last executing test programs: 2m42.713207505s ago: executing program 2 (id=340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = socket(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0, 0x23, 0x7, 0x1}, {0x200, 0x4, 0x6, 0x1}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x60, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308010", 0x10, r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170e0000000000000000010000500500070000000000080009000000000014001f000000000000000000000000000000000006000e0007000000060002000100000014002000fefc00000000000000000000000000aa"], 0x5c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000640)}, 0x103) keyctl$describe(0x6, 0x0, &(0x7f0000000100)=""/148, 0x94) r5 = geteuid() keyctl$chown(0x4, 0x0, r5, 0xee01) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000600)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdc00, 0x2}, 0xc, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x4}, 0x4040000) r7 = add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x2}, r7) keyctl$link(0x8, r7, r4) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x20, 0x400002) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, r8}, 0xc) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) 2m42.367679435s ago: executing program 2 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x47, 0x0, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) io_setup(0x5, &(0x7f0000000000)) ioperm(0x5, 0x1ff, 0x2) 2m39.860380098s ago: executing program 2 (id=348): r0 = socket(0x0, 0x803, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(r5, r4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000140)={r7}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000018c0)={r7, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x7f}}, 0x5, 0x6, 0x27, 0x4, 0xc, 0x3, 0x7}, &(0x7f0000001980)=0x9c) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r8, &(0x7f0000000880)=""/4096, 0x1000, 0x400000000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0xffffffff}, {0x34, 0x0, 0x0, 0xe12b}, {0x16}]}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000380)=ANY=[], 0xf}}], 0x1, 0x0) 2m38.16037633s ago: executing program 2 (id=354): socket(0x40000000002, 0x3, 0x80000000002) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c756d61736b3d30303030303030303030303030303030303030303030352c757466382c6572726f72733d636f6e748cb675652c696f636861727365743d6d616363656e746575726f2c646973636172642c696f636861727365743d63703836302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x1d, r0}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x14, 0x1, 0x0, 0x0, "9b05ae1a2a69f3fae2db547dc5706f809e48e05a112d9fe6226a9650322881803f470cd751151dc4ed19fa41c8b8912703c5083a2a5414f676355470cdc6812c"}, 0x48}, 0x2, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002a00010000000000fcdbdf250300002c0800010029242d00afa257bf96a9cee6"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) listen(r1, 0xc) setsockopt$inet6_int(r1, 0x10d, 0xb, &(0x7f0000000240)=0x6, 0x4) 2m32.582986317s ago: executing program 2 (id=370): unshare(0x40600) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x100, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000280)=""/29, 0x1d}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbfdbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001030090780000000060fd906300003a00000000000000000000ffffac1414aa00000000000000000000ffffac1414aa1e520b4c951ee12ecd946ec100"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) 2m32.407296307s ago: executing program 2 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x2040004) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) lseek(0xffffffffffffffff, 0x5d2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000080), 0x10) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 2m17.328003325s ago: executing program 32 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x2040004) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) lseek(0xffffffffffffffff, 0x5d2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000080), 0x10) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 1m9.578262838s ago: executing program 4 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) r6 = syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) write(r6, 0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 1m7.915231709s ago: executing program 4 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x22, 0x0, 0x4000, @void, @value}, 0x10) r4 = syz_io_uring_setup(0x1000110d, &(0x7f0000000140)={0x0, 0xbcb4, 0x1, 0x1}, 0x0, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000000)=@abs={0x1}, 0x3) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, 0x0, 0x0) pread64(r5, &(0x7f0000000480)=""/177, 0xb1, 0xa6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x125) r8 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r8, 0xffffffffffffffff, 0x0) 1m2.800150955s ago: executing program 4 (id=568): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 50.33715629s ago: executing program 4 (id=589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x0, @in=@remote, 0x1, 0x1}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) 47.829764224s ago: executing program 4 (id=593): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000980)='\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9b, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2804110, &(0x7f0000000000), 0x1, 0x52c, &(0x7f0000000f40)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) setresuid(0x0, 0x0, 0xee00) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r7) connect$unix(r6, &(0x7f0000000280)=@file={0x1}, 0x6e) listen(r5, 0x800) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r8, 0xffffffffffffffff, 0x0) 43.993873908s ago: executing program 4 (id=599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 28.653592317s ago: executing program 33 (id=599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.82883311s ago: executing program 5 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x9d4, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @rand_addr=0xfffffc13}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@remote, @random="e24262b57fc9", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @multicast, @broadcast, @broadcast, @random="e54a4dea2d55"]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x7}}}}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) read(r3, &(0x7f0000000440)=""/70, 0x46) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c201020301"], 0x0) 9.77988235s ago: executing program 3 (id=652): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000140)={0x1, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905da88235f8a5447dd2a2fd6e91626f068801000f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008dae0b74873b32103472b1eaa007969d008ba7d34171113dc06726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd50080fcffff2400000e4a62fb73c33424b437bb192cdfcc70d262d4fca60000000000000a82727ef14eee686be00b58e384f93a13e4e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db00"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) prctl$PR_MCE_KILL(0x43, 0x0, 0x300) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810484, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x1, 0x675, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', 0x0, 0x0, 0x0, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x34}}, 0x40000c0) unlink(&(0x7f0000000280)='./file1\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "dabb6386f6d73094a90d1fdb507195e485f544228032f04eff6b7454b702570f", "6aabb3257fbc4eb5a702000000a9b0bfed5a88511bfa36cd4d6206598017dffa", "3323b7b8cd277c616d9206e6fd2d56ff18c6adb2b5f90e30b32158c846051324", "193d5bf82fba97515dda05e0637ba9fbf81e49d4f1b5508a4c956379155801bc", "d87badb8a826b9f7474cf73cc0ade30d0cd9c5a00f9025f55d18c2764e77d3fe", "14d3094839a1d8e1ef22cffc"}}) 9.5520014s ago: executing program 1 (id=654): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffff8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x6004) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') lseek(r3, 0xd7, 0x0) read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0x7) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r4, 0x0, 0x0, 0x0) 7.992578412s ago: executing program 1 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000240)="b9ff03076003008cb89e08f086", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x1200}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 7.971343962s ago: executing program 3 (id=658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x0, @in=@remote, 0x1, 0x1}}, 0xe4) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) listen(r3, 0x0) 6.616663413s ago: executing program 1 (id=660): r0 = socket$kcm(0x10, 0x2, 0x4) stat(0x0, &(0x7f00000001c0)) close(r0) socket$kcm(0x10, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) unshare(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r5, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) fchown(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.347691154s ago: executing program 5 (id=661): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) connect$bt_rfcomm(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0xf07, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="30000000100001000000000000000000000000009c812fbab75492244ce7aa639c3b62e95de6da29f118409005a1cef420c07b3f866b74cd6e98f826d066b95f71e3933573da6260501784a9544db411950f1dfd277cf15fe7c5bffc4436ddf9982bff662b8d8a3060001e86de334707", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x5b7a, 0x4) r10 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r10, 0x0, r10) 6.344101334s ago: executing program 0 (id=662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) 6.178454814s ago: executing program 0 (id=663): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000e3830000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000040)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000a40), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x24, r10, 0x4, 0x70bd26, 0x25cfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x48f493b6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x14abe5c4e90fd9b3) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x9, 0xe, 0x0, &(0x7f00000001c0)="40f0538ef0470800000068305500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x58}}, 0x0) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r15, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xed}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}}, 0x0) 6.164780314s ago: executing program 3 (id=664): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1362, &(0x7f0000000080)={0x0, 0x6d6c, 0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x80) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x9e0000, 0x400, 0xff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980900, 0x3, '\x00', @ptr=0x5}}) get_mempolicy(&(0x7f0000000100), &(0x7f0000000040), 0xda, &(0x7f0000133000/0x1000)=nil, 0x3) 4.965002386s ago: executing program 1 (id=665): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 4.848498706s ago: executing program 3 (id=666): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet(r6, &(0x7f0000001340)={&(0x7f0000001140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001280)=[{&(0x7f00000011c0)='z', 0x1}], 0x1}, 0x18840) sendto$inet6(r6, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c) shutdown(r6, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x30, 0x30]}}, &(0x7f0000000200)=""/47, 0x2e, 0x2f, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}], 0x41) 4.794451486s ago: executing program 0 (id=667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb210032000000000000400000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000400000000000e00000020000000000000000000000006401010000000000000000000000000000000002000200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x4004) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x40, 0x7, 0x0, @private1, @loopback, 0x1, 0x8, 0x7f, 0x8}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) close_range(r8, 0xffffffffffffffff, 0x0) 4.616516346s ago: executing program 5 (id=668): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000140)={0x1, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905da88235f8a5447dd2a2fd6e91626f068801000f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008dae0b74873b32103472b1eaa007969d008ba7d34171113dc06726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd50080fcffff2400000e4a62fb73c33424b437bb192cdfcc70d262d4fca60000000000000a82727ef14eee686be00b58e384f93a13e4e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db00"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) prctl$PR_MCE_KILL(0x43, 0x0, 0x300) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810484, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x1, 0x675, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', 0x0, 0x0, 0x0, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x34}}, 0x40000c0) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "dabb6386f6d73094a90d1fdb507195e485f544228032f04eff6b7454b702570f", "6aabb3257fbc4eb5a702000000a9b0bfed5a88511bfa36cd4d6206598017dffa", "3323b7b8cd277c616d9206e6fd2d56ff18c6adb2b5f90e30b32158c846051324", "193d5bf82fba97515dda05e0637ba9fbf81e49d4f1b5508a4c956379155801bc", "d87badb8a826b9f7474cf73cc0ade30d0cd9c5a00f9025f55d18c2764e77d3fe", "14d3094839a1d8e1ef22cffc"}}) 4.138243587s ago: executing program 1 (id=669): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 3.165645608s ago: executing program 0 (id=670): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 2.986851969s ago: executing program 1 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x9d4, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @rand_addr=0xfffffc13}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@remote, @random="e24262b57fc9", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @multicast, @broadcast, @broadcast, @random="e54a4dea2d55"]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x7}}}}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) read(r3, &(0x7f0000000440)=""/70, 0x46) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c201020301"], 0x0) 2.793547229s ago: executing program 0 (id=672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="a2", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be"], 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fddbdf25200000000c00060001000000010000001c002d800500010000000010080002007f360000050004"], 0x3c}}, 0x0) socket$isdn(0x22, 0x3, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x21, "9f68d3a91ea9b9c5ac0a58fba7dae8709596cf7d778f4eccb4fcee9e3436ee4bb4"}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$isdn(0x22, 0x2, 0x25) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2000000000000002) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xfffffffffffffdb0}}], 0x1, 0x22, 0x0) close(r2) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {}, 0x28, {0x2, 0x0, @empty}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) 2.692674259s ago: executing program 5 (id=673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x0, @in=@remote, 0x1, 0x1}}, 0xe4) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) listen(r3, 0x0) 1.554911601s ago: executing program 0 (id=674): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x7, &(0x7f00000008c0)=""/4096) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r5, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) 1.552486761s ago: executing program 5 (id=675): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sliced={0x3, [0x3, 0x8, 0x29, 0x6, 0xba, 0x8, 0xffff, 0x9, 0x9, 0x6b4d, 0x1, 0x2, 0x9a0, 0x2, 0x70ef, 0x5, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x4, 0x6, 0x6, 0x876b, 0x1, 0x5, 0x0, 0x7, 0x1, 0x0, 0x5, 0xf2, 0x1, 0xa, 0x7, 0x5e3, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0xffff, 0x10, 0x7, 0x6], 0x8001}}) r0 = gettid() setpgid(r0, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000140)=0x8) read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0xfffffdef) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r4 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000040)="d25b49eaa837aca70b55963d847cb9cdc64c6cb78f6fd498cd9bba2a17c0e17da219082fa57699f4f249087bddafb95f5df23a60cbb6a1633839a9d2ada455c0ba8f8d191df1879e6e9b66eb51a57735e48c743fa4", 0x55) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000240)=""/234, 0xea, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x63e48283d39d0a99) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) 476.459789ms ago: executing program 5 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000000000791090000000000061000000000000009500000000000000a43abba0b245385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f1689bf768e9d786b746b0025abb9017630c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3017a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd1fb63bafef7d7bdd5bad81e40379623de900000000002d30a1d4456cd3631013f800"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000400), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)=@newtaction={0x7c, 0x1d, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000340)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300)='@', 0x20000000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r8, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r9, 0x3, {0x1, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000300)={&(0x7f0000001680)="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", 0x1000}, 0x1, 0x0, 0x0, 0x4080}, 0x20004010) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x19b5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) 87.25698ms ago: executing program 3 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000001300)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='cq_process\x00', r1}, 0x10) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)={0x0, @dev, 0x0, 0x2, 'ovf\x00'}, 0x2c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$binfmt_misc(r2, &(0x7f0000000200), 0xd) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000380)={{0x5, 0x7}, 0x100, './cgroup\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040), 0x40) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 0s ago: executing program 3 (id=678): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. syzkaller login: [ 61.860884][ T4158] cgroup: Unknown subsys name 'net' [ 62.018782][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.503403][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.935796][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 65.066935][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 65.097601][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 65.111657][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 65.164337][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.171690][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.181244][ T4170] device bridge_slave_0 entered promiscuous mode [ 65.193941][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 65.218339][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.225533][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.233938][ T4170] device bridge_slave_1 entered promiscuous mode [ 65.307329][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.344364][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.356981][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.364309][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.372491][ T4175] device bridge_slave_0 entered promiscuous mode [ 65.386714][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.394007][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.402023][ T4169] device bridge_slave_0 entered promiscuous mode [ 65.434425][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.441793][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.450099][ T4175] device bridge_slave_1 entered promiscuous mode [ 65.457734][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.465162][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.473351][ T4169] device bridge_slave_1 entered promiscuous mode [ 65.492726][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.500257][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.508728][ T4168] device bridge_slave_0 entered promiscuous mode [ 65.542196][ T4170] team0: Port device team_slave_0 added [ 65.548345][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.555662][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.564193][ T4168] device bridge_slave_1 entered promiscuous mode [ 65.595465][ T4170] team0: Port device team_slave_1 added [ 65.601415][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.608510][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.617118][ T4177] device bridge_slave_0 entered promiscuous mode [ 65.633462][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.645180][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.663613][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.670693][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.679212][ T4177] device bridge_slave_1 entered promiscuous mode [ 65.696170][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.714070][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.747936][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.773012][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.780003][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.805980][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.826873][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.838798][ T4175] team0: Port device team_slave_0 added [ 65.848292][ T4169] team0: Port device team_slave_0 added [ 65.855062][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.862192][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.888254][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.901157][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.921722][ T4175] team0: Port device team_slave_1 added [ 65.928671][ T4169] team0: Port device team_slave_1 added [ 65.940495][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.998265][ T4168] team0: Port device team_slave_0 added [ 66.023110][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.030079][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.056650][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.072303][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.079406][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.111537][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.124866][ T4168] team0: Port device team_slave_1 added [ 66.131143][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.138167][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.164503][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.178272][ T4177] team0: Port device team_slave_0 added [ 66.186543][ T4177] team0: Port device team_slave_1 added [ 66.199271][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.206459][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.232665][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.277775][ T4170] device hsr_slave_0 entered promiscuous mode [ 66.285132][ T4170] device hsr_slave_1 entered promiscuous mode [ 