last executing test programs: 2m44.539780603s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x44) 2m41.517912492s ago: executing program 0 (id=22): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x100) r0 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioprio_get$pid(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.29995226s ago: executing program 0 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 2m35.528192398s ago: executing program 0 (id=29): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040000) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000002c0), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) inotify_init() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2m27.602990738s ago: executing program 0 (id=42): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xd, 0x200}, 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket(0x8000000010, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 2m24.347563104s ago: executing program 0 (id=49): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x2000}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x1, 0xf0, 0x4}}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x0, {0x0, 0xff, 0xfd6b8596aa0093b2}, 0xff}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x1, 0x1}, {0xfff2, 0xfff3}, {0xd, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c011}, 0xc4) 2m9.086186334s ago: executing program 32 (id=49): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x2000}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x1, 0xf0, 0x4}}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x0, {0x0, 0xff, 0xfd6b8596aa0093b2}, 0xff}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x1, 0x1}, {0xfff2, 0xfff3}, {0xd, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c011}, 0xc4) 18.32005492s ago: executing program 4 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$eJzs3b9rJHUUAPA3m9nZVYtNYSWCA1pYHZdrbRLkDsRUHilOCw3eHUh2ERKI+APXq8ROC0v/AkHwD7GxsxRsBTtPOBj5zs5kf9ywtye3Eb3Pp0jezve9nTc/kkyKvLz34uTkdhl37332awyHWfT2BxH3s9iNXrS+iCX7XwcA8F92v6rij2qmY/mXr5ZfZ4svelvuDQDYjkf8/G/k9cdbKePHy+sNANiOm7fefvPg8PD6W2U5jBuTL8+P0q/46fNs/eBufBDjuBNXYxQPIuoHhX7UTwspvFFV1TQvk914ZTI9P0qVk3d/at7/4PeIun4vRrFbb7p42qjr3zi8vlfOLNRPUx/PNvvfT/XXYhTPf9MWL9Vf66iPoyJefXmh/ysxip/fjw9jHLfrJub1n++V5evVt39++k5qL9Vn0/OjQZ03V+20O+9f8jUCAAAAAAAAAAAAAAAAAAAAAOD/50ozO2cQ9fyetKmZv7PzIL3oR9naXZ7PM6u/GAg8nw8UvaqqplV8187XuVqWZdUkzuvzeCFvBgsCAAAAAAAAAAAAAAAAAADAU+7s409OjsfjO6dPJGinAeQR8dfNiH/6PvsLW16K9cmDZp/H43GvCZdz8sUtsdPmZBFr20gH8YROy6OCZx7qOQW9OP3+h86qdERneXQtDVNQdC61Qb9jX48ffNSfncfOnPbuOjnOus/h4KLDYbpwsXrhiujeez9WthTt9VxNbm/FzQ6n6FwaPfZpKZ6rg+manMjWfV289tvS4WSxklzUEzc6y/tN0HU2ZvfGRvdzDGflD3+vyEzrAAAAAAAAAAAAAAAAAACArZr/9W/H4r21pb1qsLW2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSzf///yZBvly8QVURp2f/1rEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9Pg7AAD//6ofUAA=") 15.815982671s ago: executing program 4 (id=179): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x2}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 14.34176152s ago: executing program 4 (id=181): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 13.595272035s ago: executing program 4 (id=183): ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000300)={0x739, 0x0, 0x200008c, 0x2, 0x0}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb6a, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) r4 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000fb) 10.157027817s ago: executing program 4 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 10.138361228s ago: executing program 3 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 10.001700492s ago: executing program 1 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000015c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x16, 0x28, 0x67, 0x0, 0xa, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x9}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r5, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 9.988706153s ago: executing program 2 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.759354313s ago: executing program 2 (id=188): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 8.660110106s ago: executing program 1 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 8.600471708s ago: executing program 3 (id=190): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.502482744s ago: executing program 1 (id=191): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.7871165s ago: executing program 4 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x20000600) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 5.739481962s ago: executing program 3 (id=193): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb7) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0/file0/file0\x00') r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xe400000e) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000131) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) 5.49193433s ago: executing program 2 (id=194): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x7) brk(0x5d555ede6000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 5.408101763s ago: executing program 1 (id=195): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4042}, 0x4) openat$rtc(0xffffffffffffff9c, 0x0, 0x642100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 5.344252765s ago: executing program 3 (id=196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20004040) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 4.031249088s ago: executing program 1 (id=197): socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8001, 0xf319, @loopback, 0x1}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0xffffffff, 0xe6, 0x1, 0x0, [{0x0, 0x0, 0xd, '\x00', 0x6}, {0x80, 0xa2, 0x6c, '\x00', 0x6}, {0x0, 0x9, 0x8, '\x00', 0x59}, {0x5, 0x6, 0x3, '\x00', 0x4}, {0x8, 0x8, 0xc, '\x00', 0x9}, {0x1, 0x3, 0x48}, {0x6, 0x28, 0xb, '\x00', 0x8}, {0x0, 0x8, 0xbe, '\x00', 0x80}, {0x3, 0x5, 0x2, '\x00', 0x1}, {0x8, 0x6, 0xe, '\x00', 0x9}, {0x8, 0xe7, 0x34, '\x00', 0x8}, {0x9, 0x9, 0x7, '\x00', 0x9}, {0x0, 0x2, 0xfa, '\x00', 0x6f}, {0xd, 0x5, 0x5, '\x00', 0xfa}, {0x2, 0xcc, 0x81, '\x00', 0x4}, {0x7d, 0x0, 0x3, '\x00', 0x5}, {0x75, 0x7f, 0x8, '\x00', 0x14}, {0x4, 0x8, 0xc, '\x00', 0x4}, {0x0, 0x40, 0x5, '\x00', 0x2}, {0x5, 0x2, 0x4, '\x00', 0x6}, {0x40, 0x5, 0x6, '\x00', 0xf5}, {0x2, 0x1, 0x4, '\x00', 0x5}, {0x0, 0xe9, 0x7, '\x00', 0xf}, {0xa, 0x5, 0xd, '\x00', 0x5}]}}) 3.987516959s ago: executing program 2 (id=198): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffff7f, 0x91b9}, [@TCA_NETEM_DELAY_DIST={0x18, 0x2, "b1f12dd9b56cda87d2edc6479942a588c25ddab1"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) openat(0xffffffffffffff9c, 0x0, 0x441, 0x102) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000980)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f5c0", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 3.302415792s ago: executing program 3 (id=199): sendmsg$qrtr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000011000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40880000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200000000000000000006e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x880}, 0x40800) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3.236337844s ago: executing program 1 (id=200): socket$packet(0x11, 0x3, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) capset(&(0x7f0000000500)={0x20080522}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) socket$nl_route(0x10, 0x3, 0x0) 1.670242295s ago: executing program 2 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0903000000000000000029"], 0x14}}, 0x0) 11.88937ms ago: executing program 2 (id=202): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=203): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x49, {"0f01ca2e646740c159368266bad004b0bdee66baa100ed640f017c9993660f38816da4470f019d0d000000f3430fc776100f01c3460f013a"}}], 0x49}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0xac67, 0x8000000000000180, 0x2, 0x17, 0xf1, 0x0, 0x9, 0x8, 0x2, 0x8, 0x0, 0xa43, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x194a15}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x7, 0x7, 0x84, 0x80, 0x8, 0x4, 0x9b, 0xe, 0x6, 0x8, 0x0, 0xfe, 0xe, 0x2, 0x2e, 0x1}}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000180)=@arm64={0xf5, 0x1, 0x1}) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 69.986725][ T5763] cgroup: Unknown subsys name 'net' [ 70.123809][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.710233][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.716884][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.834486][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.450517][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.460066][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.468792][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.472973][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.476696][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.485190][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.499828][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.508255][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.508410][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.524879][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.526272][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.534247][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.547648][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.554930][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.563176][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.565512][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.576313][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.579512][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.590590][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.600737][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.609572][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.630181][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.652779][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.661884][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.050070][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 74.217148][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 74.236384][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.243583][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.256569][ T5776] bridge_slave_0: entered allmulticast mode [ 74.265036][ T5776] bridge_slave_0: entered promiscuous mode [ 74.285425][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 74.311047][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.318691][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.326208][ T5776] bridge_slave_1: entered allmulticast mode [ 74.333073][ T5776] bridge_slave_1: entered promiscuous mode [ 74.369864][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 74.425413][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.444745][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.511051][ T5776] team0: Port device team_slave_0 added [ 74.542700][ T5776] team0: Port device team_slave_1 added [ 74.554338][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.564229][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.571734][ T5777] bridge_slave_0: entered allmulticast mode [ 74.580244][ T5777] bridge_slave_0: entered promiscuous mode [ 74.623022][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.630529][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.637969][ T5777] bridge_slave_1: entered allmulticast mode [ 74.644926][ T5777] bridge_slave_1: entered promiscuous mode [ 74.652404][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.659812][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.667505][ T5775] bridge_slave_0: entered allmulticast mode [ 74.674823][ T5775] bridge_slave_0: entered promiscuous mode [ 74.695397][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.702643][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.729657][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.763384][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.771017][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.778641][ T5778] bridge_slave_0: entered allmulticast mode [ 74.785442][ T5778] bridge_slave_0: entered promiscuous mode [ 74.793316][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.800679][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.808462][ T5775] bridge_slave_1: entered allmulticast mode [ 74.815371][ T5775] bridge_slave_1: entered promiscuous mode [ 74.822714][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.830041][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.857247][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.883689][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.892766][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.900893][ T5778] bridge_slave_1: entered allmulticast mode [ 74.909853][ T5778] bridge_slave_1: entered promiscuous mode [ 74.931856][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.971845][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.994141][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.040304][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.052678][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.068327][ T5776] hsr_slave_0: entered promiscuous mode [ 75.075363][ T5776] hsr_slave_1: entered promiscuous mode [ 75.089047][ T5777] team0: Port device team_slave_0 added [ 75.098512][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.144315][ T5777] team0: Port device team_slave_1 added [ 75.242422][ T5778] team0: Port device team_slave_0 added [ 75.251787][ T5775] team0: Port device team_slave_0 added [ 75.259945][ T5778] team0: Port device team_slave_1 added [ 75.273430][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.280755][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.307579][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.321046][ T5775] team0: Port device team_slave_1 added [ 