816.775350][T11042] device hsr_slave_1 entered promiscuous mode [ 816.784120][T11042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 816.798704][T11042] Cannot create hsr debugfs directory [ 819.530809][T11197] Cannot find set identified by id 0 to match [ 819.606201][T11042] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 819.708057][T11042] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 819.755905][T11042] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 819.818196][T11042] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 819.912722][ T144] device hsr_slave_0 left promiscuous mode [ 820.017738][ T144] device hsr_slave_1 left promiscuous mode [ 820.043494][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.267592][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.365848][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.390009][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.485394][ T144] device dummy0 left promiscuous mode [ 820.514176][ T144] bridge0: port 4(dummy0) entered disabled state [ 820.538305][T11207] Cannot find del_set index 2 as target [ 820.638089][ T144] bridge0: port 3(batadv0) entered disabled state [ 820.657746][ T144] device bridge_slave_1 left promiscuous mode [ 820.677278][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.695929][ T144] device bridge_slave_0 left promiscuous mode [ 820.729664][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.778980][ T144] device veth1_macvtap left promiscuous mode [ 820.798019][ T144] device veth0_macvtap left promiscuous mode [ 820.813244][ T144] device veth1_vlan left promiscuous mode [ 820.824075][ T144] device veth0_vlan left promiscuous mode [ 821.106625][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 821.352457][ T144] bond2 (unregistering): (slave geneve2): Releasing active interface [ 821.386099][ T144] bond2 (unregistering): Released all slaves [ 821.438096][ T144] bond1 (unregistering): Released all slaves [ 822.253777][ T144] team0 (unregistering): Port device team_slave_1 removed [ 822.271809][ T144] team0 (unregistering): Port device team_slave_0 removed [ 822.285622][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.302323][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.374755][ T144] bond0 (unregistering): Released all slaves [ 822.971043][T11236] Cannot find set identified by id 0 to match [ 822.982657][T11235] loop5: detected capacity change from 0 to 7 [ 823.502711][T11237] netlink: 'syz.6.1645': attribute type 10 has an invalid length. [ 823.510994][T11237] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1645'. [ 823.533843][T11042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.555745][T11235] Dev loop5: unable to read RDB block 7 [ 823.561652][T11235] loop5: AHDI p1 [ 823.565564][T11235] loop5: partition table partially beyond EOD, truncated [ 823.607938][T11042] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.635398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 823.654416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 823.965791][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 824.223704][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 824.270909][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.278201][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.312308][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 824.355790][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 824.372630][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.379936][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.462528][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 824.515052][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 824.547593][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 824.601763][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 824.628256][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 824.658133][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 824.842915][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 824.874567][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 824.943178][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 824.960104][T11260] Cannot find set identified by id 0 to match [ 825.017469][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 825.070477][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 825.111837][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 825.198702][T11042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 825.295743][T11251] netlink: 'syz.6.1649': attribute type 3 has an invalid length. [ 825.842458][T11272] input: syz0 as /devices/virtual/input/input11 [ 827.682674][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 827.693020][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 827.719007][T11042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.049707][T11307] loop5: detected capacity change from 0 to 7 [ 830.063511][T11307] Dev loop5: unable to read RDB block 7 [ 830.070090][T11307] loop5: AHDI p1 [ 830.073834][T11307] loop5: partition table partially beyond EOD, truncated [ 830.086628][T11307] netlink: 'syz.6.1658': attribute type 10 has an invalid length. [ 830.095399][T11307] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1658'. [ 834.087216][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 834.137465][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 834.271115][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 834.323875][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 834.481432][T11042] device veth0_vlan entered promiscuous mode [ 834.512760][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 834.545525][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 834.630819][T11042] device veth1_vlan entered promiscuous mode [ 834.714114][T11346] netlink: 'syz.8.1664': attribute type 3 has an invalid length. [ 834.807653][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 834.827427][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 834.893796][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 838.289495][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 838.302266][T11042] device veth0_macvtap entered promiscuous mode [ 838.517579][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.541487][T11042] device veth1_macvtap entered promiscuous mode [ 838.724333][T11363] Cannot find set identified by id 0 to match [ 838.742463][T11366] loop5: detected capacity change from 0 to 7 [ 838.752727][T11366] Dev loop5: unable to read RDB block 7 [ 838.758931][T11366] loop5: AHDI p1 [ 838.762844][T11366] loop5: partition table partially beyond EOD, truncated [ 838.780492][T11366] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 838.788893][T11366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1668'. [ 838.830933][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.872299][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.924086][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.941250][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.966105][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.185130][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.475678][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.079738][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.359429][T11042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.399497][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 841.988253][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 842.016855][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.038053][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.162219][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.241758][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.294611][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.482434][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.195939][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.206918][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.310578][T11042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.477618][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 845.534628][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 845.578981][T11042] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.839541][T11042] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.062590][T11042] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.083731][T11042] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.309651][T11413] Cannot find set identified by id 0 to match [ 847.916205][ T23] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 850.409555][ T23] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 851.014597][T11428] loop5: detected capacity change from 0 to 7 [ 851.032219][T11428] Dev loop5: unable to read RDB block 7 [ 851.038867][T11428] loop5: AHDI p1 [ 851.043040][T11428] loop5: partition table partially beyond EOD, truncated [ 851.619632][T11428] netlink: 'syz.6.1682': attribute type 10 has an invalid length. [ 851.627840][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1682'. [ 852.731693][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.755230][T11440] fido_id[11440]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 852.769515][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.790596][T11447] netlink: 'syz.6.1686': attribute type 10 has an invalid length. [ 852.799215][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1686'. [ 852.847095][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 852.973920][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.002339][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.062166][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 853.420231][ T4334] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 853.630128][ T4334] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 853.675389][T11468] netlink: 'syz.7.1689': attribute type 3 has an invalid length. [ 857.087886][T11504] loop5: detected capacity change from 0 to 7 [ 857.123733][T11504] Dev loop5: unable to read RDB block 7 [ 857.132001][T11504] loop5: AHDI p1 [ 857.136632][T11504] loop5: partition table partially beyond EOD, truncated [ 857.518765][T11504] netlink: 'syz.6.1695': attribute type 10 has an invalid length. [ 857.527201][T11504] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1695'. [ 862.531954][ T5667] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 863.055295][ T5667] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 863.471570][T11521] fido_id[11521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 864.371323][ T5667] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 865.425056][ T5667] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 866.790197][T11535] fido_id[11535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 870.221286][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.228467][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.796712][T11590] Cannot find set identified by id 0 to match [ 873.647375][ T4231] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 873.832005][ T4231] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 874.123763][T11576] lo speed is unknown, defaulting