last executing test programs: 7m54.983543507s ago: executing program 0 (id=163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) close(0xffffffffffffffff) 7m52.942791921s ago: executing program 32 (id=169): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x518) capget(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0}, 0x38) r1 = syz_open_dev$video4linux(0x0, 0xeb000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 7m50.814799082s ago: executing program 0 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31"], 0x15c}}, 0x0) 7m50.305560113s ago: executing program 33 (id=180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = getpid() r5 = syz_open_procfs(0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) close_range(r0, r5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000600)=0x0) syz_clone3(&(0x7f0000000680)={0x88000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000004c0), {0x33}, &(0x7f0000000500)=""/120, 0x78, &(0x7f0000000580)=""/123, &(0x7f0000000640)=[r4, r1, 0x0, r7, r4], 0x5, {r5}}, 0x58) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r9, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f0000000080)={0x18, r9}) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 7m50.262712396s ago: executing program 0 (id=182): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m50.070496571s ago: executing program 0 (id=183): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@dioread_nolock}, {@resgid}, {@barrier}]}, 0x2, 0xbd1, &(0x7f0000002f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r5) socket$inet_smc(0x2b, 0x1, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8c50e2, &(0x7f00000001c0)={[{}]}) eventfd2(0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) close(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) 7m48.995091638s ago: executing program 0 (id=185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) close(0xffffffffffffffff) 7m48.698714132s ago: executing program 2 (id=186): syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xc}]}}}}}}}, 0x0) 7m48.610703389s ago: executing program 2 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x53}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40045) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)='\xa9\x1c)\x00', 0xfffffffffffffffd) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) open(&(0x7f0000000040)='./file7\x00', 0x101000, 0x100) 7m48.580152021s ago: executing program 0 (id=188): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000040, 0x0) 7m47.451076071s ago: executing program 34 (id=188): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000040, 0x0) 7m46.432219983s ago: executing program 2 (id=190): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x21) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xf6e146edcf28725e) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x3, 0x119d, 0xf, 0x7, 0x4}) 7m46.306667674s ago: executing program 2 (id=191): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@dioread_nolock}, {@resgid}, {@barrier}]}, 0x2, 0xbd1, &(0x7f0000002f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r5) socket$inet_smc(0x2b, 0x1, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8c50e2, &(0x7f00000001c0)={[{}]}) eventfd2(0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) close(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) 7m45.310249834s ago: executing program 2 (id=192): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) 7m44.686704583s ago: executing program 2 (id=193): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x613, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xfff2, 0xf}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3a}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7m44.36203394s ago: executing program 35 (id=193): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x613, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xfff2, 0xf}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3a}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7m34.653984079s ago: executing program 4 (id=170): bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 7m33.380170841s ago: executing program 6 (id=189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m33.198606565s ago: executing program 6 (id=195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6577000400000000000020747275ca9b1b57985a1dbbe4f5a9bdfc0d5ddd537465643a203030303030"], 0x2a, r2) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x48, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x400000000000000}, {0x0, 0x4, 0x400, 0xa78a}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x58, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac, {0x1, 0x40}}, 0x3, @random=0x4, 0x20, @val, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0x26, 0xc}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x81, 0x9}}, @void}}]}, 0x58}}, 0x20000000) 7m33.13482885s ago: executing program 4 (id=197): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@dioread_nolock}, {@resgid}, {@barrier}]}, 0x2, 0xbd1, &(0x7f0000002f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r5) socket$inet_smc(0x2b, 0x1, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8c50e2, &(0x7f00000001c0)={[{}]}) eventfd2(0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) close(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) 7m32.125803181s ago: executing program 4 (id=200): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 7m31.250835711s ago: executing program 4 (id=201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 7m30.65089378s ago: executing program 36 (id=201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 7m30.639167621s ago: executing program 6 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="23b8c638344ca929e7075acc3e9834a6cd039a14824285d39d85703c53e97e5a0d80c8fc00000000c6340909882d609c66b9ee89cc3432c5da4415a10fd135a56eb71ecbefe790873e0aaa4e0e30c8dfd51072000000000000000015ecc6fad80336f6af0e2c1ece958963715bcb930ae0a336229b702f0eea4c9488a71702da4394ff95af6eac00665bcae3ba8e78112945eaa90daec7d703f2d86620c1f8fc037cd665272754af4509a28dd2ea1fd560803e66a7dd21944db1", 0xfffffffffffffe1b, 0x4000082, 0x0, 0x0) 7m29.738863893s ago: executing program 7 (id=207): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, 0x0, 0x0) 7m29.586084785s ago: executing program 6 (id=208): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@dioread_nolock}, {@resgid}, {@barrier}]}, 0x2, 0xbd1, &(0x7f0000002f80)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r5) socket$inet_smc(0x2b, 0x1, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8c50e2, &(0x7f00000001c0)={[{}]}) eventfd2(0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) close(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) 7m29.509280102s ago: executing program 7 (id=209): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r6, 0x1, r5, 0x7, 0x80000}) 7m28.330679866s ago: executing program 6 (id=211): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r1) 7m26.90890477s ago: executing program 6 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xcb}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000b1000040"]) 7m25.902433411s ago: executing program 37 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xcb}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000b1000040"]) 7m25.877382243s ago: executing program 7 (id=215): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x2, 0xff}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 7m24.088496197s ago: executing program 7 (id=218): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@dioread_nolock}, {@resgid}, {@barrier}]}, 0x2, 0xbd1, &(0x7f0000002f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r5) socket$inet_smc(0x2b, 0x1, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8c50e2, &(0x7f00000001c0)={[{}]}) eventfd2(0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) close(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) 7m23.002307683s ago: executing program 7 (id=221): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be080005"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42004100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@bridge_getneigh={0x64, 0x1e, 0x20, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x10400, 0x41240}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x8}, {0x8, 0x13, 0x0, 0x0, 0x4}, {0x8, 0x1f, 0x0, 0x0, 0x9}]}}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040100) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) 7m21.874436174s ago: executing program 7 (id=222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000710000400000"]) madvise(&(0x7f0000bd4000/0x5000)=nil, 0x5000, 0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r5], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, r5}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 7m21.539092671s ago: executing program 38 (id=222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000710000400000"]) madvise(&(0x7f0000bd4000/0x5000)=nil, 0x5000, 0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r5], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, r5}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 7m21.419733891s ago: executing program 5 (id=224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x700) r2 = socket(0x1e, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@id, 0x80, 0x0}}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x81, 0x2}, 0x80, &(0x7f0000003580)=[{&(0x7f0000000000)="8f5761c0a6cf9648b67b00d8cfc0910248aa0ad99238ba", 0x17}, {&(0x7f0000000280)="712f5a26cdd0c540faee1d2b4598971c280da4c241ff23ee9b3cba246ca039a006ea795870b3e3ad685abb37c04428836d0060fa30c5fb79afd7e3350ecf8aa7369e60e28e59ca53f7ea7e096a677c3cedf359207799baeb5b105db697fbe77ba336381ac281daf11740d582a2d63faa6ec837ff82d676423d2de412b0760b51e2393b4d7fff0479498817bfb5542565ef60612af84fdd4839bdedc6b8a7bd1a10762074a277d529a2ff2502edda183e90366b4f4449d49b11857c9636e0521a504acacfec34766595f477e26fe2e557e2852d6098f2512fe2769fbde18292254ccd9ca9173c71fb7f50eecd6714d938c6bc14aeeb7395075d35913e285e41c5a387ad845bd3947d33974e2c58e17c05dfdfa4de9be05b7dcd5012f765c436fe2459e75f2c35b789842a0d35479afb3dffbf2349e7bf7e877a60599a068f28318124386fd1cd4fca6aa140b88d3046e5f6d6c742b3cfe63df6246902b710ba41d6f0c0fa3f3df8e5bf3950103895b993ac1e1cbf5dc5f3f536bc6cead044707e0dbf3041d864a9720a999555bab3238e5d5be87e95329b1f8c025fd96e78d5503bd3524529576689022da840325b1cc82529f3d4af9c766496638ed2c6e7d242dbb7329a5935aaefa4871382a77286e3b79b2560ccdff48ce695b1b3d6d4edd84fb99ba5cc2507487f05cb5f010edad0447cc6f358c7162280d8ea3f1762944fd2e9bc92e8da6a64cd3f8b708db78500e82b956373262de3bf7610f8a555cdfa263910d6c79c384f940c76aae774df48af185b5732d8c7689b6a4625987ae55b0fc79dd5617717df48212ff0e2bc0a290951e5ca71197759a4fddafadcd04fb71550fc9413780fe02c144fae9a4e2de24f7bb202f9632b9322795ebcb07136bf7d25778d7240725c4ff2f42c2ff9c7dd7e6dba6107d3dd584aedcea324445b5a2cbe3e76d86086930a0a0bc941eab4c34395f3cadee442c29a5fe3403b1ad6bfff5d44b556898d8da46be530a90692410a13b7b471d078e81d8899c3f9b2c4691df2e8a560d0583e15fe546708fc3add38b0e394f5aa6e40056ccb8406bf28ea4765f0696b2ef0b822a5dbd81930a124853e3801dcbc767be949d5c250e0d2d64ab2fb8197e98bc2d736587fdb8aacb080539aa9c819cb1ac633c9582c79992c164cc27294a3d447b98937ad3972b2ab1823768848f67e7515d95f574e2482adb0b7d5409e0696abf1f22932dc58d52e97ba2f98756ef5dc303e0cb573d04d523c37dade38b1ecafbe2fafa557acae357ea06f5e4df0c8edbca98cfabb582a4902b7dc8b2e569e48f98aa65cd46a2a5131f400f145be9e7db8730dc2dafb2c8bb3048f3307d6ca01fceb6f1cd6f4ad83de1c1da17b4a7ec34a1156b67519849f003b5590191a438281b2dd53771d4022c405717ed7fbf0e54074d7c3e0de4d75b08bf50dec5c34706daeadfedf23874e143b399f05e192861bb077a1bfec737cdcb8d8923686ab1a03fdcc7c34d6c389716f12c7608c76725889ea2f53c863fc691bf967cfd0614b209293cb66074adea8dd401a39aac65420a3c94f10cec18495d5b65e63b25a4cb4a149ed0fd4246ad8451a4966cbe9562101ebce87aa53fb67a890f635adbe8ae9a7e9f3295319fd6a978f0db7ff1a881a045448203d08befd1c76d1d565d0110eec996fb7c681339ae8824ea4a6af4245d385822c23223fa22e89146a549fca910722a71107de7b0666078996336aec7b5aa7208d0cb32ba955a98fe2eea6ceb63f3e85af3df7030dba9d5c64f6738d7050560298d3776de0037c49de5e8ffaf04c3e18ad95a1900ba355d3f12f1ecfd051efe818b6e287ac59f19029936f37f200e121a8522d7d90946d4a62af6ec8a29dc1c62ff940e17b5a147298b9cb8b70adf1f32c8ea59cac4cb0ee113d1067b8ec169a8a8ff291449946ab492a63e8f9fb7be280b1f247c2cdd6931ad92e44968a6399cde1aa6e1cd3c7b233f28ec18d7a80c659345ad34f0251591001c884beb2ff166dc37f30492c0a23b18b47d41252b18ebad2e820e273a5bfc754dae6ea6e44e893397331ea702920543b51a1356f0661db0151baf9d1c6fe825f31d0099dbd95785e5a1ab3e1453f3b83e3281c2b00ffcc3c4232cc18b4f680abdb6277423af9ded986f9bbea46ccb2033f6c1816ac2b6dc225a861e0f4c1087cdb476efd0f1814d92055959ad75daabc311bba3f6dc5ddc639c1a3c9fa6cdaa757ba4849b6563a2cf12db9e5248664a531f07b80f038e3701b04e6ecd8ec6e889f0bff4870d1d179045527a1599c4b46ad7e1666eaf6bd11dd07cc7e394c8ddbb07e99719c3bcef32dcfff9b5f0c19c6f3314162079870916a1cde2f9b283fa964e64a78a9d48fbd30c3ef4869202a724ce917517d651db7a2270d894743ce77e06778dba1c25d7b577ef598d1087122a18f87335b53bcb8a34c7705b990ec3e9272a2213e8e0b2efcb9628ac8fbac41ea1a77f391e7e9925bc4b242effc3e560bfd2d7173203cd5fa3f4e43e98a5b51bde94e11b1f1c0600c21e23d38ea72624584409d99d84e9001c7d7ebf55e16a7476d4f91a52020f25527bc9c246e9015a8ad756260fbd191f2e2174c59dd5a80760df986cf65943130fee85641887dd733a140d283890b5addfb076236b74afe8390583d601d6673090ff97d754bcb69157ed0054e03aca0998960be0e62dffd12a37f7a92448dfc71bd636de5c2bb888f96ce02293691b072e576f3a234e10a34d5933b6bd6623459dc109f377a5d3ad905d52dec07f51049e7c15435906e3160da62f3be227350c31a4bcb2cece2a066371aeacd29346727c0203eb8ec827bff1fed22e798c266024bbbb3e4d9fd74c6a8cd7609ffab68c2a5f1bc66a088852a1e4fdf002ef325f5dcb2f302b1df3637a75792f9452b3492f7920b5e8d26c3037bf346ff74d9a04afb999dea77be4877510a0c271e7e7a0d080901dc60f1743ec5d876612d3713c3befbcb43d98935e2ed4f3380ad3f1a2bebe82e23f48bbc444bb8edfdf04b30033fdcfc243e342645f18d675675f787c99faad0db2007fd85cfbd3eca2cc9e6613c525b2ae80a36b75bec35d0cc717f2a2aa388f34a68ed790b17bf3b0ca6adb559d24fdf11bc8116341d040d3d4f678a817e693c82c10bb9ef6bc023a919d3171665faa0c36b1eb0f94bff2f8d16a11fc2b5abd845b2d6d2a89a21823dba9e8305efbc66f796e7614a9797f77755f32af19424d40e4b4a5dddf94bdc27b74e90d02f3800351769eda2faf1a15daa4aa3eb7584fc74d480c5bedbb3e5b5fdcf8109fd4b9b4bcbb836a69c31d40ba3d65aac85629996b8a863ee449cf410b0da3fbf4bf8fe1bb6fd716b364c969d0232531201e5559f2b461f31fe0125400d4b3c0d2921199557d14085e952c54c804df8da2ad15b3be57c939582338777674daf853cce3f6c35b0aafa321e399cbdbbc97988ab3884698044b1e2bb9b64fea17d1381e51171229b8fbadd9a48466784a8bdbb08072a0f40116e717e2173b1597684fff4b508ecd68989f4bac3d04ab25c78d4745d80c17ec22f74de43bc89875f832f9b6e94ce426ca0abc35814ed2d83f9f991f04801cabcf586036d5aabafd03a91cc9f3249244f330ae553d1370035512464c96e6778434f96b81414ad6d64eeb7a170de143ab8dfa9a8dc191c258fa147b5381ec6cbd723c984c99771a5221660693b960a7e5031654d9b9f78737f307bb19887a1e11bc14a377b89c2f80f0505049734d562ed77c3f84750749f43ce1988ae3f595b4d34cce8c79fedcb489178144919835ccd9ea1a95206f17555b887182f30e073758270934b71b0817ac544cc85c2ba4b6e94e56269da7f2a8d6641a5d99d2d66e748a7db8b94776bc385b9e0463b5054319fd5c8f319fb7bf82054da14bc0571a647c7bfe78db6acefafd3fe5c67b779daae6544aab53bb4b2020b23e6d681484d8460e7d0ffc1a3865649d9a2adc917fedafa9341bcc136304fa4cd4f603e0214bbf32e8f6da54f179b4cc528358d17728f4ec5452ab5cc301a9a8fe723b4e6e352012ce597b79f2a7e5eaeacce0528156fbac0fc1f8b9b97b73a347786e0685c4a7c417552ed0843af697be7b0f08e8416b3eb9425d465e4858901786bb59b21c92aa9ad451ff5a8401ab4d37af79001ea66a0f46a754877cdf412ab02c2e74b123a96ba02e03134a1b18533e62d51dfaccf07304ea403937cab9a6bb008d97c6d950aa37626bc37b6885b3a316e6eecd19a6d280ce16f45ee57141b2cb7e4eab4d25d3f5b66aa0035ef93464a6caf6cd866015ba4497f25775b0c83c5e8fb2abc6a00a9a956b9c733e71c94087211022a1fa92e37836a60425f5003b1eddb8570581b07f21538ba2f4359d53c37c78c0976b7fed92001c7eb0fa945e9b34f46e66d9282cfb1144f60b60824b66521878f165940d3c43b9924104ef6ad99c21e9c73281aa8ce5bd52883da66c0aa309b6630d013ac53235a671432ea4e2834dd1bcec7ff419338549b26fae08da66d7bca7106c2ca6aaf97f0f553d39945cfb3ca6f30386510985ed7372fa8b6811318b15fd63532766061b0534a0dd5c7491329e34a91f347b309988042cf4113f6504065dd5b1715698a513e369a948cbca2b8ba610c15d72a01be03a02e9e8985828c5e246331d0bc62884e1ec426bee232dd6bb1730c25c4456a44e1ce3e11568f101ed3db29d3e42008d8c1b9c26f5959a906aa3ea5a247f01922a58b54061f7a5b394b35026d0e580f095815daaedd0f53c85d44b5850fb19bea6c10fd628dfeab2b1847bd8363165b839cdfa5feb3a5e877e65802764b92e2fdb3fcc0c5989c1830b4e4dcdefeaa7af6d23ba4c3bfeb8f95bf3db8fc6abea62d3c6777659ac32ce014f1b50ec353ef2a0e1e95738ac07cf6579d7a6a952ef59fa221d9c25b3f6e8a6b4fc300a84f990bafb5891edd5d95f2d429233bba0fcb2c3afafd634c5fc615787065592b38929af9ad84dc34bf7be912227b0dbeaaa50612b192248da60859aecc825d4ff8f5d0aea3f085d497bd2218274362055d140d8204f2789d8e02e49c00170fb840f004af92d7188ec3251bc14a01e50b9aa86413f228305b2bf3162eb61f15e835472e3ed14338f0d34db878a79bac6e4348a34fa2828a1ab6765524018e35ab870da76e32f8f98d4a68acd5c19e774a97fe7718a551b700dec491a51ddc6dd78df1320065ea9b4a08f53437a6f914982eeed3cc0f726c4fc8624694995ebac456cd4f73261bc6ac8130be63e3a2c95e2309f74ec484b6fb1ad6d6372b62b603b93e44954fbb9be0f8b296a5131d1fd6d0d273727060b9ba448e6506817c47952223fd1688233141672e8d15ba039eaec65f8d7a8654f257ff3182acdd8d2aa5afa0f8d9acf662d85716389113dc1abc262f24796424039e85f794584a9ea4c4b5b05e1b57cc3b8bc7724c769047ca1851c132d4f0a5cd68ce280376d9606b705cd9dffea87ee4d214e55523448e4a16a639e75cdd5bc9bb7c32721baa77570ff6916767766065bcf82228c83027527a15cbee75ac434f899d683c87fe9582975370bf31da15ab10aae46fcf4bc0235df0b097be556b0916a64141693a14086da73846e9a7bd507ca391bf8b491f6d6c5f413a607088a9c457ac4805216706e0b9a7a6d6f4c3375ce391bd2f3aa2ad49e6b6f14156155338f828667b82f11cca50c7a5af16331fa549da4da3bf7ee7053b4f5f658dedbef56d48427fcac8c6f19df1", 