66.301547][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.308781][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.334930][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.363594][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.370565][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.396697][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.421491][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.428760][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.455865][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.498576][ T4169] device hsr_slave_0 entered promiscuous mode [ 66.505961][ T4169] device hsr_slave_1 entered promiscuous mode [ 66.513054][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.520908][ T4169] Cannot create hsr debugfs directory [ 66.527549][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.534598][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.560784][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.575437][ T4175] device hsr_slave_0 entered promiscuous mode [ 66.582351][ T4175] device hsr_slave_1 entered promiscuous mode [ 66.588822][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.596793][ T4175] Cannot create hsr debugfs directory [ 66.657931][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 66.661429][ T4168] device hsr_slave_0 entered promiscuous mode [ 66.670752][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 66.671430][ T4179] Bluetooth: hci2: command 0x0409 tx timeout [ 66.677724][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 66.691600][ T4168] device hsr_slave_1 entered promiscuous mode [ 66.698485][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.706390][ T4168] Cannot create hsr debugfs directory [ 66.742731][ T4179] Bluetooth: hci3: command 0x0409 tx timeout [ 66.786896][ T4177] device hsr_slave_0 entered promiscuous mode [ 66.793937][ T4177] device hsr_slave_1 entered promiscuous mode [ 66.800744][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.811631][ T4177] Cannot create hsr debugfs directory [ 67.080219][ T4170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.092811][ T4170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.106621][ T4170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.117242][ T4170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.165005][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.178811][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.192308][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.218239][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.263012][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.275778][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.295613][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.306146][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.388215][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.409869][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.419232][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.450972][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.468587][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.479641][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.492387][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.501623][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.538720][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.549876][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.560387][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.571166][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.578520][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.587420][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.609707][ T4177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.620829][ T4177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.634170][ T4177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.646189][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.656712][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.665460][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.672574][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.700091][ T4177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.735208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.743614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.753251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.763492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.772806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.781610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.791123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.810842][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.820699][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.829922][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.839807][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.848861][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.858452][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.898446][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.907767][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.917751][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.926002][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.937798][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.947036][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.955916][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.963050][ T3098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.971580][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.980599][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.989044][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.996154][ T3098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.004050][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.013395][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.022578][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.031199][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.040043][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.048296][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.059108][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.095687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.106118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.115640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.125261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.134148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.143571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.154069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.163043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.172030][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.179555][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.191372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.214663][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.240180][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.267345][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.281183][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.291699][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.298844][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.308146][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.348565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.366432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.380861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.389990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.399539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.408555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.427452][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.435585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.444867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.460832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.468927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.496929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.507244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.516443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.526005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.538509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.547693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.557027][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.564138][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.578303][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.586997][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.620442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.628973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.638134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.645976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.657725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.666542][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.673657][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.681722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.690740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.700318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.709342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.717850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.727193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.735532][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 68.742019][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 68.748170][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 68.754675][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 68.760675][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.779294][ T4175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.796072][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.812541][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 68.844800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.854998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.864264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.873236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.881783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.897740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.907296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.916739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.948827][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.965626][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.996273][ T4170] device veth0_vlan entered promiscuous mode [ 69.007480][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.028404][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.043812][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.059471][ T4170] device veth1_vlan entered promiscuous mode [ 69.086247][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.100553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.110080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.119149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.127117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.135142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.144613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.153296][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.160365][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.168614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.177430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.188282][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.195384][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.203303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.223632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.231149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.255758][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.264822][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.274581][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.282590][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.310601][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.333090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.343807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.358297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.367122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.376558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.385989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.395283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.408078][ T4169] device veth0_vlan entered promiscuous mode [ 69.418144][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.430286][ T4170] device veth0_macvtap entered promiscuous mode [ 69.440225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.448974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.458454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.467696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.484916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.493247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.501137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.515357][ T4170] device veth1_macvtap entered promiscuous mode [ 69.538926][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.553516][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.561321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.569668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.578474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.587660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.596770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.631651][ T4169] device veth1_vlan entered promiscuous mode [ 69.649385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.659719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.669658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.679903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.689424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.699160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.709699][ T4175] device veth0_vlan entered promiscuous mode [ 69.719657][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.735810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.749223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.760991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.775279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.795108][ T4175] device veth1_vlan entered promiscuous mode [ 69.804646][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.814715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.823801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.833288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.861525][ T4168] device veth0_vlan entered promiscuous mode [ 69.870401][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.879106][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.889128][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.898362][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.907274][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.923751][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.935326][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.944626][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.954687][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.971800][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.987953][ T4169] device veth0_macvtap entered promiscuous mode [ 69.997970][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.008872][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.019590][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.029699][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.048912][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.084947][ T4169] device veth1_macvtap entered promiscuous mode [ 70.094894][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.105372][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.116175][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.137034][ T4168] device veth1_vlan entered promiscuous mode [ 70.164707][ T4175] device veth0_macvtap entered promiscuous mode [ 70.225580][ T4168] device veth0_macvtap entered promiscuous mode [ 70.239920][ T4175] device veth1_macvtap entered promiscuous mode [ 70.250312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.258988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.273920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.287107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.306728][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.321352][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.334482][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.344051][ T4168] device veth1_macvtap entered promiscuous mode [ 70.367519][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.376399][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.385864][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.397260][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.408610][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.420267][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.438837][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.447779][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.459172][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.468230][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.493375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.502586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.512415][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.523454][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.533456][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.544006][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.555424][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.575243][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.586674][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.597050][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.608222][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.618308][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.628956][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.640627][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.651179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.660289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.674290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.683251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.693179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.703052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.715556][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.726679][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.737025][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.749448][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.760809][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.774124][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.783072][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.790744][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.801308][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.812383][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.812458][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 70.829611][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 70.830499][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.835784][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 70.852116][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.852457][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 70.868026][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.880335][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.891526][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.901031][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 70.903038][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.916668][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.925713][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.936989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.945556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.954681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.963738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.973454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.013856][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.024558][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.033784][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.042895][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.077045][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.087584][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.098004][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.098408][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.140332][ T4177] device veth0_vlan entered promiscuous mode [ 71.148570][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.156865][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.164936][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.207530][ T4177] device veth1_vlan entered promiscuous mode [ 71.220282][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.227333][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.303408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.312538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.333456][ T4177] device veth0_macvtap entered promiscuous mode [ 71.394951][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.395077][ T1402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.418194][ T4177] device veth1_macvtap entered promiscuous mode [ 71.426203][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.436637][ T1402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.653815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.669267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.677472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.685871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.886041][ T3098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.927412][ T3098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.028099][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.118877][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.195221][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.261788][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.384305][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.398688][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.416241][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.428795][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.450166][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.550641][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.559245][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.573529][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.597252][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.642637][ T4253] Cannot find set identified by id 0 to match [ 