to 1000 [ 874.146516][ T4231] Bluetooth: hci1: command 0x0409 tx timeout [ 874.621195][ T4416] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.648062][T11593] fido_id[11593]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 874.868725][ T4416] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.214564][ T4416] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.297770][ T4231] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 876.364123][ T4231] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 876.426702][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 876.552403][ T4416] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.456533][T11057] Bluetooth: hci1: command 0x040f tx timeout [ 879.947948][T11650] Cannot find set identified by id 0 to match [ 880.441581][ T21] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 880.582138][ T21] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 880.597313][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 880.632166][T11576] chnl_net:caif_netlink_parms(): no params data found [ 881.697914][T11657] fido_id[11657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 882.807972][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.816408][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.837664][T11576] device bridge_slave_0 entered promiscuous mode [ 883.258278][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.265927][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.303765][T11576] device bridge_slave_1 entered promiscuous mode [ 884.110859][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.701466][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.827762][T11701] Cannot find set identified by id 0 to match [ 889.060796][T11576] team0: Port device team_slave_0 added [ 889.219395][T10170] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 889.226923][T11576] team0: Port device team_slave_1 added [ 890.742295][T10170] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 891.137793][T11729] fido_id[11729]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 891.443367][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.451718][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.436708][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.490478][T11732] netlink: 'syz.6.1743': attribute type 10 has an invalid length. [ 892.499049][T11732] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1743'. [ 892.647936][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.655237][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.682186][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.946540][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.137383][T11576] device hsr_slave_0 entered promiscuous mode [ 893.174328][T11576] device hsr_slave_1 entered promiscuous mode [ 893.196970][T11576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.215466][T11576] Cannot create hsr debugfs directory [ 894.970407][T11773] Cannot find set identified by id 0 to match [ 895.143984][T11576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.216581][ T4416] device hsr_slave_0 left promiscuous mode [ 895.260264][ T4416] device hsr_slave_1 left promiscuous mode [ 895.301162][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.353510][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.411724][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.470377][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.637548][ T4416] device dummy0 left promiscuous mode [ 895.643141][ T4416] bridge0: port 4(dummy0) entered disabled state [ 895.905217][ T4416] bridge0: port 3(batadv0) entered disabled state [ 897.821373][ T4416] device bridge_slave_1 left promiscuous mode [ 897.830284][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.867052][ T4416] device bridge_slave_0 left promiscuous mode [ 898.573065][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.594451][ T4416] device veth1_macvtap left promiscuous mode [ 898.610095][ T4416] device veth0_macvtap left promiscuous mode [ 898.642821][ T4416] device veth1_vlan left promiscuous mode [ 898.670365][ T4416] device veth0_vlan left promiscuous mode [ 898.795688][ T4231] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 900.000748][ T4231] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 900.146639][ T13] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 900.224730][T11811] fido_id[11811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 900.436606][ T13] usb 9-1: Using ep0 maxpacket: 32 [ 900.557141][ T13] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 900.719654][ T13] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 900.854484][ T13] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 901.206789][ T13] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 901.246712][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.327221][ T13] usb 9-1: Product: syz [ 901.331481][ T13] usb 9-1: Manufacturer: syz [ 901.336147][ T13] usb 9-1: SerialNumber: syz [ 901.559574][ T13] usb 9-1: config 0 descriptor?? [ 901.734057][ T13] usb 9-1: USB disconnect, device number 2 [ 901.765979][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 901.862814][T11828] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 901.878613][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 901.920877][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.938746][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.415419][ T4416] bond0 (unregistering): Released all slaves [ 902.666909][T11830] tipc: Started in network mode [ 902.696681][T11830] tipc: Node identity d2b26f471707, cluster identity 4711 [ 902.711308][T11830] tipc: Enabled bearer , priority 0 [ 902.778124][T11576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.831284][T11830] tipc: Disabling bearer [ 903.046993][T11576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.147221][T11057] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 903.236498][T11057] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 903.461737][T11848] Cannot find del_set index 2 as target [ 903.771383][T11576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.174429][T11576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 905.273120][T11576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 905.313784][T11576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 906.109546][T11576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 906.439971][T10170] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 907.937455][T10170] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 908.368987][T11875] fido_id[11875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 908.411851][T11576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.477080][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 908.515680][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.633953][T11576] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.896162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.971608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 909.297264][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.304480][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.457955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 909.521441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 909.577200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 909.609647][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.616812][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.646859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 909.695665][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 909.876651][T11057] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 910.042722][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 910.068005][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 910.082936][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 910.100672][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 910.173429][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 910.576084][T11576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 910.627188][T11057] usb 7-1: unable to get BOS descriptor or descriptor too short [ 910.638622][T11576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 910.716685][T11057] usb 7-1: not running at top speed; connect to a high speed hub [ 910.902134][T11057] usb 7-1: config 1 has an invalid interface number: 116 but max is 0 [ 910.931767][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 910.940007][T11057] usb 7-1: config 1 has no interface number 0 [ 910.980608][T11057] usb 7-1: config 1 interface 116 altsetting 15 has an invalid endpoint with address 0x80, skipping [ 910.997234][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 911.082429][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 911.090918][T11057] usb 7-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 911.175244][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 911.196554][T11057] usb 7-1: config 1 interface 116 altsetting 15 has an invalid endpoint with address 0xA1, skipping [ 911.229776][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 911.251074][T11057] usb 7-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.298576][T11057] usb 7-1: config 1 interface 116 has no altsetting 0 [ 911.336122][T11903] loop5: detected capacity change from 0 to 7 [ 911.346517][T11903] Dev loop5: unable to read RDB block 7 [ 911.352158][T11903] loop5: AHDI p1 [ 911.356157][T11903] loop5: partition table partially beyond EOD, truncated [ 911.440021][T11903] netlink: 'syz.8.1774': attribute type 10 has an invalid length. [ 911.448287][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1774'. [ 911.458343][T11903] device batadv0 entered promiscuous mode [ 911.464892][T11903] bridge0: port 4(batadv0) entered blocking state [ 911.471683][T11903] bridge0: port 4(batadv0) entered disabled state [ 911.509486][ T4257] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 911.520079][ T4257] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 911.566712][T11057] usb 7-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 911.803813][T11057] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.836626][T11057] usb 7-1: Product: syz [ 911.840867][T11057] usb 7-1: Manufacturer: syz [ 911.918428][T11057] usb 7-1: SerialNumber: syz [ 911.966895][T11883] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 911.975408][T11883] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 911.996731][T11909] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.1775'. [ 912.127423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.147117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.185132][T11576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.327332][T11057] ums-usbat 7-1:1.116: USB Mass Storage device detected [ 913.731958][T11057] usb 7-1: USB disconnect, device number 2 [ 914.798562][ T4230] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 914.843190][ T4230] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 915.043076][T11947] fido_id[11947]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 915.451140][T11953] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 