0x1000}, {&(0x7f0000003880)="f9deb2d4f58920274722589b4e421ab26e52a147e28188551484695532dfda028301603378ccbd7b8658b38febbae059cdd98de4b73b25f2e71e161563eb9091cc0b8bdb6d9321a5a1dd420c77e88a4c632f61799f4a995f0d7cb52304136c59eefef4bfddbf28df40df926a197a814cc4d112aeb82a8689e4a01d40b784b1590a71d604c11226ef60a859a41fef69028e5cdd635ebae804e6824bb54b88e86c31d807f2f8b5c11a7ecaf47907af6c596a15f32d048109a498b19ede31c04b28acc415217436da0ba7793b3a19b7562bf15f5c2d2c5f0d75978a4bb82493b4218283e808906ee70179433dd38bc2858053993f252bab26229427eafb9440322fc6f5f888aa2db482de4bdc97e0e492d54e4e4a54de8895a574eb553cc9a44f3bbc3d46ee997f4e3ac31b7ad78df8727c4afb80c9e0f1a5c07a973962386640344b24d8bf666418b31d8cceb60e3c9887f3a563a114ffa6fec05e037131f04daf5001b5580df7953804d23266811f6a38957ac5660b534f70aa5931549ded6b261a2da03ab12f03e6f555fdf61fb62c303ddd85bb5ae456b439774e938b7cccc4cb49d90fd57a65605cf679dd1db3fe49d1eed0291ac1e6e86cf8dfbf687d5cb0a8f3b35c698c809f262f050f9e629a60d3bc6ff99044819b2f046aecd2d70cc23507069d6e959a217d043283ff0d3a7272fe2679c71cb7066ee5a27e0eec330e2a18f1ec6d31cc8d2974e191a16b35f56622d88a45d967573027319289213aa728874773ba590a87c23f3b1de278ba835a6287203c3c3ecc21c957ca37f285603a3f68c80c5fbb6e876c342ad0e3763a13fdf9ce48868b5fd575281df828ef06da94ec45239c54bb822ab336500bf3d0b1b1342e25ca731b91b8611451da38255131cda151c92f39e2ad041d0e7d473800a8125876d722eb050b6b60e2b048f93cc9b8f24e7b8af8917b83c67b16c82ff42cc2785a6fda72dd12197df0890ded47c5adade942a127c8ff63f83ae9ca2182bba16c86f016653f436fbd9350bba5d1a9c1300cb734e24389a889db3bd99b1f126b6558579a80a4c8ba7d0be8796c4a79f01f2f883636d0635faa2e7a459d241d46f56d77d6653fc7531351ed93e1ba7b444dc120e50ed06c624a4ae04d2c0784b573d3c8cea1120df75fb0979a3d06436a188e243eb70f5f9ce38cbd73d9fa7a659474328250957168c96a02123d2f0c86a3fcfd0969abb10d08028afd3e5525e8cacdb941c9a6d8667cdaa046b00ef7a0cdae730536370b8fef0cc4568320d1fbad92f689a9d01c103d834fb2925dd96778bc8e8a3f77d4c1799d7a383b9ea06bccf1f5794a5695edb4b6c9c51930aa85d06fefa7de440f789b9d5bc1a2680c2cb90138b24b80f95300e6a50fe44e22f6539c8ad70bba3d3a8f74c080f98257651b15636b6d59921d3405a8ffa4e4f82240dfbdb7f7771ea6d7300a314b5a1ba30be01670a32eaf22c7278a2aee90d779b081ee16fc9445d6f175ec4d679e2975d59242bb15123b58342256a383340d2224096dea4ba64491f66deb090c3b2dbc3234462aac9db2deaacfbfcb9df1ec66d3c540c0abc4770209359ff879600896cb7d63553a91dc44972a3c3226c59c98a324d8400408e1f549f49523a1139618dc0aec4026ff8fd6c6e1912491c38999070d4e6510160546e021fa89c68f56a7b0ff48ee60b5a0f1baa18d8012d08ae58e6946b0fc740acb3ec0aa9a76ca65d9aa9be30b3897a623c976d58112d435ae7e82307195f98516627e2ddd108c607a6c2bbe75dc17259e1d3fbcb9bcc33b49b4979f5cfde9dd58994aced7f3d1a7717cafba2f940a919c96603df8791007c98c4e813d39a292a85cb1f1abaca9324400a09753564004026a4131911f115f59818cc625ff9ebbc5346ffbf1c2969f727a7ba4ed8f1460c29ddee75753862c4cecba6b7cfa0ffc5d0c25145df0bb37e1d44a9ba5ff72188a54f6c981b2f5a45657ec637126a6f3278e77786939ab7b106b6cf27952120041a6e08ed22ae57daea60048a450869c726284556a1f0b281e0e3a8f9efa817ecfb1e33438b9d215faa3ad09b29912c2a8f3459ecbd638b955b347aa1056d5db86a6de075aa96e6a33871ea019424426952f8dcc58a1e4cfe341740bda42b109c39ab130c03ae9f3d937fab5fdedb0d99f3b9778f7585c2e083ba910eab292d6920f6210e7089e5678e16c579974a4832c39f222e060863dc1cac500cdbe32f6928f02c1d6facf9f85e08a77a30d937b94772ac12b1476767b6ee5f8337e91bcefcbdc6fa0d6bbb8e05238339c65adba38f3a71032b16f2a372d022b0eabaa32c484975002edc835e763c261983a444909004144301fdc6a7ae89aa8788461fe2749e51afb9e46cd9f1ad8563e1f97a3f7af91e99b0e57a1b0e3ec2bf541036447412250f25c0b71fbe34efa3a637284880451dcad98c169e17807024343765659d33077c59172d05c798b88af1838cb247b3b02a96d3f86463e735fc719d11aed77c1b25e1c2b7ed7f090da1cf047f8eae4943bf7509191a4d880e916b28da29340c9188ac8e342bc7181590d5fbd5e1552b9fc87b26e770013c4788f301ac84da20f7335b59634bb43fb3796c643485810bddfd1625b4a0bb09eff54ba333298d433e47eee4fc02b120e41f51c5bea553a9ab463717e2c35900c67c8a6f649519931a08a43b938b785af3f65b03d538f757643fcab1f0c3588fb15b7d93f47b34a32d264417e35ec06aebfa7173f27339645d7dd913eb9481bbfc6e553805940d696e83d223ba38e6b4e6926053e60716c567f40ad94ed46467ff4f9ad7bfdd97ecdd28fa23d17c1cddb7928e9369ee5d14b9ab0700c833cc86c05dac1197a7105090e2d8eebee2d478617af4db5447d71cc2bd16944498c117f2ed49e6f17aace18cdf4c9658b3551e1328228753695d8df94eec38138f6041c91b0e33b4305f35a13a5f51ca1fe1fb3debbd457b0f7da6f681519847975304fd57948d007e309417d1aba56348206669bec0493d26d2f4c2b3cdb1c58fcd423f8f388f3edf9b74a82bc01c7f60ea2e7a5dc6d2a228344bb120010807a037d867cfd97a6d0e291364c3dcc4ba5ecbfff9f234b55d3bede0c5ee7dbb8faa4d1ffe13e39d32ff20f05e5ad984a1e0b814e5b2b930db84de8e7c99aac4c73d190965c14d03702e509bc596d08e27c5008a7182f3ef685fe1ac3fdf16b0db7005c7654fe8ae85ee8caeb4738f73eab9d151faa257265112903eea51c84309bd11a737c59b3b2fc85a0c1bf88dddb402dda0bba924722f71bfbabc565b63347033c542576f97fcf09c650a4256194ddb2828ccbaae8ae5fbe40f60480e57b63e0717e7bf88def4527b98dce8441975c69050a6cc6c140bbeb784438cdab4cfa0d02ef7c4e79a627133648d7f31f1ed9c97e2e3158b1e70840b2b4d1342a78c80ad31a77d6f63577c593b7f0c796443cbeffb41d4341e0ffe1a07007af991656558bbe5359577deda7f2c28b4c369ce30cb312f4fe9a2429698cc368572cc580af17e9170221dc5f527f88710c53e504f980cffb0d5124c7775b4cb9058c1418044c1e5ff26e85aacf30ed273f70a1fabdae1c1e6b3db11bf52da1c8d977b087c65ddc04fda5cca6e7c0eb2bc75728be061f83998197132469dc20026c1cca2186adcf04670e44fc75e9ce3a68a2cef515deb67d0ead9765a05560011531e4d0a61f88678dc4631f64c84f23936cd3a9ab67892dc9add16cb7f4e55f37c98a236de934df0a35d8eb89034539023336814cef3572a5c3b03cfff2cb369a745815dde610df1493f4ecfc9bc65ac750cc77e7beb2d64b2da72d5135fbcd0a4c0fba6c0ed52e651448c309221e8bc205cd995cbc26aa58ed2aeb1df31efe67698f98b730ac067df2881de0b30f806a1f23d32296bdc5842c4460a30d9189818dcee9817ffdcd93b4220658aea88a86503101d704eb42aa47424488dc8fd403f76a45cbbd905a573f6ca42bfa134f612395bc0815b807970b5e198ece8986d814caf94f9d7c976ab999f92d26358d0a4f981b2a2ec6ff435e93431639e7bfa67659ce518b32b408f70b7f2f8b9d99f854dc82e6c5c9add9f2d58d23536e6ba8c307a4c31ee3e2e17caa570d79b36d3c1309b8fe78a3c7262c2cf4e635c9aaf0367a39bea114ab6b2592b9035097f0982e520b976ab2bac8c2f3b32df39f473f43b4ade96539aa633a73cfe6df03800ea1a879c0767a9befa6cf343b4e5beb360f00db9b4c387424ff143d2265ca111e85435916e66104b764fbc9d0958543abe2e72da73d0d94bcb9a30af35bfe591fc6c98de8369d410f73b303a7c9b657239ca7878c955845992835e9374a68db0b9fdb77f9deb18ef57c68d630ef636a7c26a345d4f12cbb29746ab098174096dabe19c37a1e9989e98e8011547adf3b1a1f679d67488db86dc90863740361262f4770177c6da99ef2b91300add1547610a9dba3dfc2cac753a698bd4d0e7f36c3d0820dc446b76479f4a014332e7b208a06348f65ce7d0bd56b28a2ddb46f324dbe2b9018741e2258038a320f6351ad227dfff92a1fd23f7f2be2587c7c1632b312ec5f147293025734a72ac3cb3e3b4999c51563f45684d1c891593780875e1f6c904dcad0bede38d43c1430ed9c6586779a203f26c57597ac51f76496ef4c94785acfeb591359c263e6f53fee2909a52f81369cbe6403555837bd26c554785df1350443b340b033c31352dd5549cf459a3793a7a5e52f817d9949893f70cd899ffac6db91b6b0e86ed50ebe2aa0c224a9a89a4377ec2c3d0b95d8bffc04658b4c203fa1538a3800b00d904003d7641e9a8d3cd40cc801de5f5d3efbc021b59aa665e4b898c962d3b2bf278bd795584a8ecad1aa40de211d13eece3a69bc857023215ebe2bcdc06968af3fdcc57416a8a68d7d1b4b29261a6483b9beadfc4a01feffe5bff4cdac3254b805abeae8bef6bab7af7df755747f028bb5a376397b4e5251c38e06bb7db1febc788e012b77949aa64feede7c2a03ca8e3f65c8de3593d983328bf1e18d388a607feb04de2e9048254335250377943532cdd5436f37ab4ea941ac165954a9248c730b82b18a875dccd1507c2764b0480135b8a867685588f34e7908a99d947c476ade0f831bb071cda103e92673698c78c869bd83c089ed3691d0e1b8fba0f10f3ca17554280232d3add4f9992460359944daa8dfe204fa11861b869bbe7d47358e2e5f2a9edc3deb39d5e453f3d73e62583ecc6e6f16635244f044c9c7af9d2443491aa4d6a5d8c089a64be43b8a71cc23423deca45d19be09ebc5ea1be02d65308b13230df3dda2dfa78abc2052cb1105142a20ac8f79c87cf6355bce692016bfe31e96c38182e2b7920c1291e8daa19a2dfd337836c02abfc40d01d52e8dfd9ea3b67500b292d3ad525d3160b91ae2dcfc013691417ca839b6c9285bab3c5ff598137eb8d170640c36039b2b1c3b7dc4f493e0d1f718ab97a20f5a6039ec5d3223550deddff0a933753f7d4149e574ab01ce5c18930b41b9fa1743e8d65081b8b792c629ef0a23d34f34e40e54d8ae3602f6eeb1193836176014aacde87388779a2478247d3c8db82b00b51c3c1790bfce9e2db43ed603c6cb8c943c61ac4c2183de8e9218befe96bcdd7007d34576e4404e7f2f23c61762dd3184e5eb97010c261aa20a3eeb559316b4c7c87a3d6b61f0adc8bdb359c15a7771ec8fd212f29ddda9836b3b59c439f81dea9a870d54220abafc40bcf81f26722d879c97e9f3c260b32c70a88c60c72f65522568d0dbe4ab3c64ecfb57f8f8e6ee1879df820b8e9d71caa17b26240a98c0eb31401e2b06", 0x103a}, {&(0x7f0000002280)="d45679e258ee50289fa406e6a3e1a0e35fcd7bfa97197d5fa114dc1fc33d450aed331b3ab247bb4b9f0077ffb27892a11f0a63b571208ec7e5c02c4cf92c25300b3ea75d37f1036cd28fcc0a2234f313f2804c29d9b40bc51f0b756b9d6899751e395d2ac72cc2fb018ba1c76223352556cdb5cbaa655fafdffdec60b84e77dffe8ed71e091d57fb26ca7178984cd0e9a8898e32e14bbab8b380760fe60a879388795b15e9a9411f018ccead708a07c0d59d4a9983826fce51b9de26", 0xbc}, {&(0x7f0000000140)="b0f2fffec8da75", 0x7}, {&(0x7f0000002340)="9e17804f50cf77", 0x7}, {&(0x7f0000002380)="f8e381185a94768262f673eb5c7755e41b", 0x11}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="1bba8b2c0441e6336aa8461fba5721c5619fc9574374449968346430303a2e7c50078d0b323df541a49102d1738aa3761a339326b96a6272d6b1a26a5256fccb6421279de7ff4a3cedd369b16af6ae2c9f9f9a9fd9666c2a369b58de7cbbd03b4f91525a32af4d177f21a1106636aaeb9a27269b11403834907413a768371fcbb80fae59b3a0918758d99442a54de71d934df7b6a802d6ee2863db07e2ff99e7d3ff8091b195c2aafc5e8ed50e4f4ce5bb0f948cb4ff670e82c98db131", 0xbd}, {&(0x7f0000003480)="6ea4461a1d73287d2c86843ecc283386a99ca0d9ad4855e72bff2614bc73015aa8cd364ba70981fe3eaed916944f4e60138e7e11520d764dbfef8bff27d91c59b508800d7b3239b7de511a0600bc40e046c6e6ae9cb584bb78ce40b480e09581c842d98f7f2e20687c88c39cd52c7037e364d602b493283451a9836cd09efbdc30361b678497508c55833c2b05407f7e5d0588cd96bc0bca833c3206461cfbd6760e565b6233b8cd4b8cc73707c2f5948f0e9fad652070da5a03d0771b54b950c42d6cfd38861f1b19b87baf403c310a9b5086f1803c683c", 0xd8}], 0xa, &(0x7f0000003600)=[@timestamping={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003640)="018cd9713ce80f3872dec56e9c8207ecb311a484515421d1f88a61ed4f680674e01af77c0ca4f07db26d7bc4c19e10f746a205ee7cce670a00423eec428ab71f3087bb7231b9a827a479e62a288643bf9c3058a45253ddf9a162943a1fdf4f317e2d496c44a7d48801555aaf97205e3bb04f0fc1842a9ad23440346e63acf113a2725b3f47bc7480367b6337fb245c258c80d99464045cdd845b7a827baeec489f50137771ec4711c642033ffa2e0922c0b0b851b341", 0xb6}, {&(0x7f0000003700)="e8328c0e7df07672c95ced5e68e25d763f6599d0a7cd2102afbcf872363f469c1d19d1ea5b62146c5cd54402bfcad384585325679af9f6cd", 0x38}], 0x2, &(0x7f0000003780)=[@mark={{0x10, 0x1, 0x24, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x3}}, @mark={{0x10, 0x1, 0x24, 0xe0000000}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x1f24aa8f}}], 0x54}}], 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)=ANY=[@ANYBLOB="a00000000514200028bd7000fbdbdf250800010002000000080003000f000000080001000100000008000300000000000800010000000000080003000200000008000100000000000800030003000000f5fe0100feffffff0800030003000000080001000000000008000300030000000800010002000000080003000300000008000100000000000800030004c8000008000100000000000800030002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 7m21.17448297s ago: executing program 5 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r1, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40006895}, 0x40010) 7m21.038497451s ago: executing program 5 (id=226): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) set_robust_list(&(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)}, 0xc) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f730344e6", 0x96, r1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}}, 0x7, 0x5, 0x1, 0x6999, 0xc2, 0x9, 0x40}, &(0x7f0000000240)=0x9c) fsmount(r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x4f6d, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x800001, 0x2d7, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ppoll(&(0x7f0000002040), 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f00000020c0)={[0x1]}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 7m20.068101799s ago: executing program 5 (id=227): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@dioread_nolock}, {@resgid}, {@barrier}]}, 0x2, 0xbd1, &(0x7f0000002f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r5) socket$inet_smc(0x2b, 0x1, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8c50e2, &(0x7f00000001c0)={[{}]}) eventfd2(0x0, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) close(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) 7m18.965477917s ago: executing program 5 (id=228): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be080005"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42004100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@bridge_getneigh={0x64, 0x1e, 0x20, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x10400, 0x41240}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x8}, {0x8, 0x13, 0x0, 0x0, 0x4}, {0x8, 0x1f, 0x0, 0x0, 0x9}]}}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040100) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) 7m18.398530833s ago: executing program 5 (id=229): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 7m18.109734766s ago: executing program 39 (id=229): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 12.952489013s ago: executing program 1 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000400)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18, r6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 11.559234936s ago: executing program 1 (id=1655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x53}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40045) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)='\xa9\x1c)\x00', 0xfffffffffffffffd) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) open(&(0x7f0000000040)='./file7\x00', 0x101000, 0x100) 9.709016805s ago: executing program 1 (id=1658): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42004100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@bridge_getneigh={0x64, 0x1e, 0x20, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x10400, 0x41240}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x8}, {0x8, 0x13, 0x0, 0x0, 0x4}, {0x8, 0x1f, 0x0, 0x0, 0x9}]}}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040100) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) 9.013610472s ago: executing program 8 (id=1661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300}) 8.503658832s ago: executing program 3 (id=1663): write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) 6.613784405s ago: executing program 3 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000400)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000400)={0x48}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 6.374809304s ago: executing program 1 (id=1666): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200087fc, &(0x7f00000000c0)={0x2, 0xe21, @empty}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x101) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x555e01, 0x31e) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000005c0)="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", 0x118, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 5.041400142s ago: executing program 3 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000190c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 5.031968223s ago: executing program 9 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="3d0033008000e100ffffffffffff080211000000503950505050000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.534686963s ago: executing program 9 (id=1670): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002140)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x844) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x2, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba7, 0xffff, 0x100006, 0x5, 0xa, 0x830, 0x30000, 0x10000, 0x2, 0x800, 0xe2df, 0x2, 0x8001, 0x7, 0xb, 0x4, 0x5, 0x470f]}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) 3.288297754s ago: executing program 9 (id=1671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.9699451s ago: executing program 9 (id=1672): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) set_robust_list(&(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)}, 0xc) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f730344e6", 0x96, r1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}}, 0x7, 0x5, 0x1, 0x6999, 0xc2, 0x9, 0x40}, 0x0) fsmount(r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x4f6d, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x800001, 0x2d7, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ppoll(&(0x7f0000002040), 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f00000020c0)={[0x1]}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2.902530475s ago: executing program 8 (id=1673): io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a30000000000500010007000000050001000700000009000200"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 2.631584047s ago: executing program 8 (id=1674): write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) 1.569955593s ago: executing program 9 (id=1675): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42004100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@bridge_getneigh={0x64, 0x1e, 0x20, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x10400, 0x41240}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x8}, {0x8, 0x13, 0x0, 0x0, 0x4}, {0x8, 0x1f, 0x0, 0x0, 0x9}]}}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040100) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) 1.397492627s ago: executing program 8 (id=1676): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c8, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x180, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x154, 0x9, 0x0, 0x1, [@m_ct={0xa8, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x65, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x7c, 0x2, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x3, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.198847363s ago: executing program 1 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000400)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000400)={0x48}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1.156423766s ago: executing program 8 (id=1678): r0 = openat$ptmx(0xffffff9c, &(0x7f00000015c0), 0x121080, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x457a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x5c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$TIOCSCTTY(r0, 0x540e, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000e7ffff94000000000000022af54d8f16b924e10aa156f7036f8eee34dd9dc9d6329c9f65"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001500)={'vxcan1\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001580)=[{{&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000140)="d8f48ea04b1c1523305da34a96320d8ed786ea871c95622bf6fc1c226098ddb5be19f560c39d0161d33eadf553a178d6d05cb697211eeab3f03d5c711d5c47cd0d46ce5d06d236473a", 0x49}, {&(0x7f00000001c0)="6f89cbf36b3d1bc41e6f3dd45d3e03b9bf77d907c96b7cdd6f0ef55b42ef8d181793f5f686b0eea78ca8ac432f3b3d03a1dda8d6920a23e07ba79a7a5a5529dc04df061855e59b2b5fd6e80c3388da3b4fe682dd50272a888b5799dc9832c8df", 0x60}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="98c7744c451aaa2bf2b638aea69b1476f7565f9922437b5f32659019d108a56cbcf1e7ca717c48c4fa9e90912dfcb54bda5999fa0b81342eaf346241d0e36254833a5bb92c18afc7fdefd242bc020eebefce133719146f835a310b5e4de5c0b1771ff12757c18f10a2dfa9e0331a018fb625c28b9e13b0b30ba9e59191f0eeb9d286176a44fa0020eaf4a85d3686a08964ed26718f44e335cf939405e1e608028afe61171c61d999fb1d05e100a75e0e91c35b21fe44bc3587bbdbd0d84a2e6cb9008324d5faa10184893285ea15aa88081d33d6e3", 0xd5}, {&(0x7f0000001a80)="47efb90f06bdc0b0f6c9a786291d5cfc8fd1147840f29c9d0564b55cb2dcb8b51daf0cb9f8b7c9eadba356dbe53f36b3d884addb67dd452e650e85cf85b11a3c3ba3a6c8a2c2141e62c4da89196ab0f071b67b202f1430c2639aa25dcc19391c155253d7b1244e53395de1370bd846939a8b7fd28c0a2720c1aa8c181b7bfac8e118db0e0f783ecdcc930dcbaead74888ed0ede2c1a6ff12c80ef096b29884e6020a765e5d05cf60a98d28532a226985d06e49b7b2431ba359c76a9ed990a467c2fdeefa515f0200", 0xc8}], 0x5, &(0x7f0000001540)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @multicast1, @broadcast}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}], 0x38}}], 0x1, 0x200408d4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x1c4, 0x0, 0x5}]}) 1.059135144s ago: executing program 3 (id=1679): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 618.706689ms ago: executing program 3 (id=1681): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000ec0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 128.736929ms ago: executing program 3 (id=1682): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 11.748409ms ago: executing program 8 (id=1683): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = getpid() getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$nl_xfrm(0x10, 0x3, 0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x4000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1]}) pipe2$watch_queue(0x0, 0x80) sched_setscheduler(r1, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) 0s ago: executing program 1 (id=1684): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) kernel console output (not intermixed with test programs): 9] bond0: (slave bond_slave_0): Releasing backup interface [ 236.536212][ T8119] bond0: (slave bond_slave_1): Releasing backup interface [ 236.569118][ T8119] team_slave_0: left promiscuous mode [ 236.633255][ T8119] team0: Port device team_slave_0 removed [ 236.659824][ T8119] team_slave_1: left promiscuous mode [ 236.698978][ T8119] team0: Port device team_slave_1 removed [ 236.730881][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.770675][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.798570][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.810120][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.838203][ T8125] team0: Mode changed to "activebackup" [ 236.934985][ T8120] vlan0: entered promiscuous mode [ 237.017201][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 237.026195][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 237.035378][ T5789] Bluetooth: hci1: hardware error 0x00 [ 237.056971][ T8120] team0: Port device vlan0 added [ 237.103508][ T8137] random: crng reseeded on system resumption [ 237.402568][ T8144] (null): rxe_set_mtu: Set mtu to 1024 [ 237.433380][ T8144] rdma_rxe: rxe_newlink: failed to add syz_tun [ 238.337384][ T8158] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 238.343939][ T8158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 238.352199][ T8158] vhci_hcd vhci_hcd.0: Device attached [ 238.884370][ T8160] vhci_hcd: connection closed [ 238.931340][ T3523] vhci_hcd: stop threads [ 239.255914][ T5789] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 239.267100][ T3523] vhci_hcd: release socket [ 239.292372][ T3523] vhci_hcd: disconnect device [ 239.329401][ T6764] vhci_hcd: vhci_device speed not set [ 239.635002][ T5789] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 240.210312][ T8189] (null): rxe_set_mtu: Set mtu to 1024 [ 240.226030][ T8189] rdma_rxe: rxe_newlink: failed to add syz_tun [ 240.626624][ T5789] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 240.636248][ T5789] Bluetooth: hci2: Injecting HCI hardware error event [ 240.644731][ T50] Bluetooth: hci2: hardware error 0x00 [ 240.880665][ T8201] random: crng reseeded on system resumption [ 242.089490][ T5789] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 242.102135][ T5789] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 242.249575][ T8213] netlink: 'syz.3.508': attribute type 5 has an invalid length. [ 242.457587][ T8217] netlink: 68 bytes leftover after parsing attributes in process `syz.3.509'. [ 242.813270][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 242.946853][ T8227] syz_tun: entered allmulticast mode [ 242.977700][ T8226] syz_tun: left allmulticast mode [ 243.512750][ T8235] netlink: 'syz.1.504': attribute type 10 has an invalid length. [ 243.645019][ T8235] team0: left allmulticast mode [ 243.658100][ T8235] team_slave_0: left allmulticast mode [ 243.664355][ T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 243.667383][ T8235] team_slave_1: left allmulticast mode [ 243.673082][ T50] Bluetooth: hci0: Injecting HCI hardware error event [ 243.717093][ T50] Bluetooth: hci0: hardware error 0x00 [ 243.729345][ T8235] team0: left promiscuous mode [ 243.764893][ T8235] team_slave_0: left promiscuous mode [ 243.791579][ T8235] team_slave_1: left promiscuous mode [ 243.828065][ T8235] bridge0: port 3(team0) entered disabled state [ 243.942843][ T8235] batman_adv: batadv0: Adding interface: team0 [ 243.987043][ T8235] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.094558][ T8235] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 244.152449][ T8196] netlink: 'syz.1.504': attribute type 10 has an invalid length. [ 244.172721][ T8196] netlink: 2 bytes leftover after parsing attributes in process `syz.1.504'. [ 244.184370][ T8196] team0: entered promiscuous mode [ 244.192574][ T8196] team_slave_0: entered promiscuous mode [ 244.198712][ T8196] team_slave_1: entered promiscuous mode [ 244.206766][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.213694][ T8196] batman_adv: batadv0: Interface activated: team0 [ 244.220574][ T8196] batman_adv: batadv0: Interface deactivated: team0 [ 244.575055][ T8196] batman_adv: batadv0: Removing interface: team0 [ 244.594781][ T8196] bridge0: port 3(team0) entered blocking state [ 244.604671][ T8196] bridge0: port 3(team0) entered disabled state [ 244.611101][ T8196] team0: entered allmulticast mode [ 244.626415][ T8196] team_slave_0: entered allmulticast mode [ 244.632554][ T8196] team_slave_1: entered allmulticast mode [ 245.974394][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.031182][ T8360] netlink: 256 bytes leftover after parsing attributes in process `syz.1.549'. [ 249.123322][ T788] IPVS: starting estimator thread 0... [ 249.254629][ T8369] IPVS: using max 34 ests per chain, 81600 per kthread [ 249.452777][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 252.089022][ T8425] netlink: 'syz.9.566': attribute type 10 has an invalid length. [ 252.157856][ T8425] bridge0: port 3(team0) entered disabled state [ 252.269955][ T8425] team0: left allmulticast mode [ 252.275736][ T8425] team_slave_0: left allmulticast mode [ 252.282692][ T8425] team_slave_1: left allmulticast mode [ 252.319598][ T8425] team0: left promiscuous mode [ 252.326839][ T8425] team_slave_0: left promiscuous mode [ 252.338881][ T8425] team_slave_1: left promiscuous mode [ 252.346784][ T8425] bridge0: port 3(team0) entered disabled state [ 252.389023][ T8425] batman_adv: batadv0: Adding interface: team0 [ 252.396127][ T8425] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.452807][ T8425] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 252.512278][ T8431] netlink: 'syz.9.566': attribute type 10 has an invalid length. [ 252.545293][ T8431] netlink: 2 bytes leftover after parsing attributes in process `syz.9.566'. [ 252.564059][ T8431] team0: entered promiscuous mode [ 252.570497][ T8431] team_slave_0: entered promiscuous mode [ 252.576813][ T8431] team_slave_1: entered promiscuous mode [ 252.585198][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.592216][ T8431] batman_adv: batadv0: Interface activated: team0 [ 252.599445][ T8431] batman_adv: batadv0: Interface deactivated: team0 [ 252.607837][ T8431] batman_adv: batadv0: Removing interface: team0 [ 252.628465][ T8431] bridge0: port 3(team0) entered blocking state [ 252.649217][ T8431] bridge0: port 3(team0) entered disabled state [ 252.667877][ T8431] team0: entered allmulticast mode [ 252.683298][ T8431] team_slave_0: entered allmulticast mode [ 252.689787][ T8431] team_slave_1: entered allmulticast mode [ 252.701635][ T8431] bridge0: port 3(team0) entered blocking state [ 252.708032][ T8431] bridge0: port 3(team0) entered forwarding state [ 252.717436][ T8432] syzkaller1: entered promiscuous mode [ 252.722958][ T8432] syzkaller1: entered allmulticast mode [ 253.403236][ T8454] overlayfs: failed to resolve './file0': -2 [ 253.565242][ T8452] (null): rxe_set_mtu: Set mtu to 1024 [ 253.727281][ T8452] rdma_rxe: rxe_newlink: failed to add syz_tun [ 255.103892][ T8476] syzkaller1: entered promiscuous mode [ 255.128734][ T8476] syzkaller1: entered allmulticast mode [ 255.764670][ T8489] fuse: Unknown parameter 'user_i00000000000000000000' [ 255.967268][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973557][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.523147][ T8515] overlayfs: failed to resolve './file0': -2 [ 259.397835][ T8527] (null): rxe_set_mtu: Set mtu to 1024 [ 259.406331][ T8527] rdma_rxe: rxe_newlink: failed to add syz_tun [ 259.495750][ T8530] fuse: Unknown parameter 'user_i00000000000000000000' [ 259.594092][ T50] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 260.482667][ T8555] (null): rxe_set_mtu: Set mtu to 1024 [ 260.504688][ T8555] rdma_rxe: rxe_newlink: failed to add syz_tun [ 261.305386][ T8561] fuse: Unknown parameter 'user_i00000000000000000000' [ 263.460202][ T8610] fuse: Unknown parameter 'user_id00000000000000000000' [ 263.645577][ T5789] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 263.655121][ T5789] Bluetooth: hci3: Injecting HCI hardware error event [ 263.663135][ T5789] Bluetooth: hci3: hardware error 0x00 [ 263.740717][ T8616] 9pnet_virtio: no channels available for device syz [ 264.254634][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.623'. [ 265.654509][ T8630] team0: Port device vlan0 removed [ 266.124418][ T5789] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 268.097810][ T8678] fuse: Unknown parameter 'user_id00000000000000000000' [ 268.189351][ T8682] (null): rxe_set_mtu: Set mtu to 1024 [ 268.210562][ T8682] rdma_rxe: rxe_newlink: failed to add syz_tun [ 271.156671][ T8727] fuse: Unknown parameter 'user_id00000000000000000000' [ 271.518816][ T8743] (null): rxe_set_mtu: Set mtu to 1024 [ 271.544559][ T8743] rdma_rxe: rxe_newlink: failed to add syz_tun [ 272.081144][ T8760] netlink: 'syz.8.647': attribute type 10 has an invalid length. [ 272.090595][ T8760] team0: left promiscuous mode [ 272.114364][ T8760] batman_adv: batadv0: Adding interface: team0 [ 272.120618][ T8760] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.159425][ T8760] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 272.230275][ T8756] netlink: 72 bytes leftover after parsing attributes in process `syz.9.648'. [ 272.823755][ T8784] fuse: Bad value for 'fd' [ 273.691062][ T8808] (null): rxe_set_mtu: Set mtu to 1024 [ 273.722762][ T8808] rdma_rxe: rxe_newlink: failed to add syz_tun [ 274.064721][ T8822] random: crng reseeded on system resumption [ 274.901340][ T8824] random: crng reseeded on system resumption [ 276.211803][ T8841] fuse: Bad value for 'fd' [ 276.941119][ T8854] (null): rxe_set_mtu: Set mtu to 1024 [ 276.947177][ T8854] rdma_rxe: rxe_newlink: failed to add syz_tun [ 277.371414][ T8871] random: crng reseeded on system resumption [ 278.713108][ T8884] random: crng reseeded on system resumption [ 279.220800][ T8899] fuse: Bad value for 'fd' [ 280.187927][ T8902] netlink: 'syz.9.667': attribute type 10 has an invalid length. [ 280.279011][ T8902] bridge0: port 3(team0) entered disabled state [ 280.435524][ T8902] team0: left allmulticast mode [ 280.440423][ T8902] team_slave_0: left allmulticast mode [ 280.459065][ T8902] team_slave_1: left allmulticast mode [ 280.468599][ T8902] team0: left promiscuous mode [ 280.473393][ T8902] team_slave_0: left promiscuous mode [ 280.562152][ T8917] random: crng reseeded on system resumption [ 281.264046][ T8902] team_slave_1: left promiscuous mode [ 281.382723][ T8902] bridge0: port 3(team0) entered disabled state [ 281.749412][ T8902] batman_adv: batadv0: Adding interface: team0 [ 281.764358][ T8902] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.801684][ T8902] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 281.822311][ T8916] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 282.194006][ T8916] team0: left allmulticast mode [ 282.247462][ T8916] team_slave_0: left allmulticast mode [ 282.272437][ T8916] team_slave_1: left allmulticast mode [ 282.308490][ T8916] team0: left promiscuous mode [ 282.327156][ T8916] team_slave_0: left promiscuous mode [ 282.350170][ T8916] team_slave_1: left promiscuous mode [ 282.390396][ T8916] bridge0: port 3(team0) entered disabled state [ 282.656424][ T8916] batman_adv: batadv0: Adding interface: team0 [ 282.662743][ T8916] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.874218][ T8916] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 282.903596][ T8949] random: crng reseeded on system resumption [ 283.065440][ T8941] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 283.083811][ T8941] netlink: 2 bytes leftover after parsing attributes in process `syz.1.676'. [ 283.099325][ T8941] team0: entered promiscuous mode [ 283.114747][ T8941] team_slave_0: entered promiscuous mode [ 283.120630][ T8941] team_slave_1: entered promiscuous mode [ 283.163337][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.172203][ T8941] batman_adv: batadv0: Interface activated: team0 [ 283.179046][ T8941] batman_adv: batadv0: Interface deactivated: team0 [ 283.200293][ T8941] batman_adv: batadv0: Removing interface: team0 [ 283.259075][ T8941] bridge0: port 3(team0) entered blocking state [ 283.272342][ T8960] fuse: Unknown parameter '0x0000000000000003' [ 283.610890][ T8941] bridge0: port 3(team0) entered disabled state [ 283.663354][ T8941] team0: entered allmulticast mode [ 283.689217][ T8941] team_slave_0: entered allmulticast mode [ 283.731720][ T8941] team_slave_1: entered allmulticast mode [ 284.051097][ T8979] random: crng reseeded on system resumption [ 284.911833][ T8984] random: crng reseeded on system resumption [ 285.046666][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.689'. [ 285.823276][ T9002] fuse: Unknown parameter '0x0000000000000003' [ 286.303387][ T9026] random: crng reseeded on system resumption [ 288.055763][ T9044] 9pnet_virtio: no channels available for device syz [ 289.331098][ T9059] fuse: Unknown parameter '0x0000000000000003' [ 290.794544][ T9064] netlink: 'syz.9.706': attribute type 13 has an invalid length. [ 290.802320][ T9064] netlink: 'syz.9.706': attribute type 17 has an invalid length. [ 290.896669][ T9064] infiniband syz1: set active [ 290.908534][ T9064] infiniband syz1: set active [ 290.944118][ T9064] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.967285][ T9064] batman_adv: batadv0: Interface activated: team0 [ 291.012445][ T9064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.125431][ T9076] random: crng reseeded on system resumption [ 292.662736][ T9104] fuse: Unknown parameter '0x0000000000000003' [ 293.219038][ T9119] 9pnet_virtio: no channels available for device syz [ 293.771163][ T9131] random: crng reseeded on system resumption [ 296.754829][ T9142] fuse: Unknown parameter '0x0000000000000003' [ 298.201191][ T9172] random: crng reseeded on system resumption [ 299.522413][ T9183] fuse: Unknown parameter '0x0000000000000003' [ 300.028086][ T9198] binder: 9197:9198 ioctl c0306201 0 returned -14 [ 300.310283][ T9167] loop9: detected capacity change from 0 to 32768 [ 300.621910][ T9167] lmLogOpen: exit(-6) [ 300.643714][ T9167] jfs_mount_rw failed, return code = -6 [ 300.711556][ T9218] 9pnet_virtio: no channels available for device syz [ 300.883416][ T9221] random: crng reseeded on system resumption [ 305.125943][ T9255] binder: 9254:9255 ioctl c0306201 0 returned -14 [ 305.555385][ T9269] random: crng reseeded on system resumption [ 306.770732][ T9283] netlink: 'syz.1.748': attribute type 10 has an invalid length. [ 306.851148][ T9283] team0: left allmulticast mode [ 306.878073][ T9283] team_slave_0: left allmulticast mode [ 306.907807][ T9283] team_slave_1: left allmulticast mode [ 306.920061][ T9283] team0: left promiscuous mode [ 306.925718][ T9283] team_slave_0: left promiscuous mode [ 306.932300][ T9283] team_slave_1: left promiscuous mode [ 306.945388][ T9283] bridge0: port 3(team0) entered disabled state [ 306.969423][ T9283] batman_adv: batadv0: Adding interface: team0 [ 306.976491][ T9283] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.006706][ T9283] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 307.025450][ T9287] netlink: 'syz.1.748': attribute type 10 has an invalid length. [ 307.033744][ T9287] netlink: 2 bytes leftover after parsing attributes in process `syz.1.748'. [ 307.051821][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.9.753'. [ 307.085595][ T9287] team0: entered promiscuous mode [ 307.090847][ T9287] team_slave_0: entered promiscuous mode [ 307.457461][ T9287] team_slave_1: entered promiscuous mode [ 307.508993][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.545443][ T9287] batman_adv: batadv0: Interface activated: team0 [ 307.551947][ T9287] batman_adv: batadv0: Interface deactivated: team0 [ 307.573207][ T9287] batman_adv: batadv0: Removing interface: team0 [ 307.633717][ T9287] bridge0: port 3(team0) entered blocking state [ 307.648391][ T9287] bridge0: port 3(team0) entered disabled state [ 307.694528][ T9287] team0: entered allmulticast mode [ 307.699708][ T9287] team_slave_0: entered allmulticast mode [ 307.712011][ T9287] team_slave_1: entered allmulticast mode [ 307.727129][ T9289] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.807972][ T9295] 9pnet_virtio: no channels available for device syz [ 311.227718][ T9335] random: crng reseeded on system resumption [ 312.032595][ T9307] syzkaller1: entered promiscuous mode [ 312.038588][ T9307] syzkaller1: entered allmulticast mode [ 312.933032][ T9360] 9pnet_virtio: no channels available for device syz [ 314.649749][ T9390] random: crng reseeded on system resumption [ 317.442661][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.450152][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.487070][ T9429] netlink: 'syz.9.779': attribute type 1 has an invalid length. [ 318.648494][ T9440] random: crng reseeded on system resumption [ 319.503894][ T9436] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 319.520242][ T9436] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 320.061611][ T9429] gretap1: entered promiscuous mode [ 320.129720][ T9429] bond1: (slave gretap1): making interface the new active one [ 320.148387][ T9429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 320.199457][ T9436] macvlan2: entered promiscuous mode [ 320.209683][ T9436] macvlan2: entered allmulticast mode [ 320.234957][ T9436] bond1: entered promiscuous mode [ 320.242866][ T9436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 320.261546][ T9436] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 320.274739][ T9436] bond1: left promiscuous mode [ 322.426527][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 322.469880][ T9460] syzkaller1: entered promiscuous mode [ 322.479977][ T9460] syzkaller1: entered allmulticast mode [ 323.332428][ T9488] random: crng reseeded on system resumption [ 324.880688][ T9512] binder: 9511:9512 ioctl c0306201 0 returned -14 [ 328.420291][ T9529] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 328.448422][ T9529] bridge0: port 3(team0) entered disabled state [ 328.515940][ T9529] team0: left allmulticast mode [ 328.544508][ T9529] team_slave_0: left allmulticast mode [ 328.549987][ T9529] team_slave_1: left allmulticast mode [ 328.564657][ T9529] team0: left promiscuous mode [ 328.569717][ T9529] team_slave_0: left promiscuous mode [ 330.072318][ T9529] team_slave_1: left promiscuous mode [ 330.101182][ T9529] bridge0: port 3(team0) entered disabled state [ 330.146950][ T9529] batman_adv: batadv0: Adding interface: team0 [ 330.153206][ T9529] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.183440][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.803'. [ 330.201651][ T9529] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 330.232259][ T9530] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 330.253439][ T9530] netlink: 2 bytes leftover after parsing attributes in process `syz.3.800'. [ 330.272542][ T9530] team0: entered promiscuous mode [ 330.279053][ T9530] team_slave_0: entered promiscuous mode [ 330.289728][ T9530] team_slave_1: entered promiscuous mode [ 330.297906][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.305167][ T9530] batman_adv: batadv0: Interface activated: team0 [ 330.312842][ T9530] batman_adv: batadv0: Interface deactivated: team0 [ 330.320889][ T9530] batman_adv: batadv0: Removing interface: team0 [ 330.332239][ T9530] bridge0: port 3(team0) entered blocking state [ 330.342378][ T9530] bridge0: port 3(team0) entered disabled state [ 330.356976][ T9530] team0: entered allmulticast mode [ 330.380278][ T9530] team_slave_0: entered allmulticast mode [ 330.388965][ T9530] team_slave_1: entered allmulticast mode [ 330.406713][ T9530] bridge0: port 3(team0) entered blocking state [ 330.413085][ T9530] bridge0: port 3(team0) entered forwarding state [ 330.454042][ T9534] tipc: Enabling of bearer rejected, failed to enable media [ 330.667992][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 334.390147][ T9623] netlink: 'syz.1.814': attribute type 10 has an invalid length. [ 334.427646][ T9623] team0: left allmulticast mode [ 334.437657][ T9623] team_slave_0: left allmulticast mode [ 334.443124][ T9623] team_slave_1: left allmulticast mode [ 334.449350][ T9623] team0: left promiscuous mode [ 334.454130][ T9623] team_slave_0: left promiscuous mode [ 334.460656][ T9623] team_slave_1: left promiscuous mode [ 334.466518][ T9623] bridge0: port 3(team0) entered disabled state [ 334.500704][ T9623] batman_adv: batadv0: Adding interface: team0 [ 334.524247][ T9623] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.567660][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.817'. [ 334.577057][ T9623] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 334.595941][ T9626] netlink: 'syz.1.814': attribute type 10 has an invalid length. [ 334.614863][ T9626] netlink: 2 bytes leftover after parsing attributes in process `syz.1.814'. [ 334.635663][ T9626] team0: entered promiscuous mode [ 334.644078][ T9626] team_slave_0: entered promiscuous mode [ 334.650409][ T9626] team_slave_1: entered promiscuous mode [ 334.657584][ T9626] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.670695][ T9626] batman_adv: batadv0: Interface activated: team0 [ 334.677411][ T9626] batman_adv: batadv0: Interface deactivated: team0 [ 334.687898][ T9626] batman_adv: batadv0: Removing interface: team0 [ 334.699131][ T9626] bridge0: port 3(team0) entered blocking state [ 334.706593][ T9626] bridge0: port 3(team0) entered disabled state [ 334.732039][ T9626] team0: entered allmulticast mode [ 334.742737][ T9626] team_slave_0: entered allmulticast mode [ 334.757877][ T9626] team_slave_1: entered allmulticast mode [ 334.859439][ T9635] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 334.865990][ T9635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 334.874056][ T9635] vhci_hcd vhci_hcd.0: Device attached [ 334.912576][ T9643] random: crng reseeded on system resumption [ 335.767033][ T9640] vhci_hcd: connection closed [ 335.798723][ T140] vhci_hcd: stop threads [ 335.808202][ T140] vhci_hcd: release socket [ 335.829785][ T140] vhci_hcd: disconnect device [ 335.864338][ T5877] vhci_hcd: vhci_device speed not set [ 336.432644][ T9673] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 339.134076][ T9693] netlink: 'syz.9.830': attribute type 10 has an invalid length. [ 339.166588][ T9693] batman_adv: batadv0: Interface deactivated: team0 [ 339.211294][ T9694] netlink: 'syz.9.830': attribute type 10 has an invalid length. [ 339.246523][ T9694] netlink: 2 bytes leftover after parsing attributes in process `syz.9.830'. [ 339.278601][ T9694] team0: entered promiscuous mode [ 339.301748][ T9694] team_slave_0: entered promiscuous mode [ 339.308844][ T9694] team_slave_1: entered promiscuous mode [ 339.325663][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 339.349585][ T9694] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.367829][ T9694] batman_adv: batadv0: Interface activated: team0 [ 339.374625][ T9701] autofs4:pid:9701:autofs_fill_super: called with bogus options [ 339.416047][ T9694] batman_adv: batadv0: Interface deactivated: team0 [ 339.431225][ T9694] batman_adv: batadv0: Removing interface: team0 [ 339.465034][ T9694] bridge0: port 3(team0) entered blocking state [ 339.478653][ T9694] bridge0: port 3(team0) entered disabled state [ 339.492033][ T9694] team0: entered allmulticast mode [ 339.497957][ T9694] team_slave_0: entered allmulticast mode [ 339.504473][ T9694] team_slave_1: entered allmulticast mode [ 339.545135][ T9694] bridge0: port 3(team0) entered blocking state [ 339.551451][ T9694] bridge0: port 3(team0) entered forwarding state [ 340.084388][ T9724] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 340.090947][ T9724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.099495][ T9724] vhci_hcd vhci_hcd.0: Device attached [ 340.427131][ T23] usb 51-1: new high-speed USB device number 3 using vhci_hcd [ 340.683006][ T9725] vhci_hcd: connection reset by peer [ 340.742760][ T48] vhci_hcd: stop threads [ 340.809896][ T48] vhci_hcd: release socket [ 340.887695][ T48] vhci_hcd: disconnect device [ 342.028656][ T9745] autofs4:pid:9745:autofs_fill_super: called with bogus options [ 342.535061][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.847'. [ 342.886469][ T9759] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 342.925838][ T9759] team0: left allmulticast mode [ 342.945189][ T9759] team_slave_0: left allmulticast mode [ 342.950949][ T9759] team_slave_1: left allmulticast mode [ 342.991258][ T9759] team0: left promiscuous mode [ 343.017322][ T9759] team_slave_0: left promiscuous mode [ 343.026151][ T9759] team_slave_1: left promiscuous mode [ 343.033305][ T9759] bridge0: port 3(team0) entered disabled state [ 343.102343][ T9759] batman_adv: batadv0: Adding interface: team0 [ 343.112410][ T9759] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.142396][ T9759] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 343.158965][ T9768] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 343.249554][ T9768] netlink: 2 bytes leftover after parsing attributes in process `syz.1.845'. [ 343.296476][ T9768] team0: entered promiscuous mode [ 343.322052][ T9768] team_slave_0: entered promiscuous mode [ 343.332213][ T9768] team_slave_1: entered promiscuous mode [ 343.345593][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.387735][ T9768] batman_adv: batadv0: Interface activated: team0 [ 343.412330][ T9768] batman_adv: batadv0: Interface deactivated: team0 [ 343.429247][ T9768] batman_adv: batadv0: Removing interface: team0 [ 343.451403][ T9768] bridge0: port 3(team0) entered blocking state [ 343.469565][ T9768] bridge0: port 3(team0) entered disabled state [ 343.487557][ T9768] team0: entered allmulticast mode [ 343.504136][ T9768] team_slave_0: entered allmulticast mode [ 343.522832][ T9768] team_slave_1: entered allmulticast mode [ 343.803162][ T9779] autofs4:pid:9779:autofs_fill_super: called with bogus options [ 344.997153][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 345.654324][ T23] vhci_hcd: vhci_device speed not set [ 346.199198][ T9838] netlink: 'syz.9.862': attribute type 10 has an invalid length. [ 346.221878][ T9838] bridge0: port 3(team0) entered disabled state [ 346.259536][ T9838] team0: left allmulticast mode [ 346.264804][ T9838] team_slave_0: left allmulticast mode [ 346.270286][ T9838] team_slave_1: left allmulticast mode [ 346.276474][ T9838] team0: left promiscuous mode [ 346.284483][ T9838] team_slave_0: left promiscuous mode [ 346.308662][ T9838] team_slave_1: left promiscuous mode [ 346.326986][ T9838] bridge0: port 3(team0) entered disabled state [ 346.349183][ T9838] batman_adv: batadv0: Adding interface: team0 [ 346.360784][ T9838] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.400965][ T9838] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 346.412988][ T9840] netlink: 'syz.9.862': attribute type 10 has an invalid length. [ 346.426113][ T9840] netlink: 2 bytes leftover after parsing attributes in process `syz.9.862'. [ 346.435331][ T9840] team0: entered promiscuous mode [ 346.444533][ T9840] team_slave_0: entered promiscuous mode [ 346.462921][ T9840] team_slave_1: entered promiscuous mode [ 346.495667][ T9840] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.515134][ T9840] batman_adv: batadv0: Interface activated: team0 [ 346.527870][ T9840] batman_adv: batadv0: Interface deactivated: team0 [ 346.548663][ T9840] batman_adv: batadv0: Removing interface: team0 [ 346.572314][ T9840] bridge0: port 3(team0) entered blocking state [ 346.579058][ T9840] bridge0: port 3(team0) entered disabled state [ 346.594693][ T9840] team0: entered allmulticast mode [ 346.602167][ T9840] team_slave_0: entered allmulticast mode [ 346.614644][ T9840] team_slave_1: entered allmulticast mode [ 346.656638][ T9840] bridge0: port 3(team0) entered blocking state [ 346.663008][ T9840] bridge0: port 3(team0) entered forwarding state [ 348.532952][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 348.674616][ T9922] random: crng reseeded on system resumption [ 350.055638][ T9935] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 350.097900][ T9935] bridge0: port 3(team0) entered disabled state [ 350.131432][ T9935] team0: left allmulticast mode [ 350.141843][ T9935] team_slave_0: left allmulticast mode [ 350.147919][ T9935] team_slave_1: left allmulticast mode [ 350.162992][ T9935] team0: left promiscuous mode [ 350.171278][ T9935] team_slave_0: left promiscuous mode [ 350.181567][ T9935] team_slave_1: left promiscuous mode [ 350.188338][ T9935] bridge0: port 3(team0) entered disabled state [ 350.213232][ T9935] batman_adv: batadv0: Adding interface: team0 [ 350.224556][ T9935] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.259862][ T9935] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 350.280864][ T9939] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 350.320175][ T9939] netlink: 2 bytes leftover after parsing attributes in process `syz.3.879'. [ 350.351182][ T9939] team0: entered promiscuous mode [ 350.357769][ T9939] team_slave_0: entered promiscuous mode [ 350.368071][ T9939] team_slave_1: entered promiscuous mode [ 350.380726][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.388586][ T9939] batman_adv: batadv0: Interface activated: team0 [ 350.398039][ T9939] batman_adv: batadv0: Interface deactivated: team0 [ 350.409877][ T9939] batman_adv: batadv0: Removing interface: team0 [ 350.573946][ T9939] bridge0: port 3(team0) entered blocking state [ 350.869353][ T9939] bridge0: port 3(team0) entered disabled state [ 350.876175][ T9939] team0: entered allmulticast mode [ 350.885030][ T9939] team_slave_0: entered allmulticast mode [ 350.890824][ T9939] team_slave_1: entered allmulticast mode [ 350.898246][ T9939] bridge0: port 3(team0) entered blocking state [ 350.904581][ T9939] bridge0: port 3(team0) entered forwarding state [ 351.428366][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 351.499261][ T9965] random: crng reseeded on system resumption [ 355.260646][ T9999] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 355.267218][ T9999] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 355.275229][T10000] vhci_hcd: connection closed [ 355.277312][ T9999] vhci_hcd vhci_hcd.0: Device attached [ 355.396025][ T78] vhci_hcd: stop threads [ 355.400693][ T78] vhci_hcd: release socket [ 355.405935][ T78] vhci_hcd: disconnect device [ 355.641418][T10016] netlink: 'syz.9.897': attribute type 10 has an invalid length. [ 356.464131][T10016] bridge0: port 3(team0) entered disabled state [ 356.535126][T10016] team0: left allmulticast mode [ 356.542505][T10016] team_slave_0: left allmulticast mode [ 356.564703][T10016] team_slave_1: left allmulticast mode [ 356.577180][T10016] team0: left promiscuous mode [ 356.590529][T10016] team_slave_0: left promiscuous mode [ 356.610826][T10016] team_slave_1: left promiscuous mode [ 356.618932][T10016] bridge0: port 3(team0) entered disabled state [ 356.718511][T10016] batman_adv: batadv0: Adding interface: team0 [ 356.727230][T10016] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.775905][T10016] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 356.950620][T10022] netlink: 'syz.9.897': attribute type 10 has an invalid length. [ 356.975286][T10022] netlink: 2 bytes leftover after parsing attributes in process `syz.9.897'. [ 356.999435][T10022] team0: entered promiscuous mode [ 357.009649][T10022] team_slave_0: entered promiscuous mode [ 357.029016][T10022] team_slave_1: entered promiscuous mode [ 357.046056][T10022] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.059378][T10022] batman_adv: batadv0: Interface activated: team0 [ 357.067337][T10022] batman_adv: batadv0: Interface deactivated: team0 [ 357.073947][T10022] batman_adv: batadv0: Removing interface: team0 [ 357.086816][T10022] bridge0: port 3(team0) entered blocking state [ 357.097656][T10022] bridge0: port 3(team0) entered disabled state [ 357.104015][T10022] team0: entered allmulticast mode [ 357.109766][T10022] team_slave_0: entered allmulticast mode [ 357.120101][T10022] team_slave_1: entered allmulticast mode [ 357.128616][T10022] bridge0: port 3(team0) entered blocking state [ 357.135041][T10022] bridge0: port 3(team0) entered forwarding state [ 359.529820][T10093] 9pnet_virtio: no channels available for device syz [ 359.885799][T10110] random: crng reseeded on system resumption [ 361.512758][T10119] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 361.703987][T10119] team0: left allmulticast mode [ 361.709336][T10119] team_slave_0: left allmulticast mode [ 361.715211][T10119] team_slave_1: left allmulticast mode [ 361.720703][T10119] team0: left promiscuous mode [ 361.720717][T10119] team_slave_0: left promiscuous mode [ 361.732011][T10119] team_slave_1: left promiscuous mode [ 361.835697][T10119] bridge0: port 3(team0) entered disabled state [ 362.317347][T10119] batman_adv: batadv0: Adding interface: team0 [ 362.371848][T10119] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.458721][T10119] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 362.490728][T10124] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 362.514969][T10124] netlink: 2 bytes leftover after parsing attributes in process `syz.1.914'. [ 362.531858][T10124] team0: entered promiscuous mode [ 362.539168][T10124] team_slave_0: entered promiscuous mode [ 362.545333][T10124] team_slave_1: entered promiscuous mode [ 362.567955][T10124] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.577280][T10124] batman_adv: batadv0: Interface activated: team0 [ 362.597329][T10124] batman_adv: batadv0: Interface deactivated: team0 [ 362.607502][T10124] batman_adv: batadv0: Removing interface: team0 [ 362.635107][T10124] bridge0: port 3(team0) entered blocking state [ 362.644917][T10124] bridge0: port 3(team0) entered disabled state [ 362.673408][T10124] team0: entered allmulticast mode [ 362.693393][T10124] team_slave_0: entered allmulticast mode [ 362.733463][T10124] team_slave_1: entered allmulticast mode [ 362.795161][T10128] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 362.812608][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 362.812622][ T28] audit: type=1800 audit(1754726791.946:37): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.918" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 362.822786][T10128] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 362.874295][T10128] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 363.026019][T10128] syz.9.918 (10128) used greatest stack depth: 19976 bytes left [ 363.209117][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 363.559156][T10160] random: crng reseeded on system resumption [ 365.806306][T10185] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 365.824660][T10185] bridge0: port 3(team0) entered disabled state [ 365.841612][T10185] team0: left allmulticast mode [ 365.846825][T10185] team_slave_0: left allmulticast mode [ 365.852310][T10185] team_slave_1: left allmulticast mode [ 365.878536][T10185] team0: left promiscuous mode [ 365.883451][T10185] team_slave_0: left promiscuous mode [ 365.889459][T10185] team_slave_1: left promiscuous mode [ 365.897948][T10185] bridge0: port 3(team0) entered disabled state [ 365.914007][T10185] batman_adv: batadv0: Adding interface: team0 [ 365.922093][T10185] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.971553][T10185] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 366.078797][T10187] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 366.096353][T10187] netlink: 2 bytes leftover after parsing attributes in process `syz.3.932'. [ 366.130863][T10187] team0: entered promiscuous mode [ 366.139679][T10187] team_slave_0: entered promiscuous mode [ 366.147578][T10180] syz.8.931 (10180) used greatest stack depth: 17704 bytes left [ 366.150034][T10187] team_slave_1: entered promiscuous mode [ 366.169515][T10187] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.181235][T10187] batman_adv: batadv0: Interface activated: team0 [ 366.192380][T10187] batman_adv: batadv0: Interface deactivated: team0 [ 366.244119][T10187] batman_adv: batadv0: Removing interface: team0 [ 366.277220][T10187] bridge0: port 3(team0) entered blocking state [ 366.283707][T10187] bridge0: port 3(team0) entered disabled state [ 366.290514][T10187] team0: entered allmulticast mode [ 366.297535][T10187] team_slave_0: entered allmulticast mode [ 366.303978][T10187] team_slave_1: entered allmulticast mode [ 366.325277][T10187] bridge0: port 3(team0) entered blocking state [ 366.332107][T10187] bridge0: port 3(team0) entered forwarding state [ 366.451811][T10200] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 366.459807][T10200] netlink: 2 bytes leftover after parsing attributes in process `syz.1.933'. [ 366.561835][T10198] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 366.624394][T10198] team0: left allmulticast mode [ 366.629309][T10198] team_slave_0: left allmulticast mode [ 366.645037][T10198] team_slave_1: left allmulticast mode [ 366.650566][T10198] team0: left promiscuous mode [ 366.664614][T10198] team_slave_0: left promiscuous mode [ 366.670204][T10198] team_slave_1: left promiscuous mode [ 366.850834][T10198] bridge0: port 3(team0) entered disabled state [ 366.872480][T10198] batman_adv: batadv0: Adding interface: team0 [ 366.895628][T10198] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.346184][T10198] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 369.189919][T10231] vlan0: entered allmulticast mode [ 369.199746][T10231] bond0: entered allmulticast mode [ 369.746670][T10249] 9pnet_virtio: no channels available for device syz [ 371.918709][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 372.199781][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 372.965727][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.9.955'. [ 373.743438][T10316] netlink: 'syz.8.961': attribute type 10 has an invalid length. [ 373.752034][T10316] netlink: 'syz.8.961': attribute type 10 has an invalid length. [ 373.759980][T10316] netlink: 2 bytes leftover after parsing attributes in process `syz.8.961'. [ 373.778327][T10316] team0: entered promiscuous mode [ 373.784579][T10316] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.793384][T10316] batman_adv: batadv0: Interface activated: team0 [ 373.801345][T10316] batman_adv: batadv0: Interface deactivated: team0 [ 373.808761][T10316] batman_adv: batadv0: Removing interface: team0 [ 373.958488][T10316] bridge0: port 1(team0) entered blocking state [ 373.974470][T10316] bridge0: port 1(team0) entered disabled state [ 373.984849][T10316] team0: entered allmulticast mode [ 374.781682][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 375.304447][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.969'. [ 376.212700][T10354] loop3: detected capacity change from 0 to 32768 [ 376.964430][T10354] lmLogOpen: exit(-6) [ 376.978406][T10354] jfs_mount_rw failed, return code = -6 [ 377.430475][T10397] random: crng reseeded on system resumption [ 378.753853][T10406] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 378.839476][T10406] bridge0: port 3(team0) entered disabled state [ 378.854700][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.861019][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.900690][T10406] team0: left allmulticast mode [ 378.948797][T10406] team_slave_0: left allmulticast mode [ 380.604800][T10406] team_slave_1: left allmulticast mode [ 380.610513][T10406] team0: left promiscuous mode [ 380.615698][T10406] team_slave_0: left promiscuous mode [ 380.622338][T10406] team_slave_1: left promiscuous mode [ 380.629518][T10406] bridge0: port 3(team0) entered disabled state [ 380.968285][T10406] batman_adv: batadv0: Adding interface: team0 [ 380.984305][T10406] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.019834][T10406] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 381.034090][T10410] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 381.043198][T10410] netlink: 2 bytes leftover after parsing attributes in process `syz.3.978'. [ 381.057516][T10410] team0: entered promiscuous mode [ 381.062649][T10410] team_slave_0: entered promiscuous mode [ 381.069850][T10410] team_slave_1: entered promiscuous mode [ 381.077871][T10410] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.085112][T10410] batman_adv: batadv0: Interface activated: team0 [ 381.091600][T10410] batman_adv: batadv0: Interface deactivated: team0 [ 381.098592][T10410] batman_adv: batadv0: Removing interface: team0 [ 381.109663][T10410] bridge0: port 3(team0) entered blocking state [ 381.119983][T10410] bridge0: port 3(team0) entered disabled state [ 381.127672][T10410] team0: entered allmulticast mode [ 381.132830][T10410] team_slave_0: entered allmulticast mode [ 381.138720][T10410] team_slave_1: entered allmulticast mode [ 381.151209][T10410] bridge0: port 3(team0) entered blocking state [ 381.157575][T10410] bridge0: port 3(team0) entered forwarding state [ 381.175498][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.9.983'. [ 381.192351][T10430] bond0: entered promiscuous mode [ 381.201852][T10430] batadv0: entered promiscuous mode [ 381.232178][T10430] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 381.254653][T10430] hsr1: entered allmulticast mode [ 381.489912][T10436] tipc: Started in network mode [ 381.510500][T10436] tipc: Node identity 260ea6a50bd7, cluster identity 4711 [ 381.552954][T10436] tipc: Enabled bearer , priority 0 [ 381.621406][T10444] tipc: Disabling bearer [ 381.943609][T10455] random: crng reseeded on system resumption [ 383.679138][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 385.675501][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 386.204731][T10499] random: crng reseeded on system resumption [ 386.994812][T10497] netlink: 'syz.3.999': attribute type 10 has an invalid length. [ 387.148532][T10497] bridge0: port 3(team0) entered disabled state [ 387.709783][T10497] team0: left allmulticast mode [ 387.734522][T10497] team_slave_0: left allmulticast mode [ 387.740281][T10497] team_slave_1: left allmulticast mode [ 387.746244][T10497] team0: left promiscuous mode [ 387.752084][T10497] team_slave_0: left promiscuous mode [ 387.758002][T10497] team_slave_1: left promiscuous mode [ 387.765009][T10497] bridge0: port 3(team0) entered disabled state [ 387.842851][T10497] batman_adv: batadv0: Adding interface: team0 [ 387.894397][T10497] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.924202][T10497] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 387.994225][T10506] netlink: 'syz.3.999': attribute type 10 has an invalid length. [ 388.010208][T10506] netlink: 2 bytes leftover after parsing attributes in process `syz.3.999'. [ 388.027066][T10506] team0: entered promiscuous mode [ 388.036691][T10506] team_slave_0: entered promiscuous mode [ 388.044912][T10506] team_slave_1: entered promiscuous mode [ 388.052543][T10506] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.059792][T10506] batman_adv: batadv0: Interface activated: team0 [ 388.066444][T10506] batman_adv: batadv0: Interface deactivated: team0 [ 388.073078][T10506] batman_adv: batadv0: Removing interface: team0 [ 388.299234][T10506] bridge0: port 3(team0) entered blocking state [ 388.311374][T10506] bridge0: port 3(team0) entered disabled state [ 388.319432][T10506] team0: entered allmulticast mode [ 388.336937][T10506] team_slave_0: entered allmulticast mode [ 388.337059][T10506] team_slave_1: entered allmulticast mode [ 388.352251][T10506] bridge0: port 3(team0) entered blocking state [ 388.352342][T10506] bridge0: port 