72.648492][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.651185][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.670632][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.683455][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.694737][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.706355][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.720869][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.731170][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.744460][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.760418][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.778638][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.788291][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.799328][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.896092][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 72.906908][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.913603][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 72.948548][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.957031][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.961047][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 72.979896][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 72.989026][ T4244] Bluetooth: hci3: command 0x0419 tx timeout [ 73.002003][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011633][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.029962][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.171640][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.155581][ T4256] loop3: detected capacity change from 0 to 512 [ 74.210793][ T4256] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 74.262459][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.287068][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.355448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.461683][ T1402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.544138][ T1402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.631165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.764898][ T3098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.818504][ T3098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.825634][ T4267] loop3: detected capacity change from 0 to 512 [ 74.894526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.977841][ T4267] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.287642][ T4267] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.402791][ T4267] EXT4-fs (loop3): 1 truncate cleaned up [ 75.411981][ T4267] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.185839][ T4285] Zero length message leads to an empty skb [ 78.192486][ T4285] syz.4.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.195973][ T4298] capability: warning: `syz.0.11' uses deprecated v2 capabilities in a way that may be insecure [ 79.248867][ T4296] loop4: detected capacity change from 0 to 512 [ 79.355267][ T4296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.380448][ T4296] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.969078][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.921559][ T26] audit: type=1800 audit(1738083834.478:2): pid=4307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 81.451834][ C0] sched: RT throttling activated [ 81.615074][ T21] cfg80211: failed to load regulatory.db [ 82.053657][ T4311] loop3: detected capacity change from 0 to 512 [ 83.314821][ T4311] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.570431][ T4311] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.13: iget: bad extended attribute block 512 [ 83.748484][ T4311] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.13: couldn't read orphan inode 15 (err -117) [ 83.796047][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 83.812026][ T4313] ======================================================= [ 83.812026][ T4313] WARNING: The mand mount option has been deprecated and [ 83.812026][ T4313] and is ignored by this kernel. Remove the mand [ 83.812026][ T4313] option from the mount to silence this warning. [ 83.812026][ T4313] ======================================================= [ 83.891583][ T4311] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.914359][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 89.942809][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.952140][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.962492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.971989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.981385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.990949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.000767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.010064][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.019342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 90.643082][ T4369] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.662428][ T4369] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.207431][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.522977][ T4416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.344086][ T4414] xt_NFQUEUE: number of total queues is 0 [ 96.456541][ T4419] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 98.017159][ T4445] device ip6tnl1 entered promiscuous mode [ 98.418357][ T4449] netlink: 96 bytes leftover after parsing attributes in process `syz.2.46'. [ 100.336653][ T26] audit: type=1326 audit(1738083853.898:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 100.521496][ T26] audit: type=1326 audit(1738083853.898:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 100.700127][ T26] audit: type=1326 audit(1738083853.898:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 100.722166][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.164052][ T26] audit: type=1326 audit(1738083853.898:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 101.186112][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.268208][ T26] audit: type=1326 audit(1738083853.898:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 101.322562][ T26] audit: type=1326 audit(1738083853.898:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 101.371275][ T26] audit: type=1326 audit(1738083853.898:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 101.477234][ T26] audit: type=1326 audit(1738083853.898:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 101.607794][ T26] audit: type=1326 audit(1738083853.898:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 104.591889][ T26] audit: type=1326 audit(1738083853.898:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7fc00000 [ 112.382907][ T4544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.72'. [ 112.515701][ T4535] syz.2.70 (4535) used greatest stack depth: 19344 bytes left [ 112.883862][ T4554] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 114.163688][ T4556] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 114.882891][ T4245] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.162148][ T4245] usb 5-1: Using ep0 maxpacket: 32 [ 115.302124][ T4245] usb 5-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config [ 115.321918][ T4245] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.346846][ T4566] mmap: syz.0.77 (4566) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 116.077705][ T4245] usb 5-1: string descriptor 0 read error: -71 [ 116.085303][ T4245] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 116.096849][ T4245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.112363][ T4245] usb 5-1: config 0 descriptor?? [ 116.157609][ T4245] usb 5-1: can't set config #0, error -71 [ 116.175583][ T4245] usb 5-1: USB disconnect, device number 2 [ 116.975107][ T4598] overlayfs: failed to resolve './file0': -2 [ 118.695415][ T4616] netlink: 96 bytes leftover after parsing attributes in process `syz.4.91'. [ 120.046644][ T4641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 120.054440][ T4641] overlayfs: failed to set xattr on upper [ 120.060248][ T4641] overlayfs: ...falling back to index=off,metacopy=off. [ 123.859550][ T4677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.509711][ T4216] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.851256][ T4700] syz.3.119 sent an empty control message without MSG_MORE. [ 128.252111][ T4214] Bluetooth: hci4: command 0x0405 tx timeout [ 132.674677][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.681063][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.852058][ T4769] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.902289][ T4795] device ip6gre0 entered promiscuous mode [ 137.930868][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 137.963928][ T4795] device ip6gre0 left promiscuous mode [ 138.807760][ T4807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 142.451855][ T4276] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.716401][ T4245] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 145.726101][ T4245] Bluetooth: hci4: Injecting HCI hardware error event [ 146.411665][ T4176] Bluetooth: hci4: hardware error 0x00 [ 148.056844][ T4893] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.063874][ T4893] overlayfs: failed to set xattr on upper [ 148.069601][ T4893] overlayfs: ...falling back to index=off,metacopy=off. [ 149.055220][ T4897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 150.962712][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.721930][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 152.420312][ T13] usb 2-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config [ 152.502272][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.968784][ T13] usb 2-1: string descriptor 0 read error: -71 [ 153.283322][ T13] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 153.322136][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.428032][ T4940] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 153.435165][ T4940] overlayfs: failed to set xattr on upper [ 153.440945][ T4940] overlayfs: ...falling back to index=off,metacopy=off. [ 154.281098][ T13] usb 2-1: config 0 descriptor?? [ 154.312608][ T13] usb 2-1: can't set config #0, error -71 [ 154.787455][ T13] usb 2-1: USB disconnect, device number 2 [ 156.354591][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 158.376145][ T4972] input: syz0 as /devices/virtual/input/input5 [ 159.953265][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 167.722837][ T5040] netlink: 96 bytes leftover after parsing attributes in process `syz.2.216'. [ 168.227662][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 168.227942][ T26] audit: type=1326 audit(1738083921.558:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7ffc0000 [ 168.266994][ T26] audit: type=1326 audit(1738083921.568:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0611021710 code=0x7ffc0000 [ 168.737564][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 170.087727][ T26] audit: type=1326 audit(1738083921.568:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7ffc0000 [ 170.493182][ T26] audit: type=1326 audit(1738083921.568:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0611021710 code=0x7ffc0000 [ 170.621590][ T26] audit: type=1326 audit(1738083921.578:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f06110245d7 code=0x7ffc0000 [ 170.765730][ T5066] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 170.772878][ T5066] overlayfs: failed to set xattr on upper [ 170.778661][ T5066] overlayfs: ...falling back to index=off,metacopy=off. [ 171.694518][ T26] audit: type=1326 audit(1738083921.578:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0611022da9 code=0x7ffc0000 [ 171.768651][ T26] audit: type=1326 audit(1738083921.578:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f06110245d7 code=0x7ffc0000 [ 171.813561][ T26] audit: type=1326 audit(1738083921.578:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0611021a0a code=0x7ffc0000 [ 171.847838][ T26] audit: type=1326 audit(1738083921.578:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7ffc0000 [ 171.886401][ T26] audit: type=1326 