915.459835][T11953] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 917.657104][T11969] input: syz0 as /devices/virtual/input/input13 [ 918.616870][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 918.636984][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 918.792304][T11576] device veth0_vlan entered promiscuous mode [ 918.853649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 918.887409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 918.910369][T11976] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1785'. [ 918.932053][T11576] device veth1_vlan entered promiscuous mode [ 919.236969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 919.530048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 919.570338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 919.672899][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 919.697666][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 919.722635][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 919.744081][T11576] device veth0_macvtap entered promiscuous mode [ 919.770999][T11576] device veth1_macvtap entered promiscuous mode [ 919.808805][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.833231][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.796991][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.950897][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.093110][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.576478][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.587322][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.598363][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.609797][T11576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.618598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 921.675344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 921.768375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 921.823948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 921.853162][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.001240][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.012051][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.024802][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.114336][ T5667] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 922.146611][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.212453][ T5667] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 922.284097][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.295151][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.309244][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.322138][T11576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.434859][T11576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.552783][T11576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.627086][T11576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.922582][T11576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.949448][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 922.997014][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 923.485021][T12017] xt_NFQUEUE: number of total queues is 0 [ 925.097108][T12019] input: syz0 as /devices/virtual/input/input14 [ 926.244776][ T5667] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 927.117617][ T5667] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 928.049321][T12024] netlink: 'syz.6.1797': attribute type 72 has an invalid length. [ 928.165767][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.186476][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.276726][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 929.065904][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 929.273870][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.293186][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.344659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 929.492116][T12040] fido_id[12040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 931.676870][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.683236][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.797353][T12077] xt_NFQUEUE: number of total queues is 0 [ 934.072665][T12075] lo speed is unknown, defaulting to 1000 [ 934.110218][T12101] netlink: 'syz.6.1811': attribute type 72 has an invalid length. [ 934.190302][ T4257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.401398][ T4257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.786797][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 934.819318][ T4257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.870927][ T4257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.478320][T12137] xt_NFQUEUE: number of total queues is 0 [ 937.171583][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 937.694452][T12075] chnl_net:caif_netlink_parms(): no params data found [ 938.037132][T12155] Cannot find set identified by id 0 to match [ 938.881432][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.750182][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 939.793637][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.836973][T12075] device bridge_slave_0 entered promiscuous mode [ 939.882493][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.795026][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.111551][T12075] device bridge_slave_1 entered promiscuous mode [ 941.364724][T12176] netlink: 'syz.8.1823': attribute type 72 has an invalid length. [ 941.479113][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.566166][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.826785][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 942.387419][T12075] team0: Port device team_slave_0 added [ 942.503954][T12075] team0: Port device team_slave_1 added [ 942.668560][ T4257] device hsr_slave_0 left promiscuous mode [ 942.691509][ T4257] device hsr_slave_1 left promiscuous mode [ 942.734158][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.763081][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.834754][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.959684][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.358157][ T4257] device bridge_slave_1 left promiscuous mode [ 943.364497][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.384721][ T4257] device bridge_slave_0 left promiscuous mode [ 943.446474][T12196] Cannot find set identified by id 0 to match [ 944.137948][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.181433][ T4257] device veth1_macvtap left promiscuous mode [ 944.230042][ T4257] device veth0_macvtap left promiscuous mode [ 944.236181][ T4257] device veth1_vlan left promiscuous mode [ 944.399990][ T4257] device veth0_vlan left promiscuous mode [ 946.703156][T12221] Cannot find set identified by id 0 to match [ 947.498452][T12226] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1834'. [ 949.323187][ T4257] team0 (unregistering): Port device team_slave_1 removed [ 949.499448][ T4257] team0 (unregistering): Port device team_slave_0 removed [ 949.586947][ T4257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.789860][ T4257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.159946][ T4257] bond0 (unregistering): Released all slaves [ 950.770485][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.819847][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.110495][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.295402][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.324490][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.620879][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.915239][T12075] device hsr_slave_0 entered promiscuous mode [ 951.928976][ T21] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 952.201044][ T21] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 952.491578][T12075] device hsr_slave_1 entered promiscuous mode [ 952.554483][T12075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 952.649984][T12279] Cannot find set identified by id 0 to match [ 953.355676][T12075] Cannot create hsr debugfs directory [ 953.367328][T12276] fido_id[12276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 958.007773][T12287] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1845'. [ 958.910547][T12311] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1849'. [ 959.096765][ T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 961.397152][ T23] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 961.549396][T12334] Cannot find set identified by id 0 to match [ 962.515999][ T23] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 962.529740][ T23] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 962.539652][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.550035][ T23] usb 10-1: config 0 descriptor?? [ 962.566657][ T23] usb 10-1: can't set config #0, error -71 [ 962.583906][ T23] usb 10-1: USB disconnect, device number 2 [ 963.558711][T12075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 964.169505][T12075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 964.839829][T12371] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1861'. [ 964.855462][T12075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 964.911205][T12075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 965.870729][T12392] Cannot find set identified by id 0 to match [ 966.346637][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.656967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 966.705634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 966.724581][T12399] loop5: detected capacity change from 0 to 7 [ 966.735797][T12399] Dev loop5: unable to read RDB block 7 [ 966.741756][T12399] loop5: AHDI p1 [ 966.745443][T12399] loop5: partition table partially beyond EOD, truncated [ 966.930083][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.657619][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 967.707340][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 967.771461][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.778753][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.157691][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 969.226611][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 969.685032][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 969.693900][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.701076][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.710630][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 969.723060][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 969.734647][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 969.747991][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 969.758067][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 970.590550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 970.605350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 970.616171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 970.624871][ T4248] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 970.772708][ T4248] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 970.842980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 