3(team0) entered forwarding state [ 389.143860][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1008'. [ 391.357993][T10563] random: crng reseeded on system resumption [ 392.447381][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1016'. [ 392.602529][T10583] (null): rxe_set_mtu: Set mtu to 1024 [ 392.609155][T10583] rdma_rxe: rxe_newlink: failed to add syz_tun [ 394.056795][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1027'. [ 394.099130][T10612] dummy0: entered promiscuous mode [ 394.125964][T10612] batadv_slave_0: entered promiscuous mode [ 394.154419][T10612] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 394.194387][T10612] Cannot create hsr debugfs directory [ 394.449342][T10624] (null): rxe_set_mtu: Set mtu to 1024 [ 394.518874][T10624] rdma_rxe: rxe_newlink: failed to add syz_tun [ 395.452022][T10652] netlink: 'syz.3.1037': attribute type 4 has an invalid length. [ 395.735622][T10665] (null): rxe_set_mtu: Set mtu to 1024 [ 395.766948][T10665] rdma_rxe: rxe_newlink: failed to add syz_tun [ 399.623341][T10713] (null): rxe_set_mtu: Set mtu to 1024 [ 399.635013][T10713] rdma_rxe: rxe_newlink: failed to add syz_tun [ 400.499606][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 401.836856][T10751] loop9: detected capacity change from 0 to 32768 [ 403.761136][T10751] lmLogOpen: exit(-6) [ 403.794768][T10751] jfs_mount_rw failed, return code = -6 [ 404.374871][T10798] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 404.405836][T10798] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 404.413658][T10798] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1080'. [ 404.447774][T10798] team0: entered promiscuous mode [ 404.452818][T10798] team_slave_0: entered promiscuous mode [ 404.494655][T10798] team_slave_1: entered promiscuous mode [ 404.515873][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.532953][T10798] batman_adv: batadv0: Interface activated: team0 [ 404.542843][T10798] batman_adv: batadv0: Interface deactivated: team0 [ 404.554114][T10798] batman_adv: batadv0: Removing interface: team0 [ 404.601958][T10798] bridge0: port 3(team0) entered blocking state [ 404.609135][T10798] bridge0: port 3(team0) entered disabled state [ 404.615981][T10798] team0: entered allmulticast mode [ 404.621287][T10798] team_slave_0: entered allmulticast mode [ 404.628263][T10798] team_slave_1: entered allmulticast mode [ 404.779850][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1085'. [ 407.715811][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 408.739482][T10871] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 408.842192][T10871] bridge0: port 3(team0) entered disabled state [ 408.868625][T10871] team0: left allmulticast mode [ 408.873510][T10871] team_slave_0: left allmulticast mode [ 408.879011][T10871] team_slave_1: left allmulticast mode [ 408.884605][T10871] team0: left promiscuous mode [ 408.889349][T10871] team_slave_0: left promiscuous mode [ 408.894923][T10871] team_slave_1: left promiscuous mode [ 408.900462][T10871] bridge0: port 3(team0) entered disabled state [ 409.019830][T10871] batman_adv: batadv0: Adding interface: team0 [ 409.026054][T10871] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.051284][T10871] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 409.062139][T10878] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 409.072862][T10878] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1099'. [ 409.092410][T10878] team0: entered promiscuous mode [ 409.098039][T10878] team_slave_0: entered promiscuous mode [ 409.104473][T10878] team_slave_1: entered promiscuous mode [ 409.121347][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.155573][T10878] batman_adv: batadv0: Interface activated: team0 [ 409.165801][T10878] batman_adv: batadv0: Interface deactivated: team0 [ 409.285341][T10878] batman_adv: batadv0: Removing interface: team0 [ 409.408343][T10859] loop1: detected capacity change from 0 to 32768 [ 409.426202][T10878] bridge0: port 3(team0) entered blocking state [ 409.432511][T10878] bridge0: port 3(team0) entered disabled state [ 409.474463][T10878] team0: entered allmulticast mode [ 409.479736][T10878] team_slave_0: entered allmulticast mode [ 409.486461][T10878] team_slave_1: entered allmulticast mode [ 409.495563][T10878] bridge0: port 3(team0) entered blocking state [ 409.501855][T10878] bridge0: port 3(team0) entered forwarding state [ 410.436765][T10859] lmLogOpen: exit(-6) [ 410.444129][T10859] jfs_mount_rw failed, return code = -6 [ 412.500400][T10955] netlink: 'syz.8.1117': attribute type 10 has an invalid length. [ 412.509738][T10955] bridge0: port 1(team0) entered disabled state [ 412.525978][T10955] team0: left allmulticast mode [ 412.530838][T10955] team0: left promiscuous mode [ 412.535763][T10955] bridge0: port 1(team0) entered disabled state [ 412.544678][T10955] batman_adv: batadv0: Adding interface: team0 [ 412.550832][T10955] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.576389][T10955] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 412.600331][T10955] netlink: 'syz.8.1117': attribute type 10 has an invalid length. [ 412.608160][T10955] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1117'. [ 412.617148][T10955] team0: entered promiscuous mode [ 412.622598][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.629392][T10955] batman_adv: batadv0: Interface activated: team0 [ 412.635868][T10955] batman_adv: batadv0: Interface deactivated: team0 [ 412.642452][T10955] batman_adv: batadv0: Removing interface: team0 [ 412.680718][T10955] bridge0: port 1(team0) entered blocking state [ 412.687664][T10955] bridge0: port 1(team0) entered disabled state [ 412.694523][T10955] team0: entered allmulticast mode [ 416.788701][T11014] netlink: 'syz.8.1131': attribute type 10 has an invalid length. [ 416.799892][T11014] bridge0: port 1(team0) entered disabled state [ 416.811138][T11014] team0: left allmulticast mode [ 416.816064][T11014] team0: left promiscuous mode [ 416.820945][T11014] bridge0: port 1(team0) entered disabled state [ 416.828987][T11014] batman_adv: batadv0: Adding interface: team0 [ 416.835169][T11014] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.860370][T11014] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 416.873948][T11014] netlink: 'syz.8.1131': attribute type 10 has an invalid length. [ 416.881794][T11014] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1131'. [ 416.891068][T11014] team0: entered promiscuous mode [ 416.896575][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.903326][T11014] batman_adv: batadv0: Interface activated: team0 [ 416.909790][T11014] batman_adv: batadv0: Interface deactivated: team0 [ 416.916426][T11014] batman_adv: batadv0: Removing interface: team0 [ 416.923300][T11014] bridge0: port 1(team0) entered blocking state [ 416.929678][T11014] bridge0: port 1(team0) entered disabled state [ 416.936020][T11014] team0: entered allmulticast mode [ 418.282197][T11062] netlink: set zone limit has 8 unknown bytes [ 418.438236][T11067] bpq0: entered allmulticast mode [ 419.743773][T11084] netlink: 'syz.3.1146': attribute type 10 has an invalid length. [ 419.787353][T11084] bridge0: port 3(team0) entered disabled state [ 419.833276][T11087] affs: No valid root block on device nullb0 [ 420.298699][T11084] team0: left allmulticast mode [ 420.303586][T11084] team_slave_0: left allmulticast mode [ 420.309769][T11084] team_slave_1: left allmulticast mode [ 420.315252][T11084] team0: left promiscuous mode [ 420.319999][T11084] team_slave_0: left promiscuous mode [ 420.325520][T11084] team_slave_1: left promiscuous mode [ 420.331075][T11084] bridge0: port 3(team0) entered disabled state [ 420.339611][T11084] batman_adv: batadv0: Adding interface: team0 [ 420.345817][T11084] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.371457][T11084] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 420.381745][T11086] netlink: 'syz.3.1146': attribute type 10 has an invalid length. [ 420.404285][T11086] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1146'. [ 420.413371][T11086] team0: entered promiscuous mode [ 420.442460][T11086] team_slave_0: entered promiscuous mode [ 420.488149][T11086] team_slave_1: entered promiscuous mode [ 420.538287][T11086] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.556921][T11086] batman_adv: batadv0: Interface activated: team0 [ 420.566933][T11086] batman_adv: batadv0: Interface deactivated: team0 [ 420.589056][T11086] batman_adv: batadv0: Removing interface: team0 [ 420.601082][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1145'. [ 420.729792][T11086] bridge0: port 3(team0) entered blocking state [ 420.741883][T11086] bridge0: port 3(team0) entered disabled state [ 420.788444][T11086] team0: entered allmulticast mode [ 420.807566][T11086] team_slave_0: entered allmulticast mode [ 420.821246][T11086] team_slave_1: entered allmulticast mode [ 420.836472][T11086] bridge0: port 3(team0) entered blocking state [ 420.842806][T11086] bridge0: port 3(team0) entered forwarding state [ 420.852288][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 423.715014][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 423.738113][T11166] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 423.779550][T11166] team0: left allmulticast mode [ 423.785058][T11166] team_slave_0: left allmulticast mode [ 423.790534][T11166] team_slave_1: left allmulticast mode [ 423.796110][T11166] team0: left promiscuous mode [ 423.800861][T11166] team_slave_0: left promiscuous mode [ 423.806387][T11166] team_slave_1: left promiscuous mode [ 423.812007][T11166] bridge0: port 3(team0) entered disabled state [ 423.821657][T11166] batman_adv: batadv0: Adding interface: team0 [ 423.827901][T11166] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.853480][T11166] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 423.863730][T11167] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 423.872677][T11167] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1158'. [ 423.924619][T11167] team0: entered promiscuous mode [ 423.929848][T11167] team_slave_0: entered promiscuous mode [ 423.950940][T11167] team_slave_1: entered promiscuous mode [ 423.982685][T11167] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.011012][T11167] batman_adv: batadv0: Interface activated: team0 [ 424.019804][T11167] batman_adv: batadv0: Interface deactivated: team0 [ 424.032031][T11167] batman_adv: batadv0: Removing interface: team0 [ 424.051319][T11167] bridge0: port 3(team0) entered blocking state [ 424.059373][T11167] bridge0: port 3(team0) entered disabled state [ 424.066262][T11167] team0: entered allmulticast mode [ 424.071848][T11167] team_slave_0: entered allmulticast mode [ 424.077927][T11167] team_slave_1: entered allmulticast mode [ 424.583490][T11189] Cannot find add_set index 0 as target [ 427.624058][T11241] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 427.636021][T11241] bridge0: port 3(team0) entered disabled state [ 427.654641][T11241] team0: left allmulticast mode [ 427.659503][T11241] team_slave_0: left allmulticast mode [ 427.665012][T11241] team_slave_1: left allmulticast mode [ 427.670453][T11241] team0: left promiscuous mode [ 427.675244][T11241] team_slave_0: left promiscuous mode [ 427.680714][T11241] team_slave_1: left promiscuous mode [ 427.686317][T11241] bridge0: port 3(team0) entered disabled state [ 427.715050][T11241] batman_adv: batadv0: Adding interface: team0 [ 427.721231][T11241] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.746858][T11241] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 427.757278][T11242] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 427.769527][T11242] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1176'. [ 427.806032][T11242] team0: entered promiscuous mode [ 427.811238][T11242] team_slave_0: entered promiscuous mode [ 427.836582][T11242] team_slave_1: entered promiscuous mode [ 427.852204][T11242] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.863635][T11242] batman_adv: batadv0: Interface activated: team0 [ 427.874009][T11242] batman_adv: batadv0: Interface deactivated: team0 [ 427.889375][T11242] batman_adv: batadv0: Removing interface: team0 [ 427.916412][T11242] bridge0: port 3(team0) entered blocking state [ 427.922894][T11242] bridge0: port 3(team0) entered disabled state [ 427.930171][T11242] team0: entered allmulticast mode [ 427.935510][T11242] team_slave_0: entered allmulticast mode [ 427.949365][T11242] team_slave_1: entered allmulticast mode [ 428.427870][T11242] bridge0: port 3(team0) entered blocking state [ 428.434300][T11242] bridge0: port 3(team0) entered forwarding state [ 428.794448][T11253] syz1: rxe_newlink: already configured on syz_tun [ 430.654605][T11277] netlink: 'syz.9.1189': attribute type 10 has an invalid length. [ 430.703694][T11277] bridge0: port 3(team0) entered disabled state [ 430.752241][T11277] team0: left allmulticast mode [ 430.757245][T11277] team_slave_0: left allmulticast mode [ 430.762696][T11277] team_slave_1: left allmulticast mode [ 430.768202][T11277] team0: left promiscuous mode [ 430.772974][T11277] team_slave_0: left promiscuous mode [ 430.778493][T11277] team_slave_1: left promiscuous mode [ 430.784047][T11277] bridge0: port 3(team0) entered disabled state [ 430.804103][T11277] batman_adv: batadv0: Adding interface: team0 [ 430.810714][T11277] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.836480][T11277] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 430.860207][T11284] netlink: 'syz.9.1189': attribute type 10 has an invalid length. [ 430.868207][T11284] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1189'. [ 430.879354][T11284] team0: entered promiscuous mode [ 430.897549][T11284] team_slave_0: entered promiscuous mode [ 430.909028][T11284] team_slave_1: entered promiscuous mode [ 430.922751][T11284] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.933579][T11284] batman_adv: batadv0: Interface activated: team0 [ 430.943520][T11284] batman_adv: batadv0: Interface deactivated: team0 [ 430.966813][T11284] batman_adv: batadv0: Removing interface: team0 [ 430.979748][T11284] bridge0: port 3(team0) entered blocking state [ 431.003111][T11284] bridge0: port 3(team0) entered disabled state [ 431.030013][T11284] team0: entered allmulticast mode [ 431.040045][T11284] team_slave_0: entered allmulticast mode [ 431.053450][T11284] team_slave_1: entered allmulticast mode [ 431.075421][T11284] bridge0: port 3(team0) entered blocking state [ 431.081817][T11284] bridge0: port 3(team0) entered forwarding state [ 431.278574][ T28] audit: type=1326 audit(1754726860.436:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.8.1195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff72758ebe9 code=0x0 [ 432.712383][T11333] netlink: 'syz.1.1204': attribute type 10 has an invalid length. [ 432.761603][T11333] team0: left allmulticast mode [ 432.766558][T11333] team_slave_0: left allmulticast mode [ 432.772020][T11333] team_slave_1: left allmulticast mode [ 432.777549][T11333] team0: left promiscuous mode [ 432.782308][T11333] team_slave_0: left promiscuous mode [ 432.787813][T11333] team_slave_1: left promiscuous mode [ 432.793364][T11333] bridge0: port 3(team0) entered disabled state [ 432.815509][T11333] batman_adv: batadv0: Adding interface: team0 [ 432.821802][T11333] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.847091][T11333] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 432.892057][T11336] netlink: 'syz.1.1204': attribute type 10 has an invalid length. [ 433.221332][T11336] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1204'. [ 433.334541][T11336] team0: entered promiscuous mode [ 433.348446][T11336] team_slave_0: entered promiscuous mode [ 433.706541][T11336] team_slave_1: entered promiscuous mode [ 433.763010][T11336] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.775921][T11336] batman_adv: batadv0: Interface activated: team0 [ 433.787275][T11336] batman_adv: batadv0: Interface deactivated: team0 [ 433.803959][T11336] batman_adv: batadv0: Removing interface: team0 [ 433.849887][T11336] bridge0: port 3(team0) entered blocking state [ 433.862630][T11336] bridge0: port 3(team0) entered disabled state [ 433.883981][T11336] team0: entered allmulticast mode [ 433.937851][T11336] team_slave_0: entered allmulticast mode [ 433.974449][T11336] team_slave_1: entered allmulticast mode [ 433.993879][T11334] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 434.122859][T11334] bridge0: port 3(team0) entered disabled state [ 434.212491][T11334] team0: left allmulticast mode [ 434.236343][T11334] team_slave_0: left allmulticast mode [ 434.246932][T11334] team_slave_1: left allmulticast mode [ 434.279360][T11334] team0: left promiscuous mode [ 434.348159][T11334] team_slave_0: left promiscuous mode [ 434.359947][T11334] team_slave_1: left promiscuous mode [ 434.387116][T11334] bridge0: port 3(team0) entered disabled state [ 434.457889][T11334] batman_adv: batadv0: Adding interface: team0 [ 434.482335][T11334] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.546282][T11334] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 434.567867][T11354] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 434.575815][T11354] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1201'. [ 434.590774][T11354] team0: entered promiscuous mode [ 434.596675][T11354] team_slave_0: entered promiscuous mode [ 434.605853][T11354] team_slave_1: entered promiscuous mode [ 434.619576][T11354] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.628718][T11354] batman_adv: batadv0: Interface activated: team0 [ 434.637025][T11354] batman_adv: batadv0: Interface deactivated: team0 [ 434.644849][T11354] batman_adv: batadv0: Removing interface: team0 [ 434.710341][T11354] bridge0: port 3(team0) entered blocking state [ 434.717539][T11354] bridge0: port 3(team0) entered disabled state [ 434.724050][T11354] team0: entered allmulticast mode [ 434.729437][T11354] team_slave_0: entered allmulticast mode [ 434.735304][T11354] team_slave_1: entered allmulticast mode [ 434.759949][T11354] bridge0: port 3(team0) entered blocking state [ 434.766374][T11354] bridge0: port 3(team0) entered forwarding state [ 434.961255][T11370] netlink: 'syz.8.1210': attribute type 6 has an invalid length. [ 435.107712][T11375] netlink: 'syz.8.1210': attribute type 6 has an invalid length. [ 436.176066][T11392] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 436.199753][T11392] bridge0: port 3(team0) entered disabled state [ 436.230759][T11392] team0: left allmulticast mode [ 436.236146][T11392] team_slave_0: left allmulticast mode [ 436.241621][T11392] team_slave_1: left allmulticast mode [ 436.247521][T11392] team0: left promiscuous mode [ 436.252278][T11392] team_slave_0: left promiscuous mode [ 436.257813][T11392] team_slave_1: left promiscuous mode [ 436.263351][T11392] bridge0: port 3(team0) entered disabled state [ 436.317012][T11392] batman_adv: batadv0: Adding interface: team0 [ 436.323209][T11392] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.348924][T11392] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 436.371787][T11396] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 436.380714][T11396] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1215'. [ 436.391195][T11396] team0: entered promiscuous mode [ 436.396522][T11396] team_slave_0: entered promiscuous mode [ 436.402560][T11396] team_slave_1: entered promiscuous mode [ 436.413514][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.415623][ T28] audit: type=1326 audit(1754726865.566:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.443741][T11396] batman_adv: batadv0: Interface activated: team0 [ 436.465179][ T28] audit: type=1326 audit(1754726865.626:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.493750][T11396] batman_adv: batadv0: Interface deactivated: team0 [ 436.500489][ T28] audit: type=1326 audit(1754726865.626:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.526935][ T28] audit: type=1326 audit(1754726865.626:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.562832][T11396] batman_adv: batadv0: Removing interface: team0 [ 436.584938][T11396] bridge0: port 3(team0) entered blocking state [ 436.603903][T11396] bridge0: port 3(team0) entered disabled state [ 436.624442][T11396] team0: entered allmulticast mode [ 436.638855][T11396] team_slave_0: entered allmulticast mode [ 436.650876][ T28] audit: type=1326 audit(1754726865.626:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.686053][T11396] team_slave_1: entered allmulticast mode [ 436.712115][ T28] audit: type=1326 audit(1754726865.626:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.768193][ T28] audit: type=1326 audit(1754726865.626:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.811076][T11396] bridge0: port 3(team0) entered blocking state [ 436.817492][T11396] bridge0: port 3(team0) entered forwarding state [ 436.832416][ T28] audit: type=1326 audit(1754726865.626:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 436.908929][ T28] audit: type=1326 audit(1754726865.646:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 437.017034][ T28] audit: type=1326 audit(1754726865.646:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a18ebe9 code=0x7ffc0000 [ 437.193313][T11408] trusted_key: syz.9.1214 sent an empty control message without MSG_MORE. [ 439.002339][T11429] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 439.027462][T11429] binder: 11426:11429 ioctl 4018620d 2000000002c0 returned -1 [ 439.667977][T11449] Bluetooth: MGMT ver 1.22 [ 440.056502][T11449] batadv_slave_0: entered promiscuous mode [ 440.290991][T11456] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 440.306424][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.306524][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.541204][T11456] bridge0: port 3(team0) entered disabled state [ 440.575930][T11456] team0: left allmulticast mode [ 440.580908][T11456] team_slave_0: left allmulticast mode [ 440.672455][T11456] team_slave_1: left allmulticast mode [ 440.713372][T11456] team0: left promiscuous mode [ 440.744377][T11456] team_slave_0: left promiscuous mode [ 440.750711][T11456] team_slave_1: left promiscuous mode [ 440.789422][T11456] bridge0: port 3(team0) entered disabled state [ 440.916544][T11456] batman_adv: batadv0: Adding interface: team0 [ 441.034312][T11456] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.166805][T11456] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 441.342096][T11460] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 441.354279][T11460] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1223'. [ 441.363960][T11460] team0: entered promiscuous mode [ 441.408862][T11460] team_slave_0: entered promiscuous mode [ 441.449390][T11460] team_slave_1: entered promiscuous mode [ 441.484882][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.524660][T11460] batman_adv: batadv0: Interface activated: team0 [ 441.531176][T11460] batman_adv: batadv0: Interface deactivated: team0 [ 441.565417][T11460] batman_adv: batadv0: Removing interface: team0 [ 441.665482][T11460] bridge0: port 3(team0) entered blocking state [ 441.713071][T11460] bridge0: port 3(team0) entered disabled state [ 441.743654][T11460] team0: entered allmulticast mode [ 441.794296][T11460] team_slave_0: entered allmulticast mode [ 441.800046][T11460] team_slave_1: entered allmulticast mode [ 441.879188][T11460] bridge0: port 3(team0) entered blocking state [ 441.885649][T11460] bridge0: port 3(team0) entered forwarding state [ 443.080966][T11502] (null): rxe_set_mtu: Set mtu to 1024 [ 443.120215][T11502] rdma_rxe: rxe_newlink: failed to add syz_tun [ 443.935576][T11523] process 'syz.8.1235' launched './file0' with NULL argv: empty string added [ 444.182362][T11523] batadv0 (unregistering): left promiscuous mode [ 444.745831][T11535] netlink: 'syz.3.1237': attribute type 10 has an invalid length. [ 444.765758][T11535] bridge0: port 3(team0) entered disabled state [ 444.828271][T11535] team0: left allmulticast mode [ 444.833280][T11535] team_slave_0: left allmulticast mode [ 444.856509][T11535] team_slave_1: left allmulticast mode [ 444.862392][T11535] team0: left promiscuous mode [ 444.868378][T11535] team_slave_0: left promiscuous mode [ 444.885301][T11535] team_slave_1: left promiscuous mode [ 444.892173][T11535] bridge0: port 3(team0) entered disabled state [ 444.916202][T11535] batman_adv: batadv0: Adding interface: team0 [ 444.922605][T11535] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.206158][T11535] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 445.248196][T11539] netlink: 'syz.3.1237': attribute type 10 has an invalid length. [ 445.306182][T11539] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1237'. [ 445.361520][T11539] team0: entered promiscuous mode [ 445.506222][T11539] team_slave_0: entered promiscuous mode [ 445.563793][T11539] team_slave_1: entered promiscuous mode [ 445.604124][T11539] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.638358][T11539] batman_adv: batadv0: Interface activated: team0 [ 445.724898][T11539] batman_adv: batadv0: Interface deactivated: team0 [ 445.751894][T11539] batman_adv: batadv0: Removing interface: team0 [ 445.791407][T11539] bridge0: port 3(team0) entered blocking state [ 445.873332][T11539] bridge0: port 3(team0) entered disabled state [ 445.900312][T11539] team0: entered allmulticast mode [ 445.918668][T11539] team_slave_0: entered allmulticast mode [ 445.947181][T11539] team_slave_1: entered allmulticast mode [ 445.976308][T11539] bridge0: port 3(team0) entered blocking state [ 445.982645][T11539] bridge0: port 3(team0) entered forwarding state [ 447.803653][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 449.141150][T11584] (null): rxe_set_mtu: Set mtu to 1024 [ 449.161520][T11584] rdma_rxe: rxe_newlink: failed to add syz_tun [ 449.815264][T11601] trusted_key: encrypted_key: insufficient parameters specified [ 449.914107][T11603] netlink: 'syz.8.1247': attribute type 10 has an invalid length. [ 450.049828][T11603] bridge0: port 1(team0) entered disabled state [ 450.059847][T11603] team0: left allmulticast mode [ 450.066829][T11603] team0: left promiscuous mode [ 450.071989][T11603] bridge0: port 1(team0) entered disabled state [ 450.086632][T11605] netlink: 'syz.8.1247': attribute type 10 has an invalid length. [ 450.098451][T11605] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1247'. [ 450.108072][T11605] team0: entered promiscuous mode [ 450.118494][T11605] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.140831][T11605] bridge0: port 1(team0) entered blocking state [ 450.176979][T11605] bridge0: port 1(team0) entered disabled state [ 450.510764][T11605] team0: entered allmulticast mode [ 451.376793][T11627] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 452.122862][T11627] orangefs_mount: mount request failed with -4 [ 454.078521][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 454.406779][T11658] (null): rxe_set_mtu: Set mtu to 1024 [ 454.422612][T11658] rdma_rxe: rxe_newlink: failed to add syz_tun [ 455.513389][T11694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 456.514127][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1266'. [ 456.542816][T11712] (null): rxe_set_mtu: Set mtu to 1024 [ 456.567674][T11712] rdma_rxe: rxe_newlink: failed to add syz_tun [ 456.621984][T11712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1267'. [ 456.764402][T11719] netlink: 'syz.9.1265': attribute type 10 has an invalid length. [ 456.778474][T11719] bridge0: port 3(team0) entered disabled state [ 456.863231][T11719] team0: left allmulticast mode [ 456.868922][T11719] team_slave_0: left allmulticast mode [ 456.875414][T11719] team_slave_1: left allmulticast mode [ 456.881014][T11719] team0: left promiscuous mode [ 456.885886][T11719] team_slave_0: left promiscuous mode [ 456.891569][T11719] team_slave_1: left promiscuous mode [ 456.897572][T11719] bridge0: port 3(team0) entered disabled state [ 456.910591][T11719] batman_adv: batadv0: Adding interface: team0 [ 456.917843][T11719] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.943423][T11719] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 456.954555][T11723] netlink: 'syz.9.1265': attribute type 10 has an invalid length. [ 456.962382][T11723] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1265'. [ 456.972264][T11723] team0: entered promiscuous mode [ 456.977512][T11723] team_slave_0: entered promiscuous mode [ 456.983331][T11723] team_slave_1: entered promiscuous mode [ 456.990753][T11723] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.997789][T11723] batman_adv: batadv0: Interface activated: team0 [ 457.004333][T11723] batman_adv: batadv0: Interface deactivated: team0 [ 457.010945][T11723] batman_adv: batadv0: Removing interface: team0 [ 457.018209][T11723] bridge0: port 3(team0) entered blocking state [ 457.024755][T11723] bridge0: port 3(team0) entered disabled state [ 457.031146][T11723] team0: entered allmulticast mode [ 457.036321][T11723] team_slave_0: entered allmulticast mode [ 457.042060][T11723] team_slave_1: entered allmulticast mode [ 457.050045][T11723] bridge0: port 3(team0) entered blocking state [ 457.056431][T11723] bridge0: port 3(team0) entered forwarding state [ 457.464518][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 457.609013][T11735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.658433][T11735] batadv_slave_0: entered promiscuous mode [ 457.680898][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 457.694425][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 457.714334][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 457.727770][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 457.738020][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 457.753091][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.765143][ T9] usb 9-1: config 0 descriptor?? [ 457.986114][ T9] hdpvr 9-1:0.0: firmware version 0x0 dated [ 458.001544][ T9] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 458.451536][ T9] hdpvr 9-1:0.0: Could not setup controls [ 458.481251][ T9] hdpvr 9-1:0.0: registering videodev failed [ 458.536893][ T9] hdpvr: probe of 9-1:0.0 failed with error -71 [ 458.585260][ T9] usb 9-1: USB disconnect, device number 3 [ 458.693993][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 460.723934][T11775] ceph: No mds server is up or the cluster is laggy [ 461.064403][ T5858] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 462.063859][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 462.114024][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 462.126234][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 462.136442][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 462.147022][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 462.157448][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.474727][ T5858] usb 4-1: config 0 descriptor?? [ 462.736875][ T5858] hdpvr 4-1:0.0: firmware version 0x0 dated [ 462.742200][T11809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.743162][ T5858] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 462.939601][T11815] 9pnet_virtio: no channels available for device syz [ 463.170865][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 463.198079][ T5858] hdpvr 4-1:0.0: Could not setup controls [ 463.230639][ T5858] hdpvr 4-1:0.0: registering videodev failed [ 463.278054][ T5858] hdpvr: probe of 4-1:0.0 failed with error -71 [ 463.350118][ T5858] usb 4-1: USB disconnect, device number 3 [ 469.011798][T11917] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 477.842481][ T5828] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 478.093655][ T5828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.189059][ T5828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.234270][ T5828] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 478.243463][ T5828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.321241][ T5828] usb 10-1: config 0 descriptor?? [ 479.278027][ T5828] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 480.179652][ T5828] cm6533_jd 0003:0D8C:0022.0003: unknown global tag 0xc [ 480.187623][ T5828] cm6533_jd 0003:0D8C:0022.0003: item 0 2 1 12 parsing failed [ 480.219165][ T5828] cm6533_jd 0003:0D8C:0022.0003: parse failed [ 480.262537][ T5828] cm6533_jd: probe of 0003:0D8C:0022.0003 failed with error -22 [ 480.482327][ T5828] usb 10-1: USB disconnect, device number 2 [ 483.983468][T12146] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1355'. [ 484.004852][T12150] (null): rxe_set_mtu: Set mtu to 1024 [ 484.031253][T12150] rdma_rxe: rxe_newlink: failed to add syz_tun [ 484.073179][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1357'. [ 484.789763][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1359'. [ 485.163980][T12173] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 485.345548][T12173] team0: left allmulticast mode [ 485.403327][T12173] team_slave_0: left allmulticast mode [ 485.432753][T12173] team_slave_1: left allmulticast mode [ 485.442444][T12173] team0: left promiscuous mode [ 485.450828][T12173] team_slave_0: left promiscuous mode [ 485.459934][T12173] team_slave_1: left promiscuous mode [ 485.472491][T12173] bridge0: port 3(team0) entered disabled state [ 485.540364][T12173] batman_adv: batadv0: Adding interface: team0 [ 485.574639][T12173] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.600509][T12173] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 485.619430][T12174] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 485.627731][T12174] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1356'. [ 485.637992][T12174] team0: entered promiscuous mode [ 485.687756][T12174] team_slave_0: entered promiscuous mode [ 485.860869][T12174] team_slave_1: entered promiscuous mode [ 485.872650][T12174] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.913499][T12174] batman_adv: batadv0: Interface activated: team0 [ 485.941985][T12174] batman_adv: batadv0: Interface deactivated: team0 [ 485.967494][T12174] batman_adv: batadv0: Removing interface: team0 [ 486.009130][T12174] bridge0: port 3(team0) entered blocking state [ 486.036803][T12174] bridge0: port 3(team0) entered disabled state [ 486.043841][T12174] team0: entered allmulticast mode [ 486.050001][T12174] team_slave_0: entered allmulticast mode [ 486.058405][T12174] team_slave_1: entered allmulticast mode [ 486.249523][T12206] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 486.970135][T12207] orangefs_mount: mount request failed with -4 [ 487.331054][T12213] (null): rxe_set_mtu: Set mtu to 1024 [ 487.365418][T12213] rdma_rxe: rxe_newlink: failed to add syz_tun [ 487.403042][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'. [ 487.564316][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 487.805222][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.990037][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.165344][ T788] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 488.321172][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.482347][ T788] usb 4-1: config 0 descriptor?? [ 488.745648][T12240] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 488.762008][T12240] binder: 12238:12240 ioctl 4018620d 2000000002c0 returned -1 [ 488.931784][ T788] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 489.038479][ T788] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 489.214426][ T788] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 489.256660][T12253] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 489.268406][T12253] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 489.895157][ T788] hid-steam 0003:28DE:1142.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 489.925166][ T788] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 489.972537][ T788] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 490.306273][ T788] usb 4-1: USB disconnect, device number 4 [ 490.349337][T12258] fido_id[12258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 490.365716][ T788] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 490.596034][T12268] (null): rxe_set_mtu: Set mtu to 1024 [ 490.665953][T12268] rdma_rxe: rxe_newlink: failed to add syz_tun [ 490.893705][T12281] netlink: 'syz.1.1377': attribute type 10 has an invalid length. [ 491.130204][T12281] team0: left allmulticast mode [ 491.141241][T12281] team_slave_0: left allmulticast mode [ 491.159411][T12281] team_slave_1: left allmulticast mode [ 491.281186][T12281] team0: left promiscuous mode [ 491.332599][T12281] team_slave_0: left promiscuous mode [ 491.383178][T12281] team_slave_1: left promiscuous mode [ 491.427520][T12281] bridge0: port 3(team0) entered disabled state [ 491.468039][T12281] batman_adv: batadv0: Adding interface: team0 [ 491.490516][T12281] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.533105][T12281] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 491.555224][T12284] netlink: 'syz.1.1377': attribute type 10 has an invalid length. [ 491.563097][T12284] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1377'. [ 491.581942][T12284] team0: entered promiscuous mode [ 491.588825][T12284] team_slave_0: entered promiscuous mode [ 491.599843][T12284] team_slave_1: entered promiscuous mode [ 491.631799][T12284] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.823401][T12284] batman_adv: batadv0: Interface activated: team0 [ 492.105152][T12284] batman_adv: batadv0: Interface deactivated: team0 [ 492.114311][T12284] batman_adv: batadv0: Removing interface: team0 [ 492.196813][T12284] bridge0: port 3(team0) entered blocking state [ 492.230710][T12284] bridge0: port 3(team0) entered disabled state [ 492.244007][T12284] team0: entered allmulticast mode [ 492.258137][T12284] team_slave_0: entered allmulticast mode [ 492.281898][T12284] team_slave_1: entered allmulticast mode [ 493.318319][T12311] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 493.319058][T12313] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 493.325145][T12311] binder: 12310:12311 ioctl 4018620d 2000000002c0 returned -1 [ 493.506679][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 493.517314][T12320] (null): rxe_set_mtu: Set mtu to 1024 [ 493.526617][T12320] rdma_rxe: rxe_newlink: failed to add syz_tun [ 493.602793][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 493.946086][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 497.911305][T12392] (null): rxe_set_mtu: Set mtu to 1024 [ 497.922479][T12392] rdma_rxe: rxe_newlink: failed to add syz_tun [ 499.609145][T12416] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 499.661534][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1410'. [ 502.034971][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.041271][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.176343][T12445] 9pnet_virtio: no channels available for device syz [ 502.415813][T12449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1419'. [ 502.970128][T12461] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 503.736037][T12462] orangefs_mount: mount request failed with -4 [ 505.718472][T12493] netlink: 'syz.8.1427': attribute type 10 has an invalid length. [ 505.782589][T12493] bridge0: port 1(team0) entered disabled state [ 505.846422][T12493] team0: left allmulticast mode [ 505.851392][T12493] team0: left promiscuous mode [ 505.859110][T12493] bridge0: port 1(team0) entered disabled state [ 505.879543][T12497] netlink: 'syz.8.1427': attribute type 10 has an invalid length. [ 505.887866][T12497] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1427'. [ 505.926152][T12497] team0: entered promiscuous mode [ 505.936492][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.953194][T12497] bridge0: port 1(team0) entered blocking state [ 505.960249][T12497] bridge0: port 1(team0) entered disabled state [ 505.969887][T12497] team0: entered allmulticast mode [ 505.989094][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1430'. [ 509.505986][T12540] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 510.253911][T12534] 9pnet_virtio: no channels available for device syz [ 513.232531][T12584] binder: 12583:12584 ioctl 4018620d 0 returned -22 [ 513.318939][T12585] netlink: 'syz.8.1448': attribute type 10 has an invalid length. [ 513.359366][T12585] bridge0: port 1(team0) entered disabled state [ 513.449925][T12585] team0: left allmulticast mode [ 513.475393][T12585] team0: left promiscuous mode [ 513.485566][T12585] bridge0: port 1(team0) entered disabled state [ 513.548854][T12589] netlink: 'syz.8.1448': attribute type 10 has an invalid length. [ 513.590336][T12589] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1448'. [ 513.614024][T12589] team0: entered promiscuous mode [ 513.624115][T12589] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.633461][T12589] bridge0: port 1(team0) entered blocking state [ 513.655195][T12589] bridge0: port 1(team0) entered disabled state [ 513.666159][T12589] team0: entered allmulticast mode [ 513.804520][ T5842] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 514.257654][ T5842] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 514.274053][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.502769][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 514.556204][ T5842] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 514.592351][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.620109][ T5842] usb 4-1: Product: syz [ 514.626710][ T5842] usb 4-1: Manufacturer: syz [ 514.632496][ T5842] usb 4-1: SerialNumber: syz [ 514.635461][T12606] 9pnet_virtio: no channels available for device syz [ 514.642062][ T5842] usb 4-1: config 0 descriptor?? [ 514.660101][ T5842] usb-storage 4-1:0.0: USB Mass Storage device detected [ 514.737373][ T5842] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 515.083687][ T5858] usb 4-1: USB disconnect, device number 5 [ 516.039979][T12639] binder: 12637:12639 ioctl 4018620d 0 returned -22 [ 519.398822][T12669] netlink: 'syz.9.1465': attribute type 10 has an invalid length. [ 519.674458][T12669] bridge0: port 3(team0) entered disabled state [ 519.762610][T12669] team0: left allmulticast mode [ 519.771479][T12669] team_slave_0: left allmulticast mode [ 519.779001][T12669] team_slave_1: left allmulticast mode [ 519.786686][T12669] team0: left promiscuous mode [ 519.848797][T12669] team_slave_0: left promiscuous mode [ 519.858073][T12669] team_slave_1: left promiscuous mode [ 519.865854][T12669] bridge0: port 3(team0) entered disabled state [ 521.497682][T12669] batman_adv: batadv0: Adding interface: team0 [ 521.503918][T12669] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.791479][T12669] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 521.802615][T12674] netlink: 'syz.9.1465': attribute type 10 has an invalid length. [ 521.808038][T12698] 9pnet_virtio: no channels available for device syz [ 521.819574][T12674] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1465'. [ 521.838036][T12674] team0: entered promiscuous mode [ 521.870988][T12674] team_slave_0: entered promiscuous mode [ 521.920034][T12674] team_slave_1: entered promiscuous mode [ 522.073519][T12674] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.230245][T12674] batman_adv: batadv0: Interface activated: team0 [ 523.237013][T12674] batman_adv: batadv0: Interface deactivated: team0 [ 523.243643][T12674] batman_adv: batadv0: Removing interface: team0 [ 523.251085][T12674] bridge0: port 3(team0) entered blocking state [ 523.257750][T12674] bridge0: port 3(team0) entered disabled state [ 523.264681][T12674] team0: entered allmulticast mode [ 523.336196][T12674] team_slave_0: entered allmulticast mode [ 523.341972][T12674] team_slave_1: entered allmulticast mode [ 523.349910][T12674] bridge0: port 3(team0) entered blocking state [ 523.356265][T12674] bridge0: port 3(team0) entered forwarding state [ 524.116162][T12700] netlink: 'syz.8.1471': attribute type 10 has an invalid length. [ 524.223533][T12700] bridge0: port 1(team0) entered disabled state [ 524.400666][T12700] team0: left allmulticast mode [ 524.426446][T12700] team0: left promiscuous mode [ 524.451140][T12700] bridge0: port 1(team0) entered disabled state [ 524.518921][T12715] netlink: 'syz.8.1471': attribute type 10 has an invalid length. [ 524.603924][T12715] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1471'. [ 524.673704][T12715] team0: entered promiscuous mode [ 524.720842][T12715] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.756860][T12715] bridge0: port 1(team0) entered blocking state [ 524.794554][T12715] bridge0: port 1(team0) entered disabled state [ 524.801006][T12715] team0: entered allmulticast mode [ 526.451475][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1480'. [ 527.378310][T12758] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 528.171311][T12758] orangefs_mount: mount request failed with -4 [ 528.572480][T12773] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 528.712951][T12780] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 529.435942][T12781] orangefs_mount: mount request failed with -4 [ 529.462621][T12773] team0: left allmulticast mode [ 529.469841][T12773] team_slave_0: left allmulticast mode [ 529.475468][T12773] team_slave_1: left allmulticast mode [ 529.481128][T12773] team0: left promiscuous mode [ 529.486222][T12773] team_slave_0: left promiscuous mode [ 529.493097][T12773] team_slave_1: left promiscuous mode [ 529.500598][T12773] bridge0: port 3(team0) entered disabled state [ 529.539689][T12773] batman_adv: batadv0: Adding interface: team0 [ 529.560658][T12773] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.586590][T12773] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 529.660003][T12783] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 529.684697][T12783] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1484'. [ 529.693798][T12783] team0: entered promiscuous mode [ 529.704225][T12783] team_slave_0: entered promiscuous mode [ 529.716219][T12783] team_slave_1: entered promiscuous mode [ 529.723568][T12783] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.732044][T12785] 9pnet_virtio: no channels available for device syz [ 529.846008][T12783] batman_adv: batadv0: Interface activated: team0 [ 529.991731][T12783] batman_adv: batadv0: Interface deactivated: team0 [ 530.119775][T12783] batman_adv: batadv0: Removing interface: team0 [ 530.382029][T12783] bridge0: port 3(team0) entered blocking state [ 530.394330][T12783] bridge0: port 3(team0) entered disabled state [ 530.400836][T12783] team0: entered allmulticast mode [ 530.432187][T12783] team_slave_0: entered allmulticast mode [ 530.487410][T12783] team_slave_1: entered allmulticast mode [ 532.230853][T12821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 532.901077][T12822] orangefs_mount: mount request failed with -4 [ 534.495442][T12852] (null): rxe_set_mtu: Set mtu to 1024 [ 534.501215][T12852] rdma_rxe: rxe_newlink: failed to add syz_tun [ 535.784923][T12871] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 536.596080][T12877] 9pnet_virtio: no channels available for device syz [ 537.192358][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1509'. [ 537.540718][T12896] netlink: 'syz.8.1510': attribute type 10 has an invalid length. [ 537.569835][T12896] bridge0: port 1(team0) entered disabled state [ 537.606533][T12896] team0: left allmulticast mode [ 537.611821][T12896] team0: left promiscuous mode [ 537.625651][T12896] bridge0: port 1(team0) entered disabled state [ 537.713914][T12898] netlink: 'syz.8.1510': attribute type 10 has an invalid length. [ 537.743214][T12898] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1510'. [ 537.975807][T12898] team0: entered promiscuous mode [ 537.987759][T12898] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.998477][T12898] bridge0: port 1(team0) entered blocking state [ 538.005758][T12898] bridge0: port 1(team0) entered disabled state [ 538.013455][T12898] team0: entered allmulticast mode [ 539.634379][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 539.876172][ T5828] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 539.896936][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 539.963010][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.986755][ T5828] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 539.997125][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.067891][ T5828] usb 2-1: Product: syz [ 540.072512][ T5828] usb 2-1: Manufacturer: syz [ 540.102166][ T5828] usb 2-1: SerialNumber: syz [ 540.235318][ T5828] usb 2-1: config 0 descriptor?? [ 540.683922][T12942] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 543.588362][ T7462] usb 2-1: USB disconnect, device number 4 [ 544.904058][T12971] netlink: 'syz.9.1527': attribute type 10 has an invalid length. [ 544.969792][T12973] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 545.654811][T12971] bridge0: port 3(team0) entered disabled state [ 545.668127][T12971] team0: left allmulticast mode [ 545.673021][T12971] team_slave_0: left allmulticast mode [ 545.678963][T12968] 9pnet_virtio: no channels available for device syz [ 545.710208][T12971] team_slave_1: left allmulticast mode [ 545.791440][T12971] team0: left promiscuous mode [ 545.940485][T12971] team_slave_0: left promiscuous mode [ 545.948538][T12971] team_slave_1: left promiscuous mode [ 545.976134][T12971] bridge0: port 3(team0) entered disabled state [ 545.996706][T12971] batman_adv: batadv0: Adding interface: team0 [ 546.011745][T12971] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.102130][T12971] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 546.746921][T12975] netlink: 'syz.9.1527': attribute type 10 has an invalid length. [ 546.783724][T12975] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1527'. [ 546.817184][T12975] team0: entered promiscuous mode [ 547.239873][T12975] team_slave_0: entered promiscuous mode [ 547.276159][T12975] team_slave_1: entered promiscuous mode [ 547.332213][T12975] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.355390][T12975] batman_adv: batadv0: Interface activated: team0 [ 547.361860][T12975] batman_adv: batadv0: Interface deactivated: team0 [ 547.377213][T12975] batman_adv: batadv0: Removing interface: team0 [ 547.416358][T12975] bridge0: port 3(team0) entered blocking state [ 547.433133][T12975] bridge0: port 3(team0) entered disabled state [ 547.444362][T12975] team0: entered allmulticast mode [ 547.482329][T12975] team_slave_0: entered allmulticast mode [ 547.506778][T12975] team_slave_1: entered allmulticast mode [ 547.525503][T12975] bridge0: port 3(team0) entered blocking state [ 547.531876][T12975] bridge0: port 3(team0) entered forwarding state [ 549.710643][T13028] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 550.375235][T13027] (null): rxe_set_mtu: Set mtu to 1024 [ 550.381041][T13027] rdma_rxe: rxe_newlink: failed to add syz_tun [ 551.501846][T13052] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 551.590767][T13052] team0: left allmulticast mode [ 551.613824][T13052] team_slave_0: left allmulticast mode [ 551.638467][T13052] team_slave_1: left allmulticast mode [ 551.644594][T13052] team0: left promiscuous mode [ 551.650083][T13052] team_slave_0: left promiscuous mode [ 551.657098][T13052] team_slave_1: left promiscuous mode [ 551.664553][T13052] bridge0: port 3(team0) entered disabled state [ 551.683892][T13052] batman_adv: batadv0: Adding interface: team0 [ 551.692228][T13052] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.768594][T13052] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 551.784987][T13056] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 551.793311][T13056] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1542'. [ 551.830561][T13056] team0: entered promiscuous mode [ 551.836169][T13056] team_slave_0: entered promiscuous mode [ 551.843103][T13056] team_slave_1: entered promiscuous mode [ 551.858246][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.877392][T13056] batman_adv: batadv0: Interface activated: team0 [ 551.893985][T13056] batman_adv: batadv0: Interface deactivated: team0 [ 551.903789][T13056] batman_adv: batadv0: Removing interface: team0 [ 551.933130][T13056] bridge0: port 3(team0) entered blocking state [ 551.950632][T13056] bridge0: port 3(team0) entered disabled state [ 551.960123][T13056] team0: entered allmulticast mode [ 551.977306][T13056] team_slave_0: entered allmulticast mode [ 551.989626][T13056] team_slave_1: entered allmulticast mode [ 552.287534][T13059] 9pnet_virtio: no channels available for device syz [ 554.411592][T13077] (syz.9.1546,13077,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 555.081581][T13089] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 556.794745][T13109] (null): rxe_set_mtu: Set mtu to 1024 [ 556.800555][T13109] rdma_rxe: rxe_newlink: failed to add syz_tun [ 557.044707][T13125] netlink: 'syz.9.1553': attribute type 10 has an invalid length. [ 557.123979][T13125] bridge0: port 3(team0) entered disabled state [ 557.163524][T13125] team0: left allmulticast mode [ 557.172404][T13125] team_slave_0: left allmulticast mode [ 557.188050][T13125] team_slave_1: left allmulticast mode [ 557.201661][T13125] team0: left promiscuous mode [ 557.213035][T13125] team_slave_0: left promiscuous mode [ 557.228205][T13125] team_slave_1: left promiscuous mode [ 557.247553][T13125] bridge0: port 3(team0) entered disabled state [ 557.313808][T13125] batman_adv: batadv0: Adding interface: team0 [ 557.355276][T13125] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.490520][T13125] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 557.530809][T13131] netlink: 'syz.9.1553': attribute type 10 has an invalid length. [ 557.548992][T13131] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1553'. [ 557.604767][T13131] team0: entered promiscuous mode [ 557.609850][T13131] team_slave_0: entered promiscuous mode [ 557.819634][T13131] team_slave_1: entered promiscuous mode [ 557.827329][T13131] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.834313][T13131] batman_adv: batadv0: Interface activated: team0 [ 557.844408][T13131] batman_adv: batadv0: Interface deactivated: team0 [ 557.851053][T13131] batman_adv: batadv0: Removing interface: team0 [ 557.861428][T13131] bridge0: port 3(team0) entered blocking state [ 558.048499][T13131] bridge0: port 3(team0) entered disabled state [ 558.056715][T13131] team0: entered allmulticast mode [ 558.062008][T13131] team_slave_0: entered allmulticast mode [ 558.068087][T13131] team_slave_1: entered allmulticast mode [ 558.086958][T13131] bridge0: port 3(team0) entered blocking state [ 558.093349][T13131] bridge0: port 3(team0) entered forwarding state [ 559.422582][T13142] 9pnet_virtio: no channels available for device syz [ 560.518282][T13161] (null): rxe_set_mtu: Set mtu to 1024 [ 560.524465][T13161] rdma_rxe: rxe_newlink: failed to add syz_tun [ 562.930464][T13191] 9pnet_virtio: no channels available for device syz [ 562.968971][T13198] (null): rxe_set_mtu: Set mtu to 1024 [ 562.991386][T13198] rdma_rxe: rxe_newlink: failed to add syz_tun [ 563.179793][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.186216][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.213927][T13204] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1580'. [ 563.344469][T13207] netlink: 'syz.9.1579': attribute type 10 has an invalid length. [ 563.401679][T13207] bridge0: port 3(team0) entered disabled state [ 563.673946][T13207] team0: left allmulticast mode [ 563.715121][T13207] team_slave_0: left allmulticast mode [ 563.727345][T13207] team_slave_1: left allmulticast mode [ 563.735253][T13207] team0: left promiscuous mode [ 563.745461][T13207] team_slave_0: left promiscuous mode [ 563.762462][T13207] team_slave_1: left promiscuous mode [ 563.771883][T13207] bridge0: port 3(team0) entered disabled state [ 563.963494][T13207] batman_adv: batadv0: Adding interface: team0 [ 564.006597][T13207] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.099023][T13207] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 564.167539][T13217] netlink: 'syz.9.1579': attribute type 10 has an invalid length. [ 564.176933][T13217] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1579'. [ 564.393797][T13217] team0: entered promiscuous mode [ 564.507504][T13217] team_slave_0: entered promiscuous mode [ 564.565886][T13217] team_slave_1: entered promiscuous mode [ 564.593772][T13217] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.602114][T13217] batman_adv: batadv0: Interface activated: team0 [ 564.609499][T13217] batman_adv: batadv0: Interface deactivated: team0 [ 564.632195][T13217] batman_adv: batadv0: Removing interface: team0 [ 564.805762][T13217] bridge0: port 3(team0) entered blocking state [ 564.827416][T13217] bridge0: port 3(team0) entered disabled state [ 564.841858][T13217] team0: entered allmulticast mode [ 566.179858][T13217] team_slave_0: entered allmulticast mode [ 566.185992][T13217] team_slave_1: entered allmulticast mode [ 566.200911][T13217] bridge0: port 3(team0) entered blocking state [ 566.207305][T13217] bridge0: port 3(team0) entered forwarding state [ 566.888339][T13252] netlink: 'syz.1.1584': attribute type 10 has an invalid length. [ 567.053613][T13252] team0: left allmulticast mode [ 567.113525][T13252] team_slave_0: left allmulticast mode [ 567.166850][T13252] team_slave_1: left allmulticast mode [ 567.205867][T13252] team0: left promiscuous mode [ 567.227683][T13252] team_slave_0: left promiscuous mode [ 567.258609][T13252] team_slave_1: left promiscuous mode [ 567.283160][T13252] bridge0: port 3(team0) entered disabled state [ 567.407843][T13252] batman_adv: batadv0: Adding interface: team0 [ 567.444516][T13252] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.543420][T13252] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 567.572714][T13267] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1590'. [ 567.613794][T13253] netlink: 'syz.1.1584': attribute type 10 has an invalid length. [ 567.627799][T13253] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1584'. [ 567.636902][T13253] team0: entered promiscuous mode [ 567.642061][T13253] team_slave_0: entered promiscuous mode [ 567.661405][T13253] team_slave_1: entered promiscuous mode [ 567.674015][T13253] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.688736][T13253] batman_adv: batadv0: Interface activated: team0 [ 567.708272][T13253] batman_adv: batadv0: Interface deactivated: team0 [ 567.722307][T13253] batman_adv: batadv0: Removing interface: team0 [ 567.731062][T13253] bridge0: port 3(team0) entered blocking state [ 567.737709][T13253] bridge0: port 3(team0) entered disabled state [ 567.760273][T13253] team0: entered allmulticast mode [ 567.777363][T13253] team_slave_0: entered allmulticast mode [ 567.786261][T13253] team_slave_1: entered allmulticast mode [ 568.178932][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.200792][T13285] batadv_slave_0: entered promiscuous mode [ 568.877859][T13298] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 570.420110][T13313] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1599'. [ 570.971046][T13322] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 571.733605][T13323] orangefs_mount: mount request failed with -4 [ 571.775236][T13319] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 571.953089][T13319] orangefs_mount: mount request failed with -4 [ 572.619824][T13356] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 573.405440][T13362] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1609'. [ 575.058925][T13379] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 575.796417][T13380] orangefs_mount: mount request failed with -4 [ 576.073620][T13388] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 576.087165][T13389] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 576.774793][T13390] orangefs_mount: mount request failed with -4 [ 577.755924][T13389] bridge0: port 3(team0) entered disabled state [ 577.823735][T13389] team0: left allmulticast mode [ 577.836415][T13389] team_slave_0: left allmulticast mode [ 577.854272][T13389] team_slave_1: left allmulticast mode [ 577.865119][T13389] team0: left promiscuous mode [ 577.886399][T13389] team_slave_0: left promiscuous mode [ 577.900920][T13389] team_slave_1: left promiscuous mode [ 577.931263][T13389] bridge0: port 3(team0) entered disabled state [ 578.055136][T13406] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1619'. [ 578.330224][T13389] batman_adv: batadv0: Adding interface: team0 [ 578.381206][T13389] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.514074][T13389] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 581.827916][T13450] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 582.547028][T13451] orangefs_mount: mount request failed with -4 [ 583.744687][T13462] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1631'. [ 584.260249][T13474] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 585.027432][T13475] orangefs_mount: mount request failed with -4 [ 585.316662][T13486] netlink: 'syz.9.1633': attribute type 10 has an invalid length. [ 585.461371][T13486] bridge0: port 3(team0) entered disabled state [ 585.493597][T13486] team0: left allmulticast mode [ 585.504719][T13486] team_slave_0: left allmulticast mode [ 585.510412][T13486] team_slave_1: left allmulticast mode [ 585.516250][T13486] team0: left promiscuous mode [ 585.521332][T13486] team_slave_0: left promiscuous mode [ 585.531992][T13486] team_slave_1: left promiscuous mode [ 585.539688][T13486] bridge0: port 3(team0) entered disabled state [ 585.576490][T13486] batman_adv: batadv0: Adding interface: team0 [ 585.583023][T13486] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.609640][T13486] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 585.659898][T13494] netlink: 'syz.9.1633': attribute type 10 has an invalid length. [ 585.702061][T13494] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1633'. [ 585.746636][T13494] team0: entered promiscuous mode [ 585.774971][T13494] team_slave_0: entered promiscuous mode [ 585.787866][T13494] team_slave_1: entered promiscuous mode [ 585.829208][T13494] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.843118][T13494] batman_adv: batadv0: Interface activated: team0 [ 585.869899][T13494] batman_adv: batadv0: Interface deactivated: team0 [ 585.876949][T13494] batman_adv: batadv0: Removing interface: team0 [ 585.927207][T13494] bridge0: port 3(team0) entered blocking state [ 585.946361][T13494] bridge0: port 3(team0) entered disabled state [ 585.970092][T13494] team0: entered allmulticast mode [ 586.013068][T13494] team_slave_0: entered allmulticast mode [ 586.036165][T13494] team_slave_1: entered allmulticast mode [ 586.082504][T13494] bridge0: port 3(team0) entered blocking state [ 586.088921][T13494] bridge0: port 3(team0) entered forwarding state [ 587.435316][T13530] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 588.471115][T13533] orangefs_mount: mount request failed with -4 [ 589.044474][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 589.867926][T13566] netlink: 'syz.1.1650': attribute type 10 has an invalid length. [ 590.024324][T13566] team0: left allmulticast mode [ 590.029271][T13566] team_slave_0: left allmulticast mode [ 590.038604][T13566] team_slave_1: left allmulticast mode [ 590.044317][T13566] team0: left promiscuous mode [ 590.068372][T13566] team_slave_0: left promiscuous mode [ 590.093589][T13566] team_slave_1: left promiscuous mode [ 590.112127][T13566] bridge0: port 3(team0) entered disabled state [ 590.156842][T13566] batman_adv: batadv0: Adding interface: team0 [ 590.167232][T13566] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.193748][T13566] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 590.211205][T13568] netlink: 'syz.1.1650': attribute type 10 has an invalid length. [ 590.232508][T13568] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1650'. [ 590.251630][T13568] team0: entered promiscuous mode [ 590.257858][T13568] team_slave_0: entered promiscuous mode [ 590.265822][T13568] team_slave_1: entered promiscuous mode [ 590.280853][T13568] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.289638][T13568] batman_adv: batadv0: Interface activated: team0 [ 590.296922][T13568] batman_adv: batadv0: Interface deactivated: team0 [ 590.303900][T13568] batman_adv: batadv0: Removing interface: team0 [ 590.316876][T13568] bridge0: port 3(team0) entered blocking state [ 590.323834][T13568] bridge0: port 3(team0) entered disabled state [ 590.337222][T13568] team0: entered allmulticast mode [ 590.342600][T13568] team_slave_0: entered allmulticast mode [ 590.373122][T13568] team_slave_1: entered allmulticast mode [ 594.710020][T13621] netlink: 'syz.9.1656': attribute type 10 has an invalid length. [ 594.762315][T13621] bridge0: port 3(team0) entered disabled state [ 594.931814][T13621] team0: left allmulticast mode [ 594.946808][T13621] team_slave_0: left allmulticast mode [ 594.954906][T13621] team_slave_1: left allmulticast mode [ 594.964816][T13621] team0: left promiscuous mode [ 594.969963][T13621] team_slave_0: left promiscuous mode [ 594.977161][T13621] team_slave_1: left promiscuous mode [ 594.988996][T13621] bridge0: port 3(team0) entered disabled state [ 595.013672][T13621] batman_adv: batadv0: Adding interface: team0 [ 595.020207][T13621] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.046344][T13621] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 595.084924][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 595.112861][T13630] netlink: 'syz.9.1656': attribute type 10 has an invalid length. [ 595.151613][T13630] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1656'. [ 595.203570][T13630] team0: entered promiscuous mode [ 595.233050][T13630] team_slave_0: entered promiscuous mode [ 595.243324][T13630] team_slave_1: entered promiscuous mode [ 595.250405][T13630] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.257560][T13630] batman_adv: batadv0: Interface activated: team0 [ 595.264012][T13630] batman_adv: batadv0: Interface deactivated: team0 [ 595.271774][T13630] batman_adv: batadv0: Removing interface: team0 [ 595.286318][T13630] bridge0: port 3(team0) entered blocking state [ 595.318082][T13630] bridge0: port 3(team0) entered disabled state [ 595.335268][T13630] team0: entered allmulticast mode [ 595.355221][T13630] team_slave_0: entered allmulticast mode [ 595.369432][T13630] team_slave_1: entered allmulticast mode [ 595.384896][T13630] bridge0: port 3(team0) entered blocking state [ 595.391290][T13630] bridge0: port 3(team0) entered forwarding state [ 595.403283][T13639] overlayfs: failed to resolve './file0': -2 [ 595.698171][T13647] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 596.435883][T13648] orangefs_mount: mount request failed with -4 [ 598.496071][T13671] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 601.119154][T13696] (null): rxe_set_mtu: Set mtu to 1024 [ 601.137917][T13696] rdma_rxe: rxe_newlink: failed to add syz_tun [ 601.182775][T13696] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1673'. [ 601.591943][T13709] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 602.324548][T13710] orangefs_mount: mount request failed with -4 [ 602.643942][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1675'. [ 603.259616][T13743] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 604.124605][ C1] ================================================================== [ 604.132705][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 604.140615][ C1] Read of size 2 at addr ffff888024ae102a by task syz.3.1682/13754 [ 604.148503][ C1] [ 604.150841][ C1] CPU: 1 PID: 13754 Comm: syz.3.1682 Not tainted 6.6.101-syzkaller #0 [ 604.158996][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.169062][ C1] Call Trace: [ 604.172343][ C1] [ 604.175197][ C1] dump_stack_lvl+0x16c/0x230 [ 604.179889][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 604.184918][ C1] ? show_regs_print_info+0x20/0x20 [ 604.190125][ C1] ? load_image+0x3b0/0x3b0 [ 604.194647][ C1] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 604.200043][ C1] ? __virt_addr_valid+0x18c/0x540 [ 604.205251][ C1] ? __virt_addr_valid+0x469/0x540 [ 604.210371][ C1] print_report+0xac/0x220 [ 604.214795][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 604.219912][ C1] kasan_report+0x117/0x150 [ 604.224424][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 604.229546][ C1] rose_timer_expiry+0x46a/0x4b0 [ 604.234500][ C1] call_timer_fn+0x16e/0x530 [ 604.239093][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 604.244131][ C1] ? call_timer_fn+0xbf/0x530 [ 604.248810][ C1] ? __run_timers+0x7d0/0x7d0 [ 604.253499][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.258720][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 604.263941][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 604.268986][ C1] __run_timers+0x52d/0x7d0 [ 604.273500][ C1] ? detach_timer+0x2b0/0x2b0 [ 604.278183][ C1] ? lock_chain_count+0x20/0x20 [ 604.283042][ C1] run_timer_softirq+0x67/0xf0 [ 604.287811][ C1] handle_softirqs+0x280/0x820 [ 604.292578][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 604.297346][ C1] ? do_softirq+0x180/0x180 [ 604.301853][ C1] __irq_exit_rcu+0xc7/0x190 [ 604.306448][ C1] ? irq_exit_rcu+0x20/0x20 [ 604.310959][ C1] irq_exit_rcu+0x9/0x20 [ 604.315202][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 604.320860][ C1] [ 604.323805][ C1] [ 604.326741][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.332738][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 [ 604.338901][ C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 00 24 7e 7e 65 8b [ 604.358510][ C1] RSP: 0018:ffffc900106df4c0 EFLAGS: 00000287 [ 604.364587][ C1] RAX: ffffffff812ebd06 RBX: 0000000000000001 RCX: 0000000000080000 [ 604.372561][ C1] RDX: ffffc9000de1c000 RSI: 000000000002d1a8 RDI: 000000000002d1a9 [ 604.380538][ C1] RBP: 0000000000000000 R08: ffffc900106df501 R09: 0000000000000000 [ 604.388522][ C1] R10: ffffc900106df568 R11: fffff520020dbeb9 R12: 0000000000000001 [ 604.396502][ C1] R13: 0000000000000000 R14: ffffc900106df588 R15: ffff88807d50da00 [ 604.404488][ C1] ? get_stack_info+0xf6/0x170 [ 604.409272][ C1] get_stack_info+0xf6/0x170 [ 604.413871][ C1] __unwind_start+0x48b/0x7e0 [ 604.418564][ C1] ? __kernel_text_address+0xd/0x30 [ 604.423777][ C1] ? stack_trace_save+0xe0/0xe0 [ 604.428647][ C1] arch_stack_walk+0xf8/0x190 [ 604.433362][ C1] ? __unwind_start+0x2d2/0x7e0 [ 604.438236][ C1] stack_trace_save+0x9c/0xe0 [ 604.442930][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 604.448052][ C1] ? __stack_depot_save+0x1f/0x630 [ 604.453166][ C1] kasan_set_track+0x4e/0x70 [ 604.457810][ C1] __kasan_slab_alloc+0x6c/0x80 [ 604.462671][ C1] slab_post_alloc_hook+0x6e/0x4d0 [ 604.467804][ C1] kmem_cache_alloc_bulk+0x462/0x5b0 [ 604.473106][ C1] ? kmem_cache_alloc_bulk+0xda/0x5b0 [ 604.478506][ C1] __io_alloc_req_refill+0x261/0x480 [ 604.483825][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 604.489491][ C1] ? io_queue_deferred+0x320/0x320 [ 604.494627][ C1] ? io_issue_sqe+0x55c/0xc90 [ 604.499337][ C1] io_submit_sqes+0xc9e/0x1d00 [ 604.504139][ C1] __se_sys_io_uring_enter+0x2de/0x22e0 [ 604.509710][ C1] ? do_futex+0x2ff/0x3e0 [ 604.514051][ C1] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 604.519614][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 604.525344][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 604.531327][ C1] ? lock_chain_count+0x20/0x20 [ 604.536190][ C1] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 604.541751][ C1] do_syscall_64+0x55/0xb0 [ 604.546178][ C1] ? clear_bhb_loop+0x40/0x90 [ 604.550856][ C1] ? clear_bhb_loop+0x40/0x90 [ 604.555535][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.561443][ C1] RIP: 0033:0x7f6c9c58ebe9 [ 604.565879][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.585499][ C1] RSP: 002b:00007f6c9d35c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 604.593928][ C1] RAX: ffffffffffffffda RBX: 00007f6c9c7b6090 RCX: 00007f6c9c58ebe9 [ 604.601902][ C1] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000009 [ 604.609874][ C1] RBP: 00007f6c9c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 604.617844][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.625819][ C1] R13: 00007f6c9c7b6128 R14: 00007f6c9c7b6090 R15: 00007ffe8de23bb8 [ 604.633813][ C1] [ 604.636836][ C1] [ 604.639170][ C1] Allocated by task 13653: [ 604.643591][ C1] kasan_set_track+0x4e/0x70 [ 604.648186][ C1] __kasan_kmalloc+0x8f/0xa0 [ 604.652785][ C1] __kmalloc+0xb4/0x240 [ 604.656952][ C1] io_req_prep_async+0x27b/0x670 [ 604.661902][ C1] io_submit_sqes+0xd75/0x1d00 [ 604.666674][ C1] __se_sys_io_uring_enter+0x2de/0x22e0 [ 604.672228][ C1] do_syscall_64+0x55/0xb0 [ 604.676645][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.682553][ C1] [ 604.684874][ C1] Freed by task 13653: [ 604.688934][ C1] kasan_set_track+0x4e/0x70 [ 604.693536][ C1] kasan_save_free_info+0x2e/0x50 [ 604.698572][ C1] ____kasan_slab_free+0x126/0x1e0 [ 604.703687][ C1] slab_free_freelist_hook+0x130/0x1b0 [ 604.709151][ C1] __kmem_cache_free+0xba/0x1f0 [ 604.714017][ C1] io_clean_op+0x66b/0x8c0 [ 604.718442][ C1] __io_submit_flush_completions+0xa64/0xc10 [ 604.724430][ C1] tctx_task_work+0x518/0x800 [ 604.729119][ C1] task_work_run+0x1ce/0x250 [ 604.733716][ C1] get_signal+0x1235/0x1400 [ 604.738231][ C1] arch_do_signal_or_restart+0x96/0x780 [ 604.743786][ C1] exit_to_user_mode_loop+0x70/0x110 [ 604.749082][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 604.754641][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 604.760112][ C1] do_syscall_64+0x61/0xb0 [ 604.764531][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.770434][ C1] [ 604.772754][ C1] Last potentially related work creation: [ 604.778464][ C1] kasan_save_stack+0x3e/0x60 [ 604.783145][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 604.788525][ C1] insert_work+0x3d/0x310 [ 604.792857][ C1] __queue_work+0xd2c/0x1020 [ 604.797454][ C1] call_timer_fn+0x16e/0x530 [ 604.802045][ C1] __run_timers+0x558/0x7d0 [ 604.806544][ C1] run_timer_softirq+0x67/0xf0 [ 604.811304][ C1] handle_softirqs+0x280/0x820 [ 604.816068][ C1] __irq_exit_rcu+0xc7/0x190 [ 604.820659][ C1] irq_exit_rcu+0x9/0x20 [ 604.824902][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 604.830541][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.836533][ C1] [ 604.838851][ C1] Second to last potentially related work creation: [ 604.845425][ C1] kasan_save_stack+0x3e/0x60 [ 604.850108][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 604.855484][ C1] insert_work+0x3d/0x310 [ 604.859814][ C1] __queue_work+0xd2c/0x1020 [ 604.864404][ C1] call_timer_fn+0x16e/0x530 [ 604.869000][ C1] __run_timers+0x558/0x7d0 [ 604.873503][ C1] run_timer_softirq+0x67/0xf0 [ 604.878265][ C1] handle_softirqs+0x280/0x820 [ 604.883027][ C1] __irq_exit_rcu+0xc7/0x190 [ 604.887619][ C1] irq_exit_rcu+0x9/0x20 [ 604.891861][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 604.897501][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.903495][ C1] [ 604.905815][ C1] The buggy address belongs to the object at ffff888024ae1000 [ 604.905815][ C1] which belongs to the cache kmalloc-512 of size 512 [ 604.919868][ C1] The buggy address is located 42 bytes inside of [ 604.919868][ C1] freed 512-byte region [ffff888024ae1000, ffff888024ae1200) [ 604.933576][ C1] [ 604.935895][ C1] The buggy address belongs to the physical page: [ 604.942312][ C1] page:ffffea000092b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24ae0 [ 604.952460][ C1] head:ffffea000092b800 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 604.961391][ C1] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 604.969378][ C1] page_type: 0xffffffff() [ 604.973707][ C1] raw: 00fff00000000840 ffff888017841c80 dead000000000100 dead000000000122 [ 604.982288][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 604.990865][ C1] page dumped because: kasan: bad access detected [ 604.997275][ C1] page_owner tracks the page as allocated [ 605.002981][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7807815218, free_ts 0 [ 605.022606][ C1] post_alloc_hook+0x1cd/0x210 [ 605.027381][ C1] get_page_from_freelist+0x195c/0x19f0 [ 605.032933][ C1] __alloc_pages+0x1e3/0x460 [ 605.037534][ C1] alloc_page_interleave+0x24/0x1e0 [ 605.042741][ C1] alloc_slab_page+0x5d/0x170 [ 605.047429][ C1] new_slab+0x87/0x2e0 [ 605.051505][ C1] ___slab_alloc+0xc6d/0x12f0 [ 605.056187][ C1] __kmem_cache_alloc_node+0x1a2/0x260 [ 605.061651][ C1] kmalloc_trace+0x2a/0xe0 [ 605.066073][ C1] device_add+0xbe/0xc20 [ 605.070325][ C1] platform_device_add+0x4bd/0x830 [ 605.075439][ C1] dummy_hcd_init+0x294/0x1070 [ 605.080202][ C1] do_one_initcall+0x1fd/0x750 [ 605.084970][ C1] do_initcall_level+0x137/0x1f0 [ 605.089915][ C1] do_initcalls+0x69/0xd0 [ 605.094255][ C1] kernel_init_freeable+0x3d2/0x570 [ 605.099464][ C1] page_owner free stack trace missing [ 605.104823][ C1] [ 605.107143][ C1] Memory state around the buggy address: [ 605.112770][ C1] ffff888024ae0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 605.120831][ C1] ffff888024ae0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 605.128889][ C1] >ffff888024ae1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.136946][ C1] ^ [ 605.142316][ C1] ffff888024ae1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.150377][ C1] ffff888024ae1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.158439][ C1] ================================================================== [ 605.166638][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.173830][ C1] CPU: 1 PID: 13754 Comm: syz.3.1682 Not tainted 6.6.101-syzkaller #0 [ 605.181981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.192039][ C1] Call Trace: [ 605.195320][ C1] [ 605.198171][ C1] dump_stack_lvl+0x16c/0x230 [ 605.202856][ C1] ? show_regs_print_info+0x20/0x20 [ 605.208063][ C1] ? load_image+0x3b0/0x3b0 [ 605.212580][ C1] panic+0x2c0/0x710 [ 605.216508][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 605.221032][ C1] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 605.226942][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 605.232845][ C1] ? _raw_spin_unlock+0x40/0x40 [ 605.237706][ C1] ? print_memory_metadata+0x314/0x400 [ 605.243172][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 605.248290][ C1] check_panic_on_warn+0x84/0xa0 [ 605.253257][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 605.258387][ C1] end_report+0x6f/0x140 [ 605.262635][ C1] kasan_report+0x128/0x150 [ 605.267144][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 605.272263][ C1] rose_timer_expiry+0x46a/0x4b0 [ 605.277208][ C1] call_timer_fn+0x16e/0x530 [ 605.281800][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 605.286828][ C1] ? call_timer_fn+0xbf/0x530 [ 605.291508][ C1] ? __run_timers+0x7d0/0x7d0 [ 605.296194][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.301406][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 605.306612][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 605.311646][ C1] __run_timers+0x52d/0x7d0 [ 605.316159][ C1] ? detach_timer+0x2b0/0x2b0 [ 605.320842][ C1] ? lock_chain_count+0x20/0x20 [ 605.325701][ C1] run_timer_softirq+0x67/0xf0 [ 605.330467][ C1] handle_softirqs+0x280/0x820 [ 605.335233][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 605.339999][ C1] ? do_softirq+0x180/0x180 [ 605.344516][ C1] __irq_exit_rcu+0xc7/0x190 [ 605.349122][ C1] ? irq_exit_rcu+0x20/0x20 [ 605.353637][ C1] irq_exit_rcu+0x9/0x20 [ 605.357883][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 605.363532][ C1] [ 605.366468][ C1] [ 605.369396][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 605.375391][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 [ 605.381552][ C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 00 24 7e 7e 65 8b [ 605.401170][ C1] RSP: 0018:ffffc900106df4c0 EFLAGS: 00000287 [ 605.407248][ C1] RAX: ffffffff812ebd06 RBX: 0000000000000001 RCX: 0000000000080000 [ 605.415228][ C1] RDX: ffffc9000de1c000 RSI: 000000000002d1a8 RDI: 000000000002d1a9 [ 605.423200][ C1] RBP: 0000000000000000 R08: ffffc900106df501 R09: 0000000000000000 [ 605.431178][ C1] R10: ffffc900106df568 R11: fffff520020dbeb9 R12: 0000000000000001 [ 605.439152][ C1] R13: 0000000000000000 R14: ffffc900106df588 R15: ffff88807d50da00 [ 605.447130][ C1] ? get_stack_info+0xf6/0x170 [ 605.451908][ C1] get_stack_info+0xf6/0x170 [ 605.456503][ C1] __unwind_start+0x48b/0x7e0 [ 605.461191][ C1] ? __kernel_text_address+0xd/0x30 [ 605.466399][ C1] ? stack_trace_save+0xe0/0xe0 [ 605.471256][ C1] arch_stack_walk+0xf8/0x190 [ 605.475935][ C1] ? __unwind_start+0x2d2/0x7e0 [ 605.480800][ C1] stack_trace_save+0x9c/0xe0 [ 605.485488][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 605.490602][ C1] ? __stack_depot_save+0x1f/0x630 [ 605.495715][ C1] kasan_set_track+0x4e/0x70 [ 605.500336][ C1] __kasan_slab_alloc+0x6c/0x80 [ 605.505191][ C1] slab_post_alloc_hook+0x6e/0x4d0 [ 605.510311][ C1] kmem_cache_alloc_bulk+0x462/0x5b0 [ 605.515614][ C1] ? kmem_cache_alloc_bulk+0xda/0x5b0 [ 605.520997][ C1] __io_alloc_req_refill+0x261/0x480 [ 605.526304][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 605.531953][ C1] ? io_queue_deferred+0x320/0x320 [ 605.537082][ C1] ? io_issue_sqe+0x55c/0xc90 [ 605.541771][ C1] io_submit_sqes+0xc9e/0x1d00 [ 605.546650][ C1] __se_sys_io_uring_enter+0x2de/0x22e0 [ 605.552211][ C1] ? do_futex+0x2ff/0x3e0 [ 605.556541][ C1] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 605.562097][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 605.567821][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 605.573803][ C1] ? lock_chain_count+0x20/0x20 [ 605.578658][ C1] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 605.584214][ C1] do_syscall_64+0x55/0xb0 [ 605.588634][ C1] ? clear_bhb_loop+0x40/0x90 [ 605.593307][ C1] ? clear_bhb_loop+0x40/0x90 [ 605.597989][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.603904][ C1] RIP: 0033:0x7f6c9c58ebe9 [ 605.608319][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.627933][ C1] RSP: 002b:00007f6c9d35c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 605.636356][ C1] RAX: ffffffffffffffda RBX: 00007f6c9c7b6090 RCX: 00007f6c9c58ebe9 [ 605.644328][ C1] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000009 [ 605.652307][ C1] RBP: 00007f6c9c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.660285][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.668264][ C1] R13: 00007f6c9c7b6128 R14: 00007f6c9c7b6090 R15: 00007ffe8de23bb8 [ 605.676251][ C1] [ 605.679490][ C1] Kernel Offset: disabled [ 605.683801][ C1] Rebooting in 86400 seconds..