75.355610][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.363064][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.390161][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.428826][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.435836][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.461899][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.497140][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.504397][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.531204][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.544627][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.551951][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.578522][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.590499][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.598192][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.624658][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.697375][ T5777] hsr_slave_0: entered promiscuous mode [ 75.703765][ T5777] hsr_slave_1: entered promiscuous mode [ 75.706954][ T5783] Bluetooth: hci3: command tx timeout [ 75.712825][ T5786] Bluetooth: hci1: command tx timeout [ 75.715145][ T5783] Bluetooth: hci2: command tx timeout [ 75.721075][ T5781] Bluetooth: hci0: command tx timeout [ 75.734101][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.742137][ T5777] Cannot create hsr debugfs directory [ 75.762654][ T5775] hsr_slave_0: entered promiscuous mode [ 75.771708][ T5775] hsr_slave_1: entered promiscuous mode [ 75.778064][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.785728][ T5775] Cannot create hsr debugfs directory [ 75.925380][ T5778] hsr_slave_0: entered promiscuous mode [ 75.932643][ T5778] hsr_slave_1: entered promiscuous mode [ 75.939155][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.947480][ T5778] Cannot create hsr debugfs directory [ 76.149162][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.178184][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.227319][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.238431][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.311757][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.330263][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.340745][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.352794][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.451740][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.462425][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.482266][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.524293][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.585775][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.612876][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.622722][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.632398][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.649518][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.702861][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.732715][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.740223][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.770953][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.778206][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.799520][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.880457][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.913362][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.920713][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.949681][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.956923][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.011681][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.109941][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.130950][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.156247][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.184141][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.191574][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.272079][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.279296][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.340703][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.372304][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.379546][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.450589][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.457787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.582522][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.602777][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.759235][ T5776] veth0_vlan: entered promiscuous mode [ 77.786457][ T5786] Bluetooth: hci3: command tx timeout [ 77.792208][ T5786] Bluetooth: hci0: command tx timeout [ 77.794592][ T5777] veth0_vlan: entered promiscuous mode [ 77.803250][ T5781] Bluetooth: hci2: command tx timeout [ 77.803996][ T5783] Bluetooth: hci1: command tx timeout [ 77.837426][ T5776] veth1_vlan: entered promiscuous mode [ 77.930505][ T5777] veth1_vlan: entered promiscuous mode [ 77.955187][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.012554][ T5776] veth0_macvtap: entered promiscuous mode [ 78.034667][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.050599][ T5776] veth1_macvtap: entered promiscuous mode [ 78.102101][ T5777] veth0_macvtap: entered promiscuous mode [ 78.122056][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.141874][ T5777] veth1_macvtap: entered promiscuous mode [ 78.172418][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.184200][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.198981][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.208696][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.217930][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.239490][ T5775] veth0_vlan: entered promiscuous mode [ 78.278016][ T5775] veth1_vlan: entered promiscuous mode [ 78.285079][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.297794][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.309976][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.351902][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.364948][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.380912][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.390238][ T5778] veth0_vlan: entered promiscuous mode [ 78.413924][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.423116][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432899][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.442500][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.484093][ T5778] veth1_vlan: entered promiscuous mode [ 78.527345][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.535743][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.595393][ T5775] veth0_macvtap: entered promiscuous mode [ 78.618573][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.631420][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.675071][ T5775] veth1_macvtap: entered promiscuous mode [ 78.708141][ T5778] veth0_macvtap: entered promiscuous mode [ 78.754051][ T5778] veth1_macvtap: entered promiscuous mode [ 78.780462][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.792519][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.802598][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.816447][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.830699][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.843533][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.861006][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.877370][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.889210][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.907778][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.935823][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.949864][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.983462][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.988880][ T5841] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.999555][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.029433][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.040680][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.092049][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.103235][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.114133][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.126435][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.136647][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.147797][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.164341][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.187460][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.197575][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.209221][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.209319][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.219401][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.237927][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.249191][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.260172][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.283824][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.329577][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.352349][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.366043][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.376668][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.627508][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.635479][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.722734][ T5851] syz.3.6[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.817180][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.823413][ T5851] loop3: detected capacity change from 0 to 2048 [ 79.838062][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.839632][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.860559][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.866583][ T5783] Bluetooth: hci1: command tx timeout [ 79.873457][ T5783] Bluetooth: hci2: command tx timeout [ 79.881264][ T5088] Bluetooth: hci0: command tx timeout [ 79.883629][ T5781] Bluetooth: hci3: command tx timeout [ 79.943496][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.000858][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.015507][ T5851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.882129][ T5781] Bluetooth: hci3: command tx timeout [ 82.882151][ T5786] Bluetooth: hci2: command tx timeout [ 82.882183][ T5786] Bluetooth: hci0: command tx timeout [ 82.888069][ T5783] Bluetooth: hci1: command tx timeout [ 83.178132][ T5874] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8'. [ 83.673793][ T5881] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 84.797916][ T5890] netlink: 'syz.0.11': attribute type 39 has an invalid length. [ 84.903551][ T5892] loop1: detected capacity change from 0 to 64 [ 87.055897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.478364][ T788] cfg80211: failed to load regulatory.db [ 87.945771][ T5899] loop0: detected capacity change from 0 to 4096 [ 88.057555][ T5899] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.875871][ C0] sched: RT throttling activated [ 91.455247][ T5913] binder: 5912:5913 ioctl c0306201 200000000080 returned -14 [ 93.916430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.019177][ T5951] process 'syz.0.27' launched './file0/file0/..' with NULL argv: empty string added [ 100.082935][ T5948] loop2: detected capacity change from 0 to 4096 [ 100.202819][ T5948] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 101.596358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 101.826800][ T28] audit: type=1800 audit(1780465245.688:2): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.23" name="file1" dev="overlay" ino=45 res=0 errno=0 [ 103.370058][ T5965] syzkaller0: entered promiscuous mode [ 103.396070][ T5965] syzkaller0: entered allmulticast mode [ 103.795996][ T28] audit: type=1326 audit(1780465247.678:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.2.36" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda5ab9ce59 code=0x0 [ 108.029233][ T5992] Bluetooth: MGMT ver 1.22 [ 108.096369][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.314337][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.327781][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.339602][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.353346][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.366716][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.404416][ T27] usb 3-1: config 0 descriptor?? [ 109.175613][ T27] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 109.206039][ T27] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 109.213516][ T27] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 109.238475][ T27] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 109.256311][ T27] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 109.278193][ T27] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 109.288478][ T27] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 109.348491][ T27] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.703817][ T27] usb 3-1: USB disconnect, device number 2 [ 109.864115][ T6003] fido_id[6003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 110.768990][ T6008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.775303][ T6008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.844549][ T6008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.861909][ T6008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.871007][ T6008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.898338][ T6008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.906418][ T6008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.912437][ T6008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.925592][ T6008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.934985][ T6008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.937407][ T6011] syz_tun: entered allmulticast mode [ 110.941064][ T6008] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.953853][ T6008] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.969392][ T6011] Zero length message leads to an empty skb [ 111.189306][ T6014] syzkaller0: entered promiscuous mode [ 111.205111][ T6014] syzkaller0: entered allmulticast mode [ 112.826038][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.907899][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.930803][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 112.986061][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.992437][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.396450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 114.673784][ T6033] loop1: detected capacity change from 0 to 512 [ 114.702221][ T6033] EXT4-fs: Ignoring removed orlov option [ 114.774898][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.799790][ T6033] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.906202][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.026340][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.065970][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.072239][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.366044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 118.566943][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.567426][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.572995][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.573025][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.625170][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.485986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 122.895893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 124.520756][ T6067] syzkaller0: entered promiscuous mode [ 124.540887][ T6067] syzkaller0: entered allmulticast mode [ 124.698814][ T6069] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 126.841750][ T6080] loop3: detected capacity change from 0 to 64 [ 128.321886][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.332180][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.342927][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.351297][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.363670][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.372630][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.701193][ T6084] chnl_net:caif_netlink_parms(): no params data found [ 129.077833][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.102659][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.118149][ T6092] loop1: detected capacity change from 0 to 32768 [ 129.129624][ T6092] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.71 (6092) [ 129.133678][ T6084] bridge_slave_0: entered allmulticast mode [ 129.166328][ T28] audit: type=1326 audit(1780465273.038:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.2.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5ab9ce59 code=0x7fc00000 [ 129.187512][ T6092] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.192665][ T6084] bridge_slave_0: entered promiscuous mode [ 129.201553][ T6092] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 129.215653][ T6092] BTRFS info (device loop1): force clearing of disk cache [ 129.222895][ T6092] BTRFS info (device loop1): enabling auto defrag [ 129.229512][ T6092] BTRFS info (device loop1): max_inline at 0 [ 129.230706][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.235606][ T6092] BTRFS info (device loop1): enabling ssd optimizations [ 129.250636][ T6092] BTRFS info (device loop1): using spread ssd allocation scheme [ 129.258595][ T6092] BTRFS info (device loop1): using free space tree [ 129.274238][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.282534][ T6084] bridge_slave_1: entered allmulticast mode [ 129.291536][ T6084] bridge_slave_1: entered promiscuous mode [ 129.339674][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.358637][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.393402][ T6092] BTRFS info (device loop1): rebuilding free space tree [ 129.524290][ T6084] team0: Port device team_slave_0 added [ 129.535538][ T6084] team0: Port device team_slave_1 added [ 129.647346][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.677561][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.736907][ T581] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 129.762773][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.777098][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.784108][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.811827][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.923841][ T6084] hsr_slave_0: entered promiscuous mode [ 129.931477][ T6084] hsr_slave_1: entered promiscuous mode [ 129.938269][ T6084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.950481][ T6084] Cannot create hsr debugfs directory [ 130.095974][ T6084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.105810][ T6084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.118571][ T6084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.129472][ T6084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.208613][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.230682][ T6084] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.252520][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.260037][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.281122][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.288401][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.415700][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.436440][ T5781] Bluetooth: hci4: command tx timeout [ 133.096725][ T6125] netlink: 'syz.3.68': attribute type 13 has an invalid length. [ 133.154040][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.160544][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.026270][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 134.026477][ T5781] Bluetooth: hci4: command tx timeout [ 134.264264][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.865912][ T5781] Bluetooth: hci4: command tx timeout [ 137.853656][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027141000: rx timeout, send abort [ 138.363179][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027141000: abort rx timeout. Force session deactivation [ 138.401320][ T6084] veth0_vlan: entered promiscuous mode [ 138.443373][ T6084] veth1_vlan: entered promiscuous mode [ 138.659862][ T6084] veth0_macvtap: entered promiscuous mode [ 138.728892][ T6084] veth1_macvtap: entered promiscuous mode [ 138.832187][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.879515][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.908259][ T5781] Bluetooth: hci4: command tx timeout [ 138.933388][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.996386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 140.405953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 140.526026][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.536154][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.547808][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.557795][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.568495][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.580355][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.591458][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.602423][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.613125][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.623972][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.640092][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.651680][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.661590][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.672198][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.697585][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.725637][ T6084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.755955][ T6084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.764747][ T6084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.816011][ T6084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.053093][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.556478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 142.766015][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.928975][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.957375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.970605][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 146.577739][ T6184] TC_ACT_REPEAT abuse ? [ 153.912458][ T6209] loop2: detected capacity change from 0 to 64 [ 160.859141][ T6235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.865367][ T6235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.871566][ T6235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.878581][ T6235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.884701][ T6235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.892355][ T6235] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.344917][ T6235] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.996163][ T5088] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.002282][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.008512][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.014759][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.016027][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.077115][ T5786] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.097521][ T5786] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.150639][ T6287] syzkaller0: entered promiscuous mode [ 173.166099][ T6287] syzkaller0: entered allmulticast mode [ 173.335117][ T6287] tipc: Started in network mode [ 173.341176][ T6287] tipc: Node identity c6f39f0ad132, cluster identity 4711 [ 173.356388][ T6287] tipc: Enabled bearer , priority 0 [ 173.777993][ T6286] tipc: Resetting bearer [ 173.943517][ T6286] tipc: Disabling bearer [ 178.976300][ T6310] syzkaller0: entered promiscuous mode [ 179.003795][ T6310] syzkaller0: entered allmulticast mode [ 184.440492][ T6340] netlink: 'syz.1.121': attribute type 13 has an invalid length. [ 184.810787][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 184.919911][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 185.474617][ T6355] loop3: detected capacity change from 0 to 128 [ 194.020920][ T6388] loop2: detected capacity change from 0 to 32768 [ 194.035741][ T6388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.131 (6388) [ 194.082430][ T6388] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.093208][ T6388] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 194.102312][ T6388] BTRFS info (device loop2): force clearing of disk cache [ 194.109771][ T6388] BTRFS info (device loop2): enabling auto defrag [ 194.116527][ T6388] BTRFS info (device loop2): max_inline at 0 [ 194.122674][ T6388] BTRFS info (device loop2): enabling ssd optimizations [ 194.129752][ T6388] BTRFS info (device loop2): using spread ssd allocation scheme [ 194.137596][ T6388] BTRFS info (device loop2): using free space tree [ 194.218242][ T6388] BTRFS info (device loop2): rebuilding free space tree [ 194.497028][ T1147] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 194.611154][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.618520][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.621744][ T5778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.720713][ T6426] syzkaller0: entered promiscuous mode [ 198.726486][ T6426] syzkaller0: entered allmulticast mode [ 207.386165][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.780689][ T6469] xt_cgroup: path and classid specified [ 227.025631][ T6539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 227.032468][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.099836][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 227.385890][ T788] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 227.450144][ T6540] vhci_hcd: connection reset by peer [ 227.482003][ T12] vhci_hcd: stop threads [ 227.498010][ T12] vhci_hcd: release socket [ 227.517577][ T12] vhci_hcd: disconnect device [ 230.403519][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.410924][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.432962][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.479553][ T6556] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.535431][ T6556] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.741365][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.757546][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.773073][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.788840][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.805299][ T6556] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.505993][ T788] vhci_hcd: vhci_device speed not set [ 235.476593][ T5783] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 236.138843][ T6585] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.187433][ T6591] loop4: detected capacity change from 0 to 256 [ 240.995859][ T6607] program syz.1.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.194556][ T6609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 241.201263][ T6609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.327358][ T6609] vhci_hcd vhci_hcd.0: Device attached [ 241.701623][ T6610] vhci_hcd: connection closed [ 241.702447][ T11] vhci_hcd: stop threads [ 241.708669][ T6617] lo: Caught tx_queue_len zero misconfig [ 241.714430][ T11] vhci_hcd: release socket [ 241.719082][ T6617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 241.721954][ T11] vhci_hcd: disconnect device [ 241.766740][ T5838] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 241.774348][ T5838] usb 37-1: enqueue for inactive port 0 [ 241.804360][ T6622] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 241.866591][ T5838] vhci_hcd: vhci_device speed not set [ 245.665076][ T6637] syzkaller0: entered promiscuous mode [ 245.673579][ T6637] syzkaller0: entered allmulticast mode [ 248.110067][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.2.188'. [ 249.901479][ T6662] dummy0: entered promiscuous mode [ 249.923313][ T6662] vlan2: entered promiscuous mode [ 255.532434][ T6018] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 256.047562][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.054087][ T1294] ieee802154 phy1 wpan1: encryption failed: -22