970.896373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 970.909836][T12447] loop5: detected capacity change from 0 to 7 [ 970.928575][T12447] Dev loop5: unable to read RDB block 7 [ 970.934500][T12447] loop5: AHDI p1 [ 970.938428][T12447] loop5: partition table partially beyond EOD, truncated [ 970.940089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 971.145330][T12447] netlink: 'syz.8.1874': attribute type 10 has an invalid length. [ 971.153550][T12447] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1874'. [ 971.165025][T12075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 971.252366][T12451] xt_NFQUEUE: number of total queues is 0 [ 972.923620][T12448] fido_id[12448]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 972.996449][T12460] loop5: detected capacity change from 0 to 7 [ 973.019499][T12460] Dev loop5: unable to read RDB block 7 [ 973.025868][T12460] loop5: AHDI p1 [ 973.029983][T12460] loop5: partition table partially beyond EOD, truncated [ 976.166462][T12038] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 976.547228][T12038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.695155][T12038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.939270][T12038] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 977.019236][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 977.062057][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 977.096194][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.138950][T12038] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 977.196486][T12038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.344282][T12038] usb 2-1: config 0 descriptor?? [ 977.436624][T12504] Cannot find set identified by id 0 to match [ 979.096257][ T13] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 979.226636][ T13] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 979.450357][T12038] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 979.506661][T12523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.517197][T12038] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 979.622232][T12521] fido_id[12521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 979.699224][T12038] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 979.952266][T12038] usb 2-1: USB disconnect, device number 10 [ 981.298331][T12542] Cannot find del_set index 2 as target [ 982.383661][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 982.437417][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 985.830274][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 985.882610][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 985.891729][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 985.903818][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 985.918474][T12075] device veth0_vlan entered promiscuous mode [ 986.008331][T12538] fido_id[12538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 986.033594][T12075] device veth1_vlan entered promiscuous mode [ 987.729400][T12581] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 987.737947][T12581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'. [ 988.677750][T12075] device veth0_macvtap entered promiscuous mode [ 988.688576][T12075] device veth1_macvtap entered promiscuous mode [ 988.707531][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.719056][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.732560][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.765832][T12038] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 988.845198][T12038] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 988.926049][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.015579][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.033045][T12586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.102859][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.211469][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.224945][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.262637][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.333916][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.344773][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.357647][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.366059][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.379029][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.392514][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.443543][T12596] fido_id[12596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 989.465434][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.560225][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.720045][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.749989][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.779929][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.794683][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.813670][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.929786][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.952511][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 989.961852][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 989.992279][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 992.803217][T12626] xt_NFQUEUE: number of total queues is 0 [ 992.986801][T12560] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 993.148477][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.155951][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.906812][T12560] usb 9-1: not running at top speed; connect to a high speed hub [ 994.017421][T12560] usb 9-1: config 255 has an invalid interface number: 151 but max is 0 [ 994.085101][T12560] usb 9-1: config 255 has no interface number 0 [ 994.188975][T12560] usb 9-1: config 255 interface 151 has no altsetting 0 [ 995.586757][T12560] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=a6.86 [ 995.638504][T12560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.690740][T12560] usb 9-1: Product: syz [ 995.694988][T12560] usb 9-1: Manufacturer: syz [ 995.773187][T12560] usb 9-1: SerialNumber: syz [ 995.836578][T12560] usb 9-1: can't set config #255, error -71 [ 995.915519][T12560] usb 9-1: USB disconnect, device number 3 [ 996.256647][T12629] lo speed is unknown, defaulting to 1000 [ 997.503812][T12629] chnl_net:caif_netlink_parms(): no params data found [ 997.511127][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 999.576704][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 1001.964757][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 1002.347225][T12629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.354406][T12629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.402174][T12629] device bridge_slave_0 entered promiscuous mode [ 1002.499783][T12629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.701700][T12696] input: syz0 as /devices/virtual/input/input16 [ 1002.841459][T12629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.851935][T12629] device bridge_slave_1 entered promiscuous mode [ 1003.037331][T12629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.059713][T12629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.105486][T12629] team0: Port device team_slave_0 added [ 1003.115284][T12629] team0: Port device team_slave_1 added [ 1003.313476][T12629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.322361][T12629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.479071][T12629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.527142][T12629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.534207][T12629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.932848][T12629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.484967][T12629] device hsr_slave_0 entered promiscuous mode [ 1004.526478][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 1004.570989][T12629] device hsr_slave_1 entered promiscuous mode [ 1004.596974][T12629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1004.754708][T12629] Cannot create hsr debugfs directory [ 1005.007742][T12725] Cannot find set identified by id 0 to match [ 1009.051156][T12750] Cannot find set identified by id 0 to match [ 1012.350489][T12779] xt_NFQUEUE: number of total queues is 0 [ 1012.620841][T12054] device hsr_slave_0 left promiscuous mode [ 1012.756612][T12054] device hsr_slave_1 left promiscuous mode [ 1012.773638][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.366213][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.793818][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.828025][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.879128][T12054] device bridge_slave_1 left promiscuous mode [ 1015.132174][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.000114][T12809] Cannot find set identified by id 0 to match [ 1016.884718][T12054] device bridge_slave_0 left promiscuous mode [ 1016.891659][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.977946][T12054] device veth1_macvtap left promiscuous mode [ 1016.984243][T12054] device veth0_macvtap left promiscuous mode [ 1017.937367][T12054] device veth1_vlan left promiscuous mode [ 1017.943487][T12054] device veth0_vlan left promiscuous mode [ 1021.060335][T12054] team0 (unregistering): Port device team_slave_1 removed [ 1021.164551][T12836] xt_NFQUEUE: number of total queues is 0 [ 1021.944357][T12054] team0 (unregistering): Port device team_slave_0 removed [ 1021.991261][T12054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.021459][T12054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.427099][T12054] bond0 (unregistering): Released all slaves [ 1024.123037][T12853] loop5: detected capacity change from 0 to 7 [ 1024.208716][T12853] Dev loop5: unable to read RDB block 7 [ 1024.214743][T12853] loop5: AHDI p1 [ 1024.219061][T12853] loop5: partition table partially beyond EOD, truncated [ 1026.908086][T12629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1027.919718][T12629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1027.964651][T12629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1028.109033][T12629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1029.086027][T12907] fuse: Invalid rootmode [ 1029.992475][T12912] loop5: detected capacity change from 0 to 7 [ 1030.333699][T12912] Dev loop5: unable to read RDB block 7 [ 1030.339557][T12912] loop5: AHDI p1 [ 1030.343266][T12912] loop5: partition table partially beyond EOD, truncated [ 1030.765484][T12629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.790279][T12629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.924440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1030.964777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1032.312392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1033.634162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1033.643067][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.650262][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.662232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1033.672966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1033.683442][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.690674][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.278415][T12938] xt_NFQUEUE: number of total queues is 0 [ 1035.787049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1035.801704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1035.830936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1036.391063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1037.088841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1037.104139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1037.587968][T12955] xt_NFQUEUE: number of total queues is 0 [ 1038.188166][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1038.198132][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1038.214292][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1038.228514][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1038.238595][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1038.253344][T12957] fuse: Invalid rootmode [ 1038.291981][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1038.334962][T12629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1041.488894][T12988] loop5: detected capacity change from 0 to 7 [ 1041.511714][T12988] Dev loop5: unable to read RDB block 7 [ 1041.517952][T12988] loop5: AHDI p1 [ 1041.521926][T12988] loop5: partition table partially beyond EOD, truncated [ 1043.914458][T13007] xt_NFQUEUE: number of total queues is 0 [ 1047.107888][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 1047.517992][T13027] loop5: detected capacity change from 0 to 7 [ 1047.984900][T13027] Dev loop5: unable to read RDB block 7 [ 1047.990649][T13027] loop5: AHDI p1 [ 1047.994609][T13027] loop5: partition table partially beyond EOD, truncated [ 1048.073941][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1048.107231][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1048.332805][T12629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.633039][T13000] lo speed is unknown, defaulting to 1000 [ 1049.176782][T11057] Bluetooth: hci2: command 0x041b tx timeout [ 1049.500917][T13000] chnl_net:caif_netlink_parms(): no params data found [ 1049.703033][T13058] loop5: detected capacity change from 0 to 7 [ 1049.724024][T13058] Dev loop5: unable to read RDB block 7 [ 1049.730351][T13058] loop5: AHDI p1 [ 1049.734116][T13058] loop5: partition table partially beyond EOD, truncated [ 1050.622117][T13067] input: syz0 as /devices/virtual/input/input17 [ 1050.706246][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.761430][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.818763][T13000] device bridge_slave_0 entered promiscuous mode [ 1050.957978][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.071835][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.110090][T13073] Cannot find set identified by id 0 to match [ 1051.750943][T13000] device bridge_slave_1 entered promiscuous mode [ 1051.880710][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 1052.635073][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.114419][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.699052][T13000] team0: Port device team_slave_0 added [ 1053.747002][T13080] lo speed is unknown, defaulting to 1000 [ 1053.778192][T13000] team0: Port device team_slave_1 added [ 1053.896655][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 1053.946516][T12941] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1053.965018][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.992050][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.199468][T13095] loop5: detected capacity change from 0 to 7 [ 1054.929876][T13095] Dev loop5: unable to read RDB block 7 [ 1054.935773][T13095] loop5: AHDI p1 [ 1054.939501][T13095] loop5: partition table partially beyond EOD, truncated [ 1054.976903][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.983553][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.076248][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 1055.093159][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.310765][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.412404][T13104] xt_NFQUEUE: number of total queues is 0 [ 1055.639148][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.144291][T12941] usb 2-1: device not accepting address 11, error -71 [ 1056.161901][T13110] loop5: detected capacity change from 0 to 7 [ 1056.184221][T13110] Dev loop5: unable to read RDB block 7 [ 1056.190192][T13110] loop5: AHDI p1 [ 1056.194036][T13110] loop5: partition table partially beyond EOD, truncated [ 1056.380764][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.009800][T13112] input: syz0 as /devices/virtual/input/input18 [ 1057.178999][T12969] Bluetooth: hci4: command 0x041b tx timeout [ 1057.404871][T13000] device hsr_slave_0 entered promiscuous mode [ 1057.420610][T13000] device hsr_slave_1 entered promiscuous mode [ 1057.432155][T13000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.471710][T13000] Cannot create hsr debugfs directory [ 1057.511192][T13132] xt_NFQUEUE: number of total queues is 0 [ 1057.946095][T13080] chnl_net:caif_netlink_parms(): no params data found [ 1058.926973][T13080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.935012][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.010817][T13080] device bridge_slave_0 entered promiscuous mode [ 1059.020774][T13080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.028805][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.038643][T13080] device bridge_slave_1 entered promiscuous mode [ 1059.172821][T13080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.259330][T13080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.304976][T10170] Bluetooth: hci4: command 0x040f tx timeout [ 1059.926691][T13080] team0: Port device team_slave_0 added [ 1059.981740][T13080] team0: Port device team_slave_1 added [ 1060.102294][T13080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.136873][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.215775][T13080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.307179][T13179] loop5: detected capacity change from 0 to 7 [ 1060.347779][T13179] Dev loop5: unable to read RDB block 7 [ 1060.353592][T13179] loop5: AHDI p1 [ 1060.357490][T13179] loop5: partition table partially beyond EOD, truncated [ 1060.551070][T13080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.609079][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.731732][T13080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.807944][T13179] netlink: 'syz.6.2019': attribute type 10 has an invalid length. [ 1060.816158][T13179] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2019'. [ 1061.050886][T13080] device hsr_slave_0 entered promiscuous mode [ 1061.085362][T13080] device hsr_slave_1 entered promiscuous mode [ 1061.105311][T13080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.133964][T13080] Cannot create hsr debugfs directory [ 1061.276605][T13188] xt_NFQUEUE: number of total queues is 0 [ 1061.346500][T10170] Bluetooth: hci4: command 0x0419 tx timeout [ 1062.127805][T13194] loop5: detected capacity change from 0 to 7 [ 1062.152699][T13194] Dev loop5: unable to read RDB block 7 [ 1062.158852][T13194] loop5: AHDI p1 [ 1062.162642][T13194] loop5: partition table partially beyond EOD, truncated [ 1064.199770][T12054] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.816784][T13228] xt_NFQUEUE: number of total queues is 0 [ 1065.055811][T12054] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.092539][T13239] loop5: detected capacity change from 0 to 7 [ 1065.112026][T13239] Dev loop5: unable to read RDB block 7 [ 1065.118044][T13239] loop5: AHDI p1 [ 1065.122042][T13239] loop5: partition table partially beyond EOD, truncated [ 1065.192937][T13239] netlink: 'syz.6.2028': attribute type 10 has an invalid length. [ 1065.201283][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2028'. [ 1067.338490][T12054] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.401813][T13257] loop5: detected capacity change from 0 to 7 [ 1068.420153][T13257] Dev loop5: unable to read RDB block 7 [ 1068.426107][T13257] loop5: AHDI p1 [ 1068.430012][T13257] loop5: partition table partially beyond EOD, truncated [ 1068.704089][T12054] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.296430][ T4232] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1069.966886][ T4232] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1070.045259][ T4232] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1070.070457][ T4232] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1070.082880][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.199053][T13262] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1070.871377][ T4232] usb 2-1: USB disconnect, device number 13 [ 1071.193764][T11438] udevd[11438]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.872093][T12054] tipc: Left network mode [ 1073.340894][T13300] loop5: detected capacity change from 0 to 7 [ 1073.394606][T13304] netlink: 'syz.6.2040': attribute type 10 has an invalid length. [ 1073.402955][T13304] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2040'. [ 1073.616718][T13300] Dev loop5: unable to read RDB block 7 [ 1073.622390][T13300] loop5: AHDI p1 [ 1073.626074][T13300] loop5: partition table partially beyond EOD, truncated [ 1074.869553][T13315] loop5: detected capacity change from 0 to 7 [ 1075.086774][T13315] Dev loop5: unable to read RDB block 7 [ 1075.093270][T13315] loop5: AHDI p1 [ 1075.098074][T13315] loop5: partition table partially beyond EOD, truncated [ 1079.222040][T13356] loop5: detected capacity change from 0 to 7 [ 1080.029652][T13356] Dev loop5: unable to read RDB block 7 [ 1080.035597][T13356] loop5: AHDI p1 [ 1080.040069][T13356] loop5: partition table partially beyond EOD, truncated [ 1080.469215][T13363] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2052'. [ 1083.114482][T13370] loop5: detected capacity change from 0 to 7 [ 1083.434918][T13370] Dev loop5: unable to read RDB block 7 [ 1083.441290][T13370] loop5: AHDI p1 [ 1083.445025][T13370] loop5: partition table partially beyond EOD, truncated [ 1087.256959][ T5667] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1087.926624][ T5667] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1088.328545][T13422] loop5: detected capacity change from 0 to 7 [ 1088.664304][ T5667] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1088.683288][T13422] Dev loop5: unable to read RDB block 7 [ 1088.689303][T13422] loop5: AHDI p1 [ 1088.693112][T13422] loop5: partition table partially beyond EOD, truncated [ 1088.740906][ T5667] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1088.752050][ T5667] usb 10-1: Product: syz [ 1088.757955][ T5667] usb 10-1: Manufacturer: syz [ 1088.764317][ T5667] usb 10-1: SerialNumber: syz [ 1089.561551][ T5667] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1089.664864][ T5667] usb 10-1: USB disconnect, device number 3 [ 1089.695580][ T5667] usblp0: removed [ 1094.441243][T13000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1094.836670][T13477] loop5: detected capacity change from 0 to 7 [ 1094.858346][T13000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1094.874445][T13477] Dev loop5: unable to