audit(1738083921.578:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0611022da9 code=0x7ffc0000 [ 172.109519][ T5077] ax25_connect(): syz.1.225 uses autobind, please contact jreuter@yaina.de [ 174.869377][ T5062] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.058921][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 176.073977][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 176.083380][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 176.092448][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 179.205735][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 179.215558][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 179.224652][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 180.155669][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 180.155685][ T26] audit: type=1326 audit(1738083933.718:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 180.321891][ T26] audit: type=1326 audit(1738083933.718:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 180.361885][ T26] audit: type=1326 audit(1738083933.718:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 181.436189][ T26] audit: type=1326 audit(1738083933.718:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 181.484744][ T26] audit: type=1326 audit(1738083933.718:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 181.507254][ T26] audit: type=1326 audit(1738083933.718:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 181.576221][ T5138] bridge0: port 3(gretap0) entered blocking state [ 181.605857][ T5138] bridge0: port 3(gretap0) entered disabled state [ 181.622423][ T5138] device gretap0 entered promiscuous mode [ 181.631643][ T5138] bridge0: port 3(gretap0) entered blocking state [ 181.638512][ T5138] bridge0: port 3(gretap0) entered forwarding state [ 181.687731][ T5138] device gretap0 left promiscuous mode [ 181.694432][ T5138] bridge0: port 3(gretap0) entered disabled state [ 182.378946][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 182.398229][ T26] audit: type=1326 audit(1738083933.718:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 182.427458][ T26] audit: type=1326 audit(1738083933.718:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 182.450890][ T26] audit: type=1326 audit(1738083933.718:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 182.478615][ T4216] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.493596][ T26] audit: type=1326 audit(1738083933.718:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0611022da9 code=0x7fc00000 [ 183.485787][ T4244] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.541962][ T4216] usb 4-1: Using ep0 maxpacket: 16 [ 183.662358][ T7] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 183.752701][ T7] usb 3-1: can't read configurations, error -71 [ 183.832102][ T4216] usb 4-1: device descriptor read/all, error -71 [ 184.012054][ T4244] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.312376][ T4244] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 184.416062][ T4244] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 184.425885][ T4244] usb 5-1: Product: syz [ 184.431321][ T4244] usb 5-1: Manufacturer: syz [ 184.440802][ T4244] usb 5-1: SerialNumber: syz [ 185.353516][ T4244] usb 5-1: config 0 descriptor?? [ 185.415609][ T4244] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 186.292236][ T4244] usb 5-1: USB disconnect, device number 3 [ 186.834620][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 192.376051][ T4216] Bluetooth: hci2: command 0x0406 tx timeout [ 192.560227][ T4216] Bluetooth: hci1: command 0x0406 tx timeout [ 192.734323][ T4216] Bluetooth: hci0: command 0x0406 tx timeout [ 192.759052][ T4216] Bluetooth: hci3: command 0x0406 tx timeout [ 194.110809][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.120340][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.340972][ T5342] bridge0: port 3(ip6gretap0) entered blocking state [ 208.347955][ T5342] bridge0: port 3(ip6gretap0) entered disabled state [ 208.362768][ T5342] device ip6gretap0 entered promiscuous mode [ 208.370971][ T5342] bridge0: port 3(ip6gretap0) entered blocking state [ 208.378163][ T5342] bridge0: port 3(ip6gretap0) entered forwarding state [ 209.542763][ T5350] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 210.463602][ T5355] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 210.948818][ T5366] process 'syz.0.304' launched './file1' with NULL argv: empty string added [ 215.722306][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 215.722325][ T26] audit: type=1326 audit(1738083968.938:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5395 comm="syz.2.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c9ff94da9 code=0x0 [ 222.874226][ T26] audit: type=1800 audit(1738083976.318:155): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.326" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 223.822990][ T5459] netlink: 68 bytes leftover after parsing attributes in process `syz.4.330'. [ 224.844179][ T26] audit: type=1800 audit(1738083978.398:156): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.331" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 227.916489][ T5494] batman_adv: batadv0: Adding interface: ipvlan2 [ 227.922898][ T5494] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.948418][ T5494] batman_adv: batadv0: Interface activated: ipvlan2 [ 230.656756][ T5525] Cannot find del_set index 0 as target [ 231.364178][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 231.391967][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 231.878315][ T5543] Cannot find add_set index 0 as target [ 232.772959][ T5539] usb usb8: usbfs: process 5539 (syz.2.348) did not claim interface 0 before use [ 232.945725][ T26] audit: type=1326 audit(1738083986.508:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.2.348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c9ff94da9 code=0x0 [ 235.849478][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 237.070478][ T4258] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 237.642679][ T4258] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 237.659804][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.668510][ T4258] usb 1-1: Product: syz [ 237.678292][ T4258] usb 1-1: Manufacturer: syz [ 237.692020][ T4258] usb 1-1: SerialNumber: syz [ 237.866795][ T4258] usb 1-1: config 0 descriptor?? [ 238.034760][ T4258] usb 1-1: Found UVC 0.00 device syz (093a:2476) [ 238.062114][ T4258] usb 1-1: No valid video chain found. [ 238.100919][ T4258] gspca_main: pac207-2.14.0 probing 093a:2476 [ 238.763323][ T4258] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 238.835692][ T4244] usb 1-1: USB disconnect, device number 3 [ 239.822793][ T26] audit: type=1800 audit(1738083993.288:158): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.371" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 248.152624][ T26] audit: type=1800 audit(1738084001.518:159): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.381" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 250.526676][ T5712] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 250.537037][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.844237][ T5725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.391'. [ 253.064981][ T5730] team0: Port device veth3 added [ 254.117554][ T5739] Cannot find add_set index 0 as target [ 254.357528][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 254.373210][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 255.712516][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.712804][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.534516][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 257.639682][ T5771] xt_ipvs: protocol family 7 not supported [ 259.137797][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 259.409573][ T4375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.706168][ T2347] Bluetooth: hci5: command 0x0409 tx timeout [ 260.331177][ T4375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.438687][ T4375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.543664][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.557841][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.593010][ T5773] device bridge_slave_0 entered promiscuous mode [ 260.637934][ T4375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.682129][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.689319][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.698128][ T5773] device bridge_slave_1 entered promiscuous mode [ 260.798572][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.829160][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.950860][ T5773] team0: Port device team_slave_0 added [ 261.090315][ T5773] team0: Port device team_slave_1 added [ 261.821316][ T2347] Bluetooth: hci5: command 0x041b tx timeout [ 261.931385][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.946448][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.978089][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.015643][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.045231][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.213580][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.640785][ T5773] device hsr_slave_0 entered promiscuous mode [ 263.672797][ T5773] device hsr_slave_1 entered promiscuous mode [ 263.687369][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.707438][ T5773] Cannot create hsr debugfs directory [ 263.792168][ T4276] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 264.151606][ T2347] Bluetooth: hci5: command 0x040f tx timeout [ 264.571274][ T4375] bridge0: port 3(ip6gretap0) entered disabled state [ 264.726568][ T4375] device ip6gretap0 left promiscuous mode [ 265.288904][ T4375] bridge0: port 3(ip6gretap0) entered disabled state [ 265.312460][ T4276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.323943][ T4276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.336823][ T4276] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.350573][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.402788][ T4276] usb 2-1: config 0 descriptor?? [ 265.571936][ T4258] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 266.092912][ T4258] usb 4-1: Using ep0 maxpacket: 16 [ 266.295205][ T2347] Bluetooth: hci5: command 0x0419 tx timeout [ 266.352272][ T4258] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 266.361391][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.567283][ T4258] usb 4-1: config 0 descriptor?? [ 266.620217][ T4258] usb 4-1: interface 1 not found [ 266.782114][ T4276] usbhid 2-1:0.0: can't add hid device: -71 [ 266.922025][ T4276] usbhid: probe of 2-1:0.0 failed with error -71 [ 266.964718][ T4276] usb 2-1: USB disconnect, device number 3 [ 267.892517][ T4258] usb 4-1: USB disconnect, device number 5 [ 268.145062][ T5773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.196101][ T5773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.792955][ T5773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.950138][ T5773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.412035][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 269.511873][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 271.011641][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.040138][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 271.100015][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.464979][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.715908][ T5933] ODEBUG: Out of memory. ODEBUG disabled [ 272.159779][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.460667][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.478216][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.672153][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.679394][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.604547][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.635919][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.645305][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.656611][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.663833][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.673278][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.978990][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.989293][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.050999][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.181279][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.509793][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.584658][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.801310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.828163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.854325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.874054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.314943][ T4375] device hsr_slave_0 left promiscuous mode [ 278.374869][ T4375] device hsr_slave_1 left promiscuous mode [ 278.402889][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.443617][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.495439][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.506558][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.528109][ T4375] device bridge_slave_1 left promiscuous mode [ 278.552699][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.595009][ T4375] device bridge_slave_0 left promiscuous mode [ 278.630173][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.737912][ T4375] device veth1_macvtap left promiscuous mode [ 278.746508][ T4375] device veth0_macvtap left promiscuous mode [ 278.819747][ T4375] device veth1_vlan left promiscuous mode [ 278.833865][ T4375] device veth0_vlan left promiscuous mode [ 281.858863][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 281.887017][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 282.062984][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.105696][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.242323][ T4375] bond0 (unregistering): Released all slaves [ 283.442209][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.452'. [ 283.571363][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.591588][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.623774][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.665924][ T6049] team0: Port device veth3 added [ 283.778907][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.451'. [ 284.942845][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 285.026022][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 285.176353][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 285.529506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.066906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.582093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.606587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.655728][ T5773] device veth0_vlan entered promiscuous mode [ 286.678452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.706128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.845210][ T5773] device veth1_vlan entered promiscuous mode [ 287.221108][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.269451][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.433548][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.464249][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.941551][ T5773] device veth0_macvtap entered promiscuous mode [ 288.330461][ T5773] device veth1_macvtap entered promiscuous mode [ 288.487126][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.621946][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.667453][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.698772][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.731672][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.767956][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.802587][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.131570][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.285870][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.903327][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.932075][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.018127][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.059261][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.133956][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.152841][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.275348][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.304342][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.358016][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.385269][ T6135] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 291.395320][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.434507][ T5773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.481908][ T5773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.517746][ T5773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.546834][ T5773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.413133][ T5773] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 292.461887][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.513782][ T1413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.552337][ T1413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.603373][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.621103][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.635444][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.652004][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.271462][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 294.671902][ T2347] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 294.941937][ T2347] usb 1-1: Using ep0 maxpacket: 8 [ 295.063601][ T2347] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 295.179187][ T2347] usb 1-1: config 0 has no interface number 0 [ 295.715972][ T2347] usb 1-1: config 0 interface 74 has no altsetting 0 [ 295.761868][ T2347] usb 1-1: string descriptor 0 read error: -71 [ 295.768390][ T2347] usb 1-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice=81.cd [ 295.778037][ T2347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.833526][ T2347] usb 1-1: config 0 descriptor?? [ 295.852231][ T2347] usb 1-1: can't set config #0, error -71 [ 295.892951][ T2347] usb 1-1: USB disconnect, device number 4 [ 299.080669][ T6236] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.493'. [ 299.419756][ T6235] sctp: failed to load transform for md5: -2 [ 301.853359][ T6265] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.499'. [ 301.995646][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 305.606692][ T6281] No such timeout policy "syz1" [ 305.613011][ T6281] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 305.639197][ T6281] CIFS mount error: No usable UNC path provided in device string! [ 305.639197][ T6281] [ 305.649566][ T6281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 306.005239][ T6294] delete_channel: no stack [ 306.040222][ T6297] delete_channel: no stack [ 307.323127][ T6304] sctp: failed to load transform for md5: -2 [ 308.624684][ T6349] delete_channel: no stack [ 311.375011][ T6383] delete_channel: no stack [ 312.683452][ T6403] delete_channel: no stack [ 314.833013][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 315.210916][ T6446] usb usb8: usbfs: process 6446 (syz.5.544) did not claim interface 0 before use [ 317.027395][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.034863][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.130557][ T6465] delete_channel: no stack [ 321.277816][ T26] audit: type=1804 audit(1738084074.698:160): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.555" name="/newroot/102/file0/file1" dev="overlay" ino=573 res=1 errno=0 [ 322.588133][ T6517] delete_channel: no stack [ 337.972409][ T6615] netlink: 'syz.3.582': attribute type 21 has an invalid length. [ 337.980269][ T6615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.582'. [ 339.489693][ T6628] xt_NFQUEUE: number of total queues is 0 [ 340.015944][ T4246] Bluetooth: hci0: command 0x0c20 tx timeout [ 340.081927][ T4276] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 340.352070][ T4276] usb 4-1: Using ep0 maxpacket: 8 [ 340.632846][ T4276] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 340.791781][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.851168][ T4276] usb 4-1: Product: syz [ 340.862225][ T6644] delete_channel: no stack [ 340.871530][ T4276] usb 4-1: Manufacturer: syz [ 340.931827][ T4276] usb 4-1: SerialNumber: syz [ 340.960331][ T4276] usb 4-1: config 0 descriptor?? [ 341.012950][ T4276] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 341.113528][ T4276] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 343.598954][ T4244] usb 4-1: USB disconnect, device number 6 [ 345.950189][ T26] audit: type=1326 audit(1738084099.508:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.4.593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf62bfada9 code=0x0 [ 347.396585][ T6695] delete_channel: no stack [ 351.794530][ T6736] mkiss: ax0: crc mode is auto. [ 353.888721][ T6745] device veth0_to_batadv entered promiscuous mode [ 354.427421][ T6745] device veth0_to_batadv left promiscuous mode [ 354.883799][ T6760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.279057][ T6769] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 356.710292][ T6784] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.433398][ T6796] ALSA: seq fatal error: cannot create timer (-22) [ 360.783479][ T26] audit: type=1326 audit(1738084114.108:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 361.540027][ T26] audit: type=1326 audit(1738084114.108:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 362.733221][ T26] audit: type=1326 audit(1738084114.118:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 362.871789][ T26] audit: type=1326 audit(1738084114.118:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 362.945311][ T26] audit: type=1326 audit(1738084114.118:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 363.740513][ T26] audit: type=1326 audit(1738084114.118:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 363.762728][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.991904][ T26] audit: type=1326 audit(1738084114.128:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 364.156696][ T26] audit: type=1326 audit(1738084114.128:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 364.179006][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.342542][ T26] audit: type=1326 audit(1738084114.128:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 364.368510][ T26] audit: type=1326 audit(1738084114.128:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c178cda9 code=0x7ffc0000 [ 366.568864][ T4258] Bluetooth: hci3: command 0x0409 tx timeout [ 366.920378][ T4375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.976739][ T6875] ceph: No mds server is up or the cluster is laggy [ 367.987581][ T2347] libceph: connect (1)[c::]:6789 error -101 [ 367.994652][ T2347] libceph: mon0 (1)[c::]:6789 connect error [ 368.116435][ T4375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.195439][ T6841] chnl_net:caif_netlink_parms(): no params data found [ 368.415922][ T6884] ./file0: Can't open blockdev [ 369.212470][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 370.375149][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 370.375168][ T26] audit: type=1804 audit(1738084123.268:200): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.632" name="/newroot/138/file0/file1" dev="overlay" ino=760 res=1 errno=0 [ 370.428624][ T4375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.203739][ T4375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.334406][ T2347] Bluetooth: hci3: command 0x040f tx timeout [ 371.626756][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.832041][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.046704][ T6841] device bridge_slave_0 entered promiscuous mode [ 372.115956][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.353625][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.379266][ T6841] device bridge_slave_1 entered promiscuous mode [ 373.406634][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 373.559576][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.231818][ T6937] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 375.447944][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.040569][ T6841] team0: Port device team_slave_0 added [ 376.057066][ T6841] team0: Port device team_slave_1 added [ 376.086690][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.093831][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.151528][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.253644][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.271179][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.317173][ T6951] 9pnet: Insufficient options for proto=fd [ 376.580300][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.306277][ T6959] delete_channel: no stack [ 377.323471][ T6953] netlink: 'syz.3.643': attribute type 10 has an invalid length. [ 377.423048][ T6953] bond0: (slave bond_slave_0): Releasing backup interface [ 378.044925][ T6841] device hsr_slave_0 entered promiscuous mode [ 378.061102][ T6841] device hsr_slave_1 entered promiscuous mode [ 378.161132][ T6968] delete_channel: no stack [ 378.261818][ T6841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.269441][ T6841] Cannot create hsr debugfs directory [ 378.518286][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.518331][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.537964][ T26] audit: type=1804 audit(1738084132.078:201): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.646" name="/newroot/25/file0/file1" dev="overlay" ino=163 res=1 errno=0 [ 381.584021][ T6981] xt_NFQUEUE: number of total queues is 0 [ 381.674142][ T6989] Cannot find add_set index 0 as target [ 383.451949][ T4258] Bluetooth: hci5: command 0x0406 tx timeout [ 384.576186][ T7025] delete_channel: no stack [ 385.320953][ T6841] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 385.359269][ T6841] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 385.444980][ T6841] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 385.871431][ T6841] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.575883][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.661'. [ 387.216276][ T7063] Cannot find add_set index 0 as target [ 388.676939][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.854370][ T7086] delete_channel: no stack [ 389.767815][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.904300][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.914506][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 390.141631][ T4375] device hsr_slave_0 left promiscuous mode [ 390.701903][ T4375] device hsr_slave_1 left promiscuous mode [ 390.773615][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.793182][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.842571][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.850155][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.867712][ T4375] device bridge_slave_1 left promiscuous mode [ 390.877548][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.905329][ T4375] device bridge_slave_0 left promiscuous mode [ 390.922765][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.985906][ T4375] device veth1_macvtap left promiscuous mode [ 390.999717][ T4375] device veth0_macvtap left promiscuous mode [ 391.006503][ T4375] device veth1_vlan left promiscuous mode [ 391.024216][ T4375] device veth0_vlan left promiscuous mode [ 391.275228][ T4375] team0 (unregistering): Port device veth3 removed [ 391.484512][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 391.517690][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 391.556776][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.564442][ T7122] ------------[ cut here ]------------ [ 391.571179][ T7122] WARNING: CPU: 1 PID: 7122 at block/genhd.c:586 del_gendisk+0x6fb/0x770 [ 391.626046][ T7122] Modules linked in: [ 391.639032][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.642172][ T7122] CPU: 1 PID: 7122 Comm: syz.3.678 Not tainted 5.15.177-syzkaller #0 [ 391.656543][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 391.667400][ T7122] RIP: 0010:del_gendisk+0x6fb/0x770 [ 391.673658][ T7122] Code: 00 00 4c 89 f6 e8 35 85 fa ff 4c 89 f7 be 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 12 fd ff e8 d5 77 83 fd <0f> 0b 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 e9 80 e1 07 [ 391.694909][ T7122] RSP: 0018:ffffc90002fffdf0 EFLAGS: 00010287 [ 391.702980][ T7122] RAX: ffffffff83fd0dbb RBX: 0000000000000240 RCX: 0000000000080000 [ 391.711569][ T7122] RDX: ffffc9000e0da000 RSI: 0000000000000446 RDI: 0000000000000447 [ 391.722217][ T7122] RBP: 0000000000000000 R08: ffffffff83fd07d8 R09: fffff520005fffb9 [ 391.730775][ T7122] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100c136590 [ 391.741645][ T7122] R13: ffff8880609b2c00 R14: ffff888023d88e40 R15: ffff8880609b2c80 [ 391.756382][ T7122] FS: 00007f060ee6b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 391.830074][ T7122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.838767][ T7122] CR2: 0000000020022000 CR3: 0000000067c2b000 CR4: 00000000003506e0 [ 391.846920][ T7122] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.855606][ T7122] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 391.863751][ T7122] Call Trace: [ 391.867059][ T7122] [ 391.870017][ T7122] ? __warn+0x15b/0x300 [ 391.875087][ T7122] ? del_gendisk+0x6fb/0x770 [ 391.879797][ T7122] ? report_bug+0x1b7/0x2e0 [ 391.884805][ T7122] ? handle_bug+0x3d/0x70 [ 391.889404][ T7122] ? exc_invalid_op+0x16/0x40 [ 391.920179][ T7122] ? asm_exc_invalid_op+0x16/0x20 [ 391.923016][ T4375] bond0 (unregistering): Released all slaves [ 391.935526][ T7122] ? del_gendisk+0x118/0x770 [ 391.940331][ T7122] ? del_gendisk+0x6fb/0x770 [ 391.968063][ T7122] ? del_gendisk+0x6fb/0x770 [ 391.997072][ T7122] loop_control_ioctl+0x552/0x700 [ 392.002978][ T7122] ? xor_init+0x60/0x60 [ 392.007315][ T7122] ? bpf_lsm_file_ioctl+0x5/0x10 [ 392.012678][ T7122] ? security_file_ioctl+0x7d/0xa0 [ 392.018474][ T7122] ? xor_init+0x60/0x60 [ 392.025908][ T7105] tipc: Started in network mode [ 392.025894][ T7122] __se_sys_ioctl+0xf1/0x160 [ 392.025958][ T7122] do_syscall_64+0x3b/0xb0 [ 392.025981][ T7122] ? clear_bhb_loop+0x15/0x70 [ 392.031186][ T7105] tipc: Node identity 7, cluster identity 4711 [ 392.040490][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.045275][ T7105] tipc: Node number set to 7 [ 392.053059][ T7122] RIP: 0033:0x7f0611022da9 [ 392.080123][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.139731][ T7122] RSP: 002b:00007f060ee6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.232758][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.676'. [ 392.261998][ T7122] RAX: ffffffffffffffda RBX: 00007f061123c080 RCX: 00007f0611022da9 [ 392.295333][ T7122] RDX: 0000000007000000 RSI: 0000000000004c81 RDI: 0000000000000008 [ 392.304540][ T7122] RBP: 00007f06110a42a0 R08: 0000000000000000 R09: 0000000000000000 [ 392.312899][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.358220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.368668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.395531][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.399270][ T7122] R13: 0000000000000000 R14: 00007f061123c080 R15: 00007ffe96de72c8 [ 392.402684][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.414559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.429205][ T7122] [ 392.432632][ T7122] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 392.439940][ T7122] CPU: 1 PID: 7122 Comm: syz.3.678 Not tainted 5.15.177-syzkaller #0 [ 392.444774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.448026][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 392.448042][ T7122] Call Trace: [ 392.448049][ T7122] [ 392.448058][ T7122] dump_stack_lvl+0x1e3/0x2d0 [ 392.456743][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.466098][ T7122] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 392.466129][ T7122] ? panic+0x860/0x860 [ 392.469484][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.472371][ T7122] ? del_gendisk+0x640/0x770 [ 392.472398][ T7122] ? del_gendisk+0x640/0x770 [ 392.477775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.484061][ T7122] panic+0x318/0x860 [ 392.484093][ T7122] ? __warn+0x16a/0x300 [ 392.491565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.493797][ T7122] ? fb_is_primary_device+0xd0/0xd0 [ 392.493842][ T7122] ? del_gendisk+0x6fb/0x770 [ 392.493865][ T7122] __warn+0x2b2/0x300 [ 392.493891][ T7122] ? del_gendisk+0x6fb/0x770 [ 392.493910][ T7122] report_bug+0x1b7/0x2e0 [ 392.493940][ T7122] handle_bug+0x3d/0x70 [ 392.493961][ T7122] exc_invalid_op+0x16/0x40 [ 392.493982][ T7122] asm_exc_invalid_op+0x16/0x20 [ 392.494007][ T7122] RIP: 0010:del_gendisk+0x6fb/0x770 [ 392.494031][ T7122] Code: 00 00 4c 89 f6 e8 35 85 fa ff 4c 89 f7 be 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 12 fd ff e8 d5 77 83 fd <0f> 0b 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 e9 80 e1 07 [ 392.494048][ T7122] RSP: 0018:ffffc90002fffdf0 EFLAGS: 00010287 [ 392.494069][ T7122] RAX: ffffffff83fd0dbb RBX: 0000000000000240 RCX: 0000000000080000 [ 392.494085][ T7122] RDX: ffffc9000e0da000 RSI: 0000000000000446 RDI: 0000000000000447 [ 392.494099][ T7122] RBP: 0000000000000000 R08: ffffffff83fd07d8 R09: fffff520005fffb9 [ 392.494115][ T7122] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100c136590 [ 392.494129][ T7122] R13: ffff8880609b2c00 R14: ffff888023d88e40 R15: ffff8880609b2c80 [ 392.494150][ T7122] ? del_gendisk+0x118/0x770 [ 392.494169][ T7122] ? del_gendisk+0x6fb/0x770 [ 392.650335][ T7122] loop_control_ioctl+0x552/0x700 [ 392.655414][ T7122] ? xor_init+0x60/0x60 [ 392.659604][ T7122] ? bpf_lsm_file_ioctl+0x5/0x10 [ 392.664586][ T7122] ? security_file_ioctl+0x7d/0xa0 [ 392.669747][ T7122] ? xor_init+0x60/0x60 [ 392.673935][ T7122] __se_sys_ioctl+0xf1/0x160 [ 392.678560][ T7122] do_syscall_64+0x3b/0xb0 [ 392.683000][ T7122] ? clear_bhb_loop+0x15/0x70 [ 392.687709][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.693643][ T7122] RIP: 0033:0x7f0611022da9 [ 392.698086][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.717720][ T7122] RSP: 002b:00007f060ee6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.726172][ T7122] RAX: ffffffffffffffda RBX: 00007f061123c080 RCX: 00007f0611022da9 [ 392.734175][ T7122] RDX: 0000000007000000 RSI: 0000000000004c81 RDI: 0000000000000008 [ 392.742179][ T7122] RBP: 00007f06110a42a0 R08: 0000000000000000 R09: 0000000000000000 [ 392.750181][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.758183][ T7122] R13: 0000000000000000 R14: 00007f061123c080 R15: 00007ffe96de72c8 [ 392.766200][ T7122] [ 392.769356][ T7122] Kernel Offset: disabled [ 392.773732][ T7122] Rebooting in 86400 seconds..