read RDB block 7 [ 1094.880665][T13477] loop5: AHDI p1 [ 1094.884452][T13477] loop5: partition table partially beyond EOD, truncated [ 1095.780992][T13000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1096.269192][T12054] device hsr_slave_0 left promiscuous mode [ 1096.302261][T12054] device hsr_slave_1 left promiscuous mode [ 1096.383755][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.399671][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.408460][T12054] device bridge_slave_1 left promiscuous mode [ 1096.415280][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.427049][T12054] device bridge_slave_0 left promiscuous mode [ 1096.433492][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.522040][T12054] device hsr_slave_0 left promiscuous mode [ 1096.541644][T12054] device hsr_slave_1 left promiscuous mode [ 1096.576502][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.616454][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.643860][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.675053][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.696184][T12054] bridge0: port 4(batadv0) entered disabled state [ 1096.865599][T12054] device dummy0 left promiscuous mode [ 1096.877220][T12054] bridge0: port 3(dummy0) entered disabled state [ 1096.892269][T12054] device bridge_slave_1 left promiscuous mode [ 1096.912397][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.940744][T12054] device bridge_slave_0 left promiscuous mode [ 1096.965887][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.037512][T12054] device veth1_macvtap left promiscuous mode [ 1097.064749][T12054] device veth0_macvtap left promiscuous mode [ 1097.089156][T12054] device veth1_vlan left promiscuous mode [ 1097.104550][T12054] device veth0_vlan left promiscuous mode [ 1097.948871][T13526] loop5: detected capacity change from 0 to 7 [ 1098.001986][T13526] Dev loop5: unable to read RDB block 7 [ 1098.007940][T13526] loop5: AHDI p1 [ 1098.012911][T13526] loop5: partition table partially beyond EOD, truncated [ 1098.053362][T12054] team0 (unregistering): Port device team_slave_1 removed [ 1098.123225][T12054] team0 (unregistering): Port device team_slave_0 removed [ 1098.149980][T12054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.215197][T12054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.481561][T12054] bond0 (unregistering): Released all slaves [ 1099.712163][T12054] team0 (unregistering): Port device team_slave_1 removed [ 1099.875723][T12054] team0 (unregistering): Port device team_slave_0 removed [ 1099.891279][T12054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.908773][T12054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.431398][T12054] bond0 (unregistering): Released all slaves [ 1100.498611][T13000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1100.518874][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2081'. [ 1100.528689][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2081'. [ 1100.538263][T13518] netlink: 'syz.6.2081': attribute type 13 has an invalid length. [ 1100.546909][T13518] netlink: 'syz.6.2081': attribute type 12 has an invalid length. [ 1101.926021][T13080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1101.995542][T13080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1102.025840][T13549] xt_NFQUEUE: number of total queues is 0 [ 1103.162282][T13080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1103.686417][T13080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1103.752731][T13553] lo speed is unknown, defaulting to 1000 [ 1104.006533][ T4232] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1104.103315][T13080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.154325][T13080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.169615][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1104.197256][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1104.244401][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1104.255791][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1104.263491][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 1104.270152][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.277683][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.294958][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1104.331023][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1104.382398][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1104.431812][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.439473][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.840431][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1104.881423][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1104.922989][T13578] xt_NFQUEUE: number of total queues is 0 [ 1105.230793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1105.546994][ T3520] Bluetooth: hci1: command 0x0409 tx timeout [ 1105.657571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1105.708289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1105.764107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1105.808634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1105.836791][ T4232] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1105.846299][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.847919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1105.875250][ T4232] usb 2-1: Product: syz [ 1105.895526][ T4232] usb 2-1: Manufacturer: syz [ 1105.914203][ T4232] usb 2-1: SerialNumber: syz [ 1105.930357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1105.959601][ T4232] usb 2-1: config 0 descriptor?? [ 1106.000995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1106.024745][T13080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1106.040454][T13080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1106.120921][T13583] xt_NFQUEUE: number of total queues is 0 [ 1106.212952][T13553] chnl_net:caif_netlink_parms(): no params data found [ 1107.282656][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1107.295762][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1107.577494][ T5667] Bluetooth: hci1: command 0x041b tx timeout [ 1107.765527][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.789019][T12941] usb 2-1: USB disconnect, device number 14 [ 1107.795244][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.883789][T13553] device bridge_slave_0 entered promiscuous mode [ 1108.256394][T13603] xt_NFQUEUE: number of total queues is 0 [ 1109.461144][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.474205][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.483296][T13553] device bridge_slave_1 entered promiscuous mode [ 1109.667022][ T5667] Bluetooth: hci1: command 0x040f tx timeout [ 1110.094931][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.260692][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.491920][T13618] loop5: detected capacity change from 0 to 7 [ 1110.510295][T13618] Dev loop5: unable to read RDB block 7 [ 1110.516379][T13618] loop5: AHDI p1 [ 1110.520277][T13618] loop5: partition table partially beyond EOD, truncated [ 1110.965950][T13553] team0: Port device team_slave_0 added [ 1111.320459][T13553] team0: Port device team_slave_1 added [ 1111.432814][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.488488][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.563600][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.591596][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.606462][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.666410][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.736859][ T5667] Bluetooth: hci1: command 0x0419 tx timeout [ 1112.030628][T13553] device hsr_slave_0 entered promiscuous mode [ 1112.111927][T13629] xt_NFQUEUE: number of total queues is 0 [ 1112.326140][T13553] device hsr_slave_1 entered promiscuous mode [ 1113.466900][T13632] lo speed is unknown, defaulting to 1000 [ 1114.850388][T13632] chnl_net:caif_netlink_parms(): no params data found [ 1115.024640][T10170] Bluetooth: hci2: command 0x0409 tx timeout [ 1115.469460][T13652] xt_NFQUEUE: number of total queues is 0 [ 1116.773480][T13553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1116.815953][T13553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1116.847598][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.854835][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.877223][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.883979][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.905364][T13632] device bridge_slave_0 entered promiscuous mode [ 1116.917547][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.924812][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.935687][T13632] device bridge_slave_1 entered promiscuous mode [ 1116.956619][T13553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1116.981481][ T5667] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 1117.105990][ T5667] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1117.124622][ T5667] Bluetooth: hci2: command 0x041b tx timeout [ 1117.815256][T13553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1118.006260][T13632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.052315][T13666] fido_id[13666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1118.111825][T13632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.377582][T13632] team0: Port device team_slave_0 added [ 1118.386885][T13632] team0: Port device team_slave_1 added [ 1118.411681][T13632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.418919][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.538711][T13632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.559338][T13632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.566611][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.595843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.123106][T13632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.187119][ T5667] Bluetooth: hci2: command 0x040f tx timeout [ 1119.515825][T13684] xt_NFQUEUE: number of total queues is 0 [ 1119.920004][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.250264][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.339726][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1120.364754][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1120.396080][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1120.416082][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1120.437122][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.451468][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.535911][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1120.587926][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1120.659212][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.669767][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.681060][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1120.744375][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1120.779499][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1120.831389][T13632] device hsr_slave_0 entered promiscuous mode [ 1120.848115][T13632] device hsr_slave_1 entered promiscuous mode [ 1120.855464][T13632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.872461][T13632] Cannot create hsr debugfs directory [ 1121.289716][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1121.323762][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1121.368054][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1121.425073][ T3520] Bluetooth: hci2: command 0x0419 tx timeout [ 1121.434405][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1121.465172][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1121.486866][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1121.544889][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1121.566014][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1121.597183][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1122.647762][T13553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1124.247425][ T4231] Bluetooth: hci2: command 0x0405 tx timeout [ 1124.712730][T13714] loop5: detected capacity change from 0 to 7 [ 1124.834956][T13714] Dev loop5: unable to read RDB block 7 [ 1124.840737][T13714] loop5: AHDI p1 [ 1124.844777][T13714] loop5: partition table partially beyond EOD, truncated [ 1125.316078][ T3520] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1125.440966][ T3520] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1125.765570][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1125.793246][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1128.165653][T13769] fido_id[13769]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1128.212414][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.504191][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1128.557020][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1128.601612][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1128.663445][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1128.801249][T13553] device veth0_vlan entered promiscuous mode [ 1128.854092][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1128.996416][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1129.209267][T13553] device veth1_vlan entered promiscuous mode [ 1129.418495][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1129.441420][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1129.547561][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1129.615961][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1129.671747][T13553] device veth0_macvtap entered promiscuous mode [ 1129.689703][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1129.707820][T13553] device veth1_macvtap entered promiscuous mode [ 1129.816817][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.850579][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.872614][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.893087][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.905316][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.916810][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.928849][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.941577][T13632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1129.987138][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1130.061220][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1130.117888][T13632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1130.969843][T13632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1131.005134][T13632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1131.153851][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.178832][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.224056][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.280259][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.290714][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.301519][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.313593][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.385670][T13553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.440702][T13553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.474035][T13553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.525470][T13553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.841419][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1133.912606][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1134.819887][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.849576][ T13] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1134.877933][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.894979][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1134.946437][ T13] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1135.965900][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.984147][T13771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.992540][T13632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.020104][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1136.047207][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1136.056668][T13771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.096146][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1136.126720][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1136.140527][T13852] fido_id[13852]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1136.285610][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.292910][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.376810][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1136.385817][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1136.395088][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.402319][ T6172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.411008][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1136.419429][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1136.505643][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1136.516454][ T4276] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1136.561022][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1136.606003][T13867] fuse: Invalid rootmode [ 1136.610964][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1136.649735][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1136.686808][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1136.720657][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1136.754198][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1136.766689][ T4276] usb 7-1: Using ep0 maxpacket: 16 [ 1136.799095][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1136.838932][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1136.896767][ T4276] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.919629][T13632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1136.924118][ T4276] usb 7-1: config 0 has no interfaces? [ 1136.948146][T13632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1136.961886][ T4276] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1136.964370][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1136.980463][ T4276] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.007924][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1137.023456][ T4276] usb 7-1: config 0 descriptor?? [ 1137.178825][T12054] device hsr_slave_0 left promiscuous mode [ 1137.206605][T12054] device hsr_slave_1 left promiscuous mode [ 1137.255554][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.272797][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.329410][T12054] device bridge_slave_1 left promiscuous mode [ 1137.345493][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.390202][T12054] device bridge_slave_0 left promiscuous mode [ 1137.433032][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.676603][T12054] device hsr_slave_0 left promiscuous mode [ 1137.706522][T12054] device hsr_slave_1 left promiscuous mode [ 1137.776627][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.787701][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.840850][T12054] device bridge_slave_1 left promiscuous mode [ 1137.858397][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.911590][T12054] device bridge_slave_0 left promiscuous mode [ 1137.929088][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.313170][T13860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1142.268448][ T4232] usb 7-1: USB disconnect, device number 3 [ 1142.543937][T12054] team0 (unregistering): Port device team_slave_1 removed [ 1142.570642][T12054] team0 (unregistering): Port device team_slave_0 removed [ 1143.602016][T12054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.759259][T12054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.326571][T12054] bond0 (unregistering): Released all slaves [ 1145.763134][T12054] team0 (unregistering): Port device team_slave_1 removed [ 1145.931280][T12054] team0 (unregistering): Port device team_slave_0 removed [ 1145.959452][T12054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.980579][T12054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.159881][T12054] bond0 (unregistering): Released all slaves [ 1147.701207][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1147.712963][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1147.759296][T13632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.796727][ T4231] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1149.246489][ T4231] usb 10-1: not running at top speed; connect to a high speed hub [ 1150.916489][ T4231] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1150.924645][ T4231] usb 10-1: can't read configurations, error -71 [ 1153.308337][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1153.353338][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1153.457755][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1153.498329][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1153.535088][T13632] device veth0_vlan entered promiscuous mode [ 1153.552673][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1153.659637][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1153.761773][T13632] device veth1_vlan entered promiscuous mode [ 1154.491047][T13771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1154.530320][T13771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1154.597664][T13771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1154.648671][T13771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1154.708236][T13632] device veth0_macvtap entered promiscuous mode [ 1154.725669][T13632] device veth1_macvtap entered promiscuous mode [ 1154.744153][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.755006][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.765897][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.777559][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.788240][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.799323][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.823795][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.835737][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.848152][T13632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.861991][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.921114][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.974362][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.041695][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.051788][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.062495][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.083187][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.251025][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.549957][T13632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.742822][T13632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.890638][T13632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.900042][T13632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.948181][T13632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.023230][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1156.042967][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1157.777247][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1157.786665][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1157.795736][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1157.807835][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.445085][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.476828][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.498349][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1159.583437][T14064] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 1159.594125][T14064] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 14064, name: syz.9.2175 [ 1159.603716][T14064] 1 lock held by syz.9.2175/14064: [ 1159.609239][T14064] #0: ffffffff8c344478 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 1159.619561][T14064] irq event stamp: 1320 [ 1159.624019][T14064] hardirqs last enabled at (1319): [] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1159.634610][T14064] hardirqs last disabled at (1320): [] _raw_spin_lock_irq+0x86/0xf0 [ 1159.644413][T14064] softirqs last enabled at (1284): [] ip_setsockopt+0x58a/0x3130 [ 1159.654393][T14064] softirqs last disabled at (1282): [] release_sock+0x2b/0x1b0 [ 1159.664265][T14064] Preemption disabled at: [ 1159.664284][T14064] [<0000000000000000>] 0x0 [ 1159.673910][T14064] CPU: 1 PID: 14064 Comm: syz.9.2175 Not tainted syzkaller #0 [ 1159.682578][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1159.694646][T14064] Call Trace: [ 1159.698033][T14064] [ 1159.701181][T14064] dump_stack_lvl+0x188/0x250 [ 1159.706687][T14064] ? ip_setsockopt+0x58a/0x3130 [ 1159.711605][T14064] ? show_regs_print_info+0x20/0x20 [ 1159.716965][T14064] ? load_image+0x400/0x400 [ 1159.721567][T14064] ___might_sleep+0x493/0x610 [ 1159.726299][T14064] ? __might_sleep+0xf0/0xf0 [ 1159.731005][T14064] down_read+0x20/0x2e0 [ 1159.735435][T14064] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1159.740795][T14064] ? kernfs_find_ns+0x510/0x510 [ 1159.745856][T14064] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 1159.752083][T14064] cgroup_get_from_path+0x5f/0x2f0 [ 1159.757655][T14064] cgroup_mt_check_v1+0x1d7/0x2e0 [ 1159.762833][T14064] xt_check_match+0x4e6/0xc50 [ 1159.767716][T14064] ? xt_check_proc_name+0x240/0x240 [ 1159.773069][T14064] ? pcpu_alloc+0x1121/0x1770 [ 1159.777805][T14064] ? xt_find_match+0x1e1/0x210 [ 1159.782716][T14064] translate_table+0x1551/0x20e0 [ 1159.787732][T14064] ? ipt_register_table+0x800/0x800 [ 1159.793022][T14064] ? __might_fault+0xb7/0x110 [ 1159.798109][T14064] ? __lock_acquire+0x7d10/0x7d10 [ 1159.803222][T14064] ? _copy_from_user+0x111/0x170 [ 1159.808393][T14064] do_ipt_set_ctl+0x964/0xd80 [ 1159.813405][T14064] ? nf_setsockopt+0x218/0x280 [ 1159.818217][T14064] ? ipt_unregister_table_exit+0x220/0x220 [ 1159.824166][T14064] ? __lock_acquire+0x7d10/0x7d10 [ 1159.829330][T14064] ? __mutex_lock_common+0x465/0x2400 [ 1159.834934][T14064] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1159.840633][T14064] ? mutex_unlock+0x10/0x10 [ 1159.845204][T14064] ? __local_bh_enable_ip+0x136/0x1c0 [ 1159.850758][T14064] ? lockdep_hardirqs_on+0x94/0x140 [ 1159.856046][T14064] ? __local_bh_enable_ip+0x136/0x1c0 [ 1159.861562][T14064] nf_setsockopt+0x25f/0x280 [ 1159.866477][T14064] ip_setsockopt+0x207d/0x3130 [ 1159.871500][T14064] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 1159.876964][T14064] ? __might_sleep+0xf0/0xf0 [ 1159.881615][T14064] ? preempt_schedule_irq+0xe6/0x160 [ 1159.886952][T14064] ? lockdep_hardirqs_off+0x70/0x100 [ 1159.892330][T14064] tcp_setsockopt+0x240/0x1e90 [ 1159.897267][T14064] ? aa_sk_perm+0x7dc/0x910 [ 1159.901815][T14064] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 1159.907516][T14064] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1159.913201][T14064] ? aa_af_perm+0x340/0x340 [ 1159.917749][T14064] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1159.923565][T14064] ? aa_sock_opt_perm+0x74/0x100 [ 1159.928562][T14064] ? sock_common_setsockopt+0x32/0xb0 [ 1159.933982][T14064] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1159.939326][T14064] __sys_setsockopt+0x2bf/0x3d0 [ 1159.944208][T14064] __x64_sys_setsockopt+0xb1/0xc0 [ 1159.949399][T14064] do_syscall_64+0x4c/0xa0 [ 1159.954009][T14064] ? clear_bhb_loop+0x30/0x80 [ 1159.958793][T14064] ? clear_bhb_loop+0x30/0x80 [ 1159.963585][T14064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1159.969636][T14064] RIP: 0033:0x7f2589e21819 [ 1159.974076][T14064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.994221][T14064] RSP: 002b:00007f258805a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1160.002660][T14064] RAX: ffffffffffffffda RBX: 00007f258a09b090 RCX: 00007f2589e21819 [ 1160.011006][T14064] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000b [ 1160.019225][T14064] RBP: 00007f2589eb7c91 R08: 00000000000022f8 R09: 0000000000000000 [ 1160.027321][T14064] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 1160.035462][T14064] R13: 00007f258a09b128 R14: 00007f258a09b090 R15: 00007fff7c876dc8 [ 1160.043689][T14064] [ 1160.046734][T14064] [ 1160.049060][T14064] ============================= [ 1160.053904][T14064] [ BUG: Invalid wait context ] [ 1160.058748][T14064] syzkaller #0 Tainted: G W [ 1160.064779][T14064] ----------------------------- [ 1160.069716][T14064] syz.9.2175/14064 is trying to lock: [ 1160.075079][T14064] ffffffff8c44fad0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1160.085182][T14064] other info that might help us debug this: [ 1160.091297][T14064] context-{4:4} [ 1160.094876][T14064] 1 lock held by syz.9.2175/14064: [ 1160.099990][T14064] #0: ffffffff8c344478 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 1160.109896][T14064] stack backtrace: [ 1160.113848][T14064] CPU: 1 PID: 14064 Comm: syz.9.2175 Tainted: G W syzkaller #0 [ 1160.123308][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1160.133418][T14064] Call Trace: [ 1160.136945][T14064] [ 1160.139905][T14064] dump_stack_lvl+0x188/0x250 [ 1160.144995][T14064] ? show_regs_print_info+0x20/0x20 [ 1160.150387][T14064] ? load_image+0x400/0x400 [ 1160.154938][T14064] __lock_acquire+0x1bf8/0x7d10 [ 1160.160308][T14064] ? 0xffffffffa001a000 [ 1160.164566][T14064] ? verify_lock_unused+0x140/0x140 [ 1160.169964][T14064] ? __printk_cpu_unlock+0x5f/0x70 [ 1160.175285][T14064] ? dump_stack_lvl+0x1fd/0x250 [ 1160.180252][T14064] ? ip_setsockopt+0x58a/0x3130 [ 1160.185140][T14064] ? show_regs_print_info+0x20/0x20 [ 1160.190573][T14064] ? load_image+0x400/0x400 [ 1160.195098][T14064] lock_acquire+0x19e/0x400 [ 1160.199721][T14064] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1160.205217][T14064] ? __might_sleep+0xf0/0xf0 [ 1160.209950][T14064] ? read_lock_is_recursive+0x10/0x10 [ 1160.215423][T14064] down_read+0x44/0x2e0 [ 1160.219584][T14064] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1160.225230][T14064] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 1160.230699][T14064] ? kernfs_find_ns+0x510/0x510 [ 1160.235642][T14064] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 1160.242204][T14064] cgroup_get_from_path+0x5f/0x2f0 [ 1160.247327][T14064] cgroup_mt_check_v1+0x1d7/0x2e0 [ 1160.252362][T14064] xt_check_match+0x4e6/0xc50 [ 1160.257179][T14064] ? xt_check_proc_name+0x240/0x240 [ 1160.262470][T14064] ? pcpu_alloc+0x1121/0x1770 [ 1160.267152][T14064] ? xt_find_match+0x1e1/0x210 [ 1160.271935][T14064] translate_table+0x1551/0x20e0 [ 1160.276902][T14064] ? ipt_register_table+0x800/0x800 [ 1160.282120][T14064] ? __might_fault+0xb7/0x110 [ 1160.286928][T14064] ? __lock_acquire+0x7d10/0x7d10 [ 1160.292076][T14064] ? _copy_from_user+0x111/0x170 [ 1160.297282][T14064] do_ipt_set_ctl+0x964/0xd80 [ 1160.302202][T14064] ? nf_setsockopt+0x218/0x280 [ 1160.307118][T14064] ? ipt_unregister_table_exit+0x220/0x220 [ 1160.312951][T14064] ? __lock_acquire+0x7d10/0x7d10 [ 1160.318213][T14064] ? __mutex_lock_common+0x465/0x2400 [ 1160.323604][T14064] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1160.329258][T14064] ? mutex_unlock+0x10/0x10 [ 1160.333771][T14064] ? __local_bh_enable_ip+0x136/0x1c0 [ 1160.339172][T14064] ? lockdep_hardirqs_on+0x94/0x140 [ 1160.344539][T14064] ? __local_bh_enable_ip+0x136/0x1c0 [ 1160.349949][T14064] nf_setsockopt+0x25f/0x280 [ 1160.354785][T14064] ip_setsockopt+0x207d/0x3130 [ 1160.359799][T14064] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 1160.365446][T14064] ? __might_sleep+0xf0/0xf0 [ 1160.370216][T14064] ? preempt_schedule_irq+0xe6/0x160 [ 1160.375704][T14064] ? lockdep_hardirqs_off+0x70/0x100 [ 1160.381451][T14064] tcp_setsockopt+0x240/0x1e90 [ 1160.386221][T14064] ? aa_sk_perm+0x7dc/0x910 [ 1160.390829][T14064] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 1160.396401][T14064] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1160.402211][T14064] ? aa_af_perm+0x340/0x340 [ 1160.406820][T14064] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1160.412467][T14064] ? aa_sock_opt_perm+0x74/0x100 [ 1160.417443][T14064] ? sock_common_setsockopt+0x32/0xb0 [ 1160.422842][T14064] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1160.428147][T14064] __sys_setsockopt+0x2bf/0x3d0 [ 1160.433134][T14064] __x64_sys_setsockopt+0xb1/0xc0 [ 1160.438276][T14064] do_syscall_64+0x4c/0xa0 [ 1160.442709][T14064] ? clear_bhb_loop+0x30/0x80 [ 1160.447402][T14064] ? clear_bhb_loop+0x30/0x80 [ 1160.452180][T14064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1160.458145][T14064] RIP: 0033:0x7f2589e21819 [ 1160.462571][T14064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.482790][T14064] RSP: 002b:00007f258805a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1160.491419][T14064] RAX: ffffffffffffffda RBX: 00007f258a09b090 RCX: 00007f2589e21819 [ 1160.499596][T14064] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000b [ 1160.507581][T14064] RBP: 00007f2589eb7c91 R08: 00000000000022f8 R09: 0000000000000000 [ 1160.515555][T14064] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 1160.523655][T14064] R13: 00007f258a09b128 R14: 00007f258a09b090 R15: 00007fff7c876dc8 [ 1160.531755][T14064] [ 1160.542410][T14064] xt_cgroup: invalid path, errno=-2 [ 1160.915960][T13768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.932723][T13768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.951403][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready