last executing test programs: 14m54.455734544s ago: executing program 32 (id=193): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000008e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000008f00), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/18}], 0x0, &(0x7f00000019c0)=""/134}, 0x8001}], 0x3fffffffffffe3b, 0x12060, 0x0) 14m44.902596821s ago: executing program 33 (id=215): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1a00040, &(0x7f00000000c0)={[{@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@numtail}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}]}, 0x3, 0x34f, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='c', 0x1}], 0x1}, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x4b46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x10, 0x300000f, 0x401d032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) clock_settime(0x0, &(0x7f0000000500)={0x77359400}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000540)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x5920, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r2, r2, &(0x7f00000009c0)=0x4, 0x8112) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000a00)=0x40009, 0x4) truncate(&(0x7f00000024c0)='./file1\x00', 0x20fdfffffe) 14m1.562113755s ago: executing program 34 (id=265): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000b00)={0x0, 0xffffffffffffff14, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000c40)="89e7ee2c67062f080700000088ca54", 0xf}], 0x1) 13m21.693044843s ago: executing program 35 (id=310): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x400000000000159, 0x40840) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@multicast2, @loopback}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010003bd7000fcdb71c300000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x10) listen(r5, 0x0) 12m29.038113958s ago: executing program 36 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000500)="bad386dd", 0x5dc, 0x40, &(0x7f0000000540)={0x11, 0x8100, r1, 0x1, 0xd9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) 12m2.367169166s ago: executing program 37 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0xb0ffffff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m59.824270966s ago: executing program 38 (id=511): openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000340)={0x0, 'veth0_to_bridge\x00', {}, 0xfffc}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000500), &(0x7f0000000540)=""/95}, 0x20) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_ACT={0x4}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1000401, &(0x7f0000000900), 0x1, 0x4ca, &(0x7f0000000940)="$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") ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000e40)={'sit0\x00', 0x0}) 10m19.526781077s ago: executing program 39 (id=685): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 10m1.786572108s ago: executing program 40 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./trace/events/kvm/kvm_entry/enable\x00', 0x282, 0x0) read$FUSE(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000004c0)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000640)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000680)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 9m57.254821921s ago: executing program 41 (id=803): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f00000002c0)=@generic, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/207}, {&(0x7f0000000480)=""/162}, {&(0x7f0000000540)=""/77}], 0x0, &(0x7f00000005c0)=""/224}, 0x6}, {{&(0x7f00000006c0)=@isdn, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/4096}, {&(0x7f0000001780)=""/64}], 0x0, &(0x7f00000017c0)=""/174}}, {{&(0x7f0000001880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000001900)=[{&(0x7f0000001940)=""/224}, {&(0x7f0000001a40)=""/87}, {&(0x7f0000001ac0)=""/209}], 0x0, &(0x7f0000001bc0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) 9m30.809618962s ago: executing program 42 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x4000087, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000640)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r3, &(0x7f0000000700)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 9m12.706031171s ago: executing program 43 (id=854): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='enable_e', 0x8) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 8m4.911101073s ago: executing program 44 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x0, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x30045084}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f00000005c0)="f9f4b7d2", 0x4}], 0x1}, 0x20004014) 8m4.595741466s ago: executing program 45 (id=815): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001940)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001980)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 6m44.974934906s ago: executing program 8 (id=998): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x318, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/245, 0xf5}, {0x0}], 0x2, 0x162, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mount(0x0, &(0x7f0000000bc0)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) openat(r4, &(0x7f0000000c80)='unbind\x00', 0x400101, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc) socket(0x2, 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) 6m42.871940331s ago: executing program 8 (id=1000): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f3200000000010200000000020200000000"], 0x0) 6m42.551771424s ago: executing program 8 (id=1002): r0 = getuid() syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@resuid={'resuid', 0x3d, r0}}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [{@euid_eq={'euid', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r0}}, {@dont_measure}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'usrjquota='}}, {@flag='posixacl'}, {@subj_role={'subj_role', 0x3d, 'ext3\x00'}}, {@uid_lt={'uid<', r0}}, {@smackfshat={'smackfshat', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}], 0x2e}, 0x21, 0x472, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x1d, &(0x7f0000000a40)={0x0, 0xfffffffd, 0x1}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x103381) close_range(r5, 0xffffffffffffffff, 0x0) 6m39.224881383s ago: executing program 8 (id=1003): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001c00)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000001c40)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000001c80)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend']) lremovexattr(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=@known='user.incfs.metadata\x00') 6m39.053649711s ago: executing program 8 (id=1005): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xa04080, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="92dd9095f38745d15c06a1b24b60a90f61e0e292035c59fd7d58731a95793c4ed38b8146998fbf85ec961d3148e08bd54cd4bd105c1843fd863080704fbab4b36b6518e5e4683044a9dd7bfe1308339adf4f246d81081f664c", @ANYBLOB="e4313c6ffe3711cd8932be9273592b06e18ed777827dc810aa84a171e3c650e4786e1dcd3bb77fc11e2bd92a41cbd4f6c639a2414e8bd4c895cfeac249aeff7739fb349623e238e3e64971d097928c33aeb6b75e23e38c73beacf85c11a96193e08c938b17300d8f263c99cff7aef1407398387c2e5dc510887031062fd42b"], 0x2, 0x5524, &(0x7f0000000580)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000005ac0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000005b00)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005b40)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000005b80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005bc0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r2, 0x0, 0x0) connect$unix(r3, &(0x7f0000005c00)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000005c80), 0x651, 0x0) recvmmsg(r3, &(0x7f0000005cc0), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x440200, 0x0) syz_mount_image$vfat(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x18000, &(0x7f0000005d80)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000005dc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000006100)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x1, 0x8ffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./file1\x00', 0x8441, 0x1ac) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) fallocate(r6, 0x8, 0x4000, 0x8000) 6m34.192855337s ago: executing program 8 (id=1009): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f3200000000010200000000020200000000"], 0x0) 6m18.994031339s ago: executing program 46 (id=1009): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f3200000000010200000000020200000000"], 0x0) 5m32.709242166s ago: executing program 5 (id=1101): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8c6, &(0x7f0000000200)={[{@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@fat=@check_strict}, {@uni_xlateno}, {@fat=@quiet}, {@rodir}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@fat=@dmask={'dmask', 0x3d, 0x80}}, {@shortname_win95}, {@uni_xlate}]}, 0x1, 0x296, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 5m32.035077014s ago: executing program 5 (id=1107): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x318, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/245, 0xf5}, {0x0}], 0x2, 0x162, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) 5m30.845876796s ago: executing program 5 (id=1112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 5m30.752724416s ago: executing program 5 (id=1114): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2b}}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x8000, &(0x7f00000003c0)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000c40)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000a0001000200007f00000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$key(0xf, 0x3, 0x2) 5m29.189145155s ago: executing program 5 (id=1125): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0x36000000}]}}}]}, 0x40}}, 0x24008044) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0xfffffd87) 5m28.972265767s ago: executing program 5 (id=1128): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000240)=ANY=[], 0x1, 0x14fe, &(0x7f0000000280)="$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") sched_setscheduler(r0, 0x2, &(0x7f00000017c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000018c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000001900), 0x80002c1, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x21c0, 0x103) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./dev\x00', 0x1ff) 5m13.876560199s ago: executing program 47 (id=1128): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000240)=ANY=[], 0x1, 0x14fe, &(0x7f0000000280)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") sched_setscheduler(r0, 0x2, &(0x7f00000017c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000018c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000001900), 0x80002c1, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x21c0, 0x103) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./dev\x00', 0x1ff) 3m59.136012651s ago: executing program 1 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5b7b}]}}]}, 0x44}}, 0x4044004) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000bc0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) 3m58.568499779s ago: executing program 1 (id=1590): socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x4008004}, 0x4064050) 3m58.124191894s ago: executing program 1 (id=1595): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) close(0x3) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3m57.020688017s ago: executing program 1 (id=1602): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000007e40)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b8"], &(0x7f0000007e80)=0x3e0) 3m56.660933374s ago: executing program 1 (id=1604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 3m56.20958007s ago: executing program 1 (id=1606): r0 = fsopen(&(0x7f0000001800)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4c, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f00000002c0)="$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") sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x4000087, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000d80)=@newtaction={0x4d0, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x4bc, 0x1, [@m_police={0x4b8, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x23e34, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485a]}]]}, {0x4c, 0x6, "d3b5f56da768218aad68e7532dae1829f310f265d930c33dafdf7c5e10b32b638993451b86dc6e005116e8798f8c9916c96479a96a890d3465365093af0d7a979fa2dc9114a44869"}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x4d0}}, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000d40)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) 3m36.956861936s ago: executing program 48 (id=1606): r0 = fsopen(&(0x7f0000001800)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4c, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f00000002c0)="$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") sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x4000087, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000d80)=@newtaction={0x4d0, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x4bc, 0x1, [@m_police={0x4b8, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x23e34, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485a]}]]}, {0x4c, 0x6, "d3b5f56da768218aad68e7532dae1829f310f265d930c33dafdf7c5e10b32b638993451b86dc6e005116e8798f8c9916c96479a96a890d3465365093af0d7a979fa2dc9114a44869"}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x4d0}}, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000d40)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) 2m27.669564801s ago: executing program 9 (id=2077): unshare(0x28040680) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) 2m26.815911398s ago: executing program 9 (id=2081): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000600)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000f00003c"], 0xfdef) 2m22.224697127s ago: executing program 0 (id=2085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x2, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000b80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000c80), 0x366, 0x10, &(0x7f0000000cc0), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000dc0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r4}, &(0x7f0000000e40), &(0x7f0000000e80)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048044}, 0x4) 2m21.951015275s ago: executing program 9 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000480), &(0x7f0000000500)=r1}, 0x20) 2m21.89592831s ago: executing program 0 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4e, 0x3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x2) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200dc0f14000e0005000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 2m21.79786064s ago: executing program 9 (id=2091): sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2m21.40475467s ago: executing program 9 (id=2094): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000001000000000000000000009500000000000000a402bd74ff99ef964a6b964416b3cf60a2cdec7a68f59546ce24a4747394d6702a43c875213485da0eb3463b46110257dbb54957c9105775680564d32168febb67da22607b97c02f0703ed8ae39c548d40d5cf41b24e734e1f24edf5dad278f897319b487bc68b6898c19926fcc84272273ad0aa07aff529b53c21f16b5694c1450152c95799404dafb0c92a85fd96e8e0e343ea2f83490443ed582bf50c61262f2493"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f00000006c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000ac0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0xfc}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000d80)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) 2m21.282462303s ago: executing program 0 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'syzkaller0\x00'}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000005}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}]}, 0x54}}, 0x8024) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 2m18.903822376s ago: executing program 0 (id=2100): syz_emit_ethernet(0xce, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xc0, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010105, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000005af3"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x1f, 0x63, [@remote, @broadcast, @private=0xa010100, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @cipso={0x86, 0x3d, 0x3, [{0x0, 0x7, "4b3defc500"}, {0x5, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x8]}]}}}}}}}, 0x0) 2m14.484746297s ago: executing program 9 (id=2102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m14.346378801s ago: executing program 0 (id=2103): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000320001ff7f0000000000000001"], 0x14}}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x5, &(0x7f0000001d40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000001d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000024c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000002540)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000021c0), 0xffffffffffffffff) r3 = openat$cgroup(r1, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x1ff) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000a00)}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000340)=""/40, 0x28}], 0x1}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000002340)=[{&(0x7f0000002400)=""/178, 0xb2}, {&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f0000001d00)=""/23, 0x17}, {&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000002100)=""/189, 0xbd}, {&(0x7f0000001c00)=""/244, 0xf4}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000440)}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002200)=""/126, 0x7e}, {&(0x7f0000002280)=""/180, 0xb4}], 0xb, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001f40)=""/11, 0xb}], 0x1}}], 0x5, 0x1, &(0x7f0000000700)={0x0, 0x989680}) 2m13.707824396s ago: executing program 0 (id=2105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4e, 0x3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4894}, 0x2) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200dc0f14000e0005000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 1m59.131333765s ago: executing program 49 (id=2102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m58.0975114s ago: executing program 50 (id=2105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4e, 0x3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4894}, 0x2) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200dc0f14000e0005000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 20.130889444s ago: executing program 3 (id=2638): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) getsockname$packet(r5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 11.697558776s ago: executing program 3 (id=2647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000480)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0), 0x4) sendto$inet(r1, &(0x7f0000000500), 0xffffffffffffff94, 0xb, 0x0, 0x0) 11.148039062s ago: executing program 7 (id=2653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000340)=0x6, 0x4) 11.137702263s ago: executing program 2 (id=2654): r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x2a003) socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 11.018731945s ago: executing program 7 (id=2655): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000001000000000000000000009500000000000000a402bd74ff99ef964a6b964416b3cf60a2cdec7a68f59546ce24a4747394d6702a43c875213485da0eb3463b46110257dbb54957c9105775680564d32168febb67da22607b97c02f0703ed8ae39c548d40d5cf41b24e734e1f24edf5dad278f897319b487bc68b6898c19926fcc84272273ad0aa07aff529b53c21f16b5694c1450152c95799404dafb0c92a85fd96e8e0e343ea2f83490443ed582bf50c61262f2493"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xb, &(0x7f00000006c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000ac0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0xfc}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000d80)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) 10.791014998s ago: executing program 2 (id=2656): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000cc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000dc0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f0000000e40), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 10.715087706s ago: executing program 3 (id=2657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x10000000, 0x8, 0x2}, @empty, @dev={0xac, 0x14, 0x14, 0x30}, 0xffffffff, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000780)=ANY=[], 0xfdef) 10.421970616s ago: executing program 6 (id=2660): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f40)={0x154, r0, 0x527, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x24000814) 9.436531447s ago: executing program 2 (id=2661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x7, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x8009, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0xa, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x0, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001800), 0x56) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000240), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9.435969227s ago: executing program 7 (id=2662): sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000800)={0x0, 0x0}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x2, 0x4004}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffd7c, &(0x7f0000000300)={&(0x7f0000000b00)=@getqdisc={0x38, 0x26, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x10}, {0x0, 0xffff}, {0x0, 0xf}}, [{0x4}, {0x4}, {0xffffffffffffffb6}, {0x4}, {0x4}, {0xa}, {}, {}, {}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000a40)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, 0x0) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'bridge0\x00', &(0x7f0000000680)=@ethtool_rxfh={0x1}}) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xf}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x44}}, 0x0) write(r1, &(0x7f0000000500)="09000300010001", 0x7) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff72}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x8001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060128750000000006000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) 9.353297525s ago: executing program 6 (id=2664): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) getsockname$packet(r5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 9.293438431s ago: executing program 3 (id=2665): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) getsockname$packet(r5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 9.194954741s ago: executing program 7 (id=2666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000380)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f19"], 0x65) 9.036478937s ago: executing program 4 (id=2667): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4c040) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, 0x0, 0x5d) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, r1, 0xd0fb8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.036200285s ago: executing program 2 (id=2668): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x7, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x8009, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0xa, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x0, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001800), 0x56) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000240), 0x56) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 959.333262ms ago: executing program 6 (id=2669): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4c040) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, 0x0, 0x5d) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000200)=ANY=[]) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40080c0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, r1, 0xd0fb8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 949.686643ms ago: executing program 3 (id=2670): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x1, 0x160, [0x200000000340, 0x0, 0x0, 0x200000000370, 0x2000000003a0], 0x0, 0x0, 0x0}, 0x1d8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000007c0)=r3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000780)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r6, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000800)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000040000700000014000180050002000100000008000600"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 897.345728ms ago: executing program 4 (id=2671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 880.32105ms ago: executing program 7 (id=2672): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000001000000000000000000009500000000000000a402bd74ff99ef964a6b964416b3cf60a2cdec7a68f59546ce24a4747394d6702a43c875213485da0eb3463b46110257dbb54957c9105775680564d32168febb67da22607b97c02f0703ed8ae39c548d40d5cf41b24e734e1f24edf5dad278f897319b487bc68b6898c19926fcc84272273ad0aa07aff529b53c21f16b5694c1450152c95799404dafb0c92a85fd96e8e0e343ea2f83490443ed582bf50c61262f2493"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xb, &(0x7f00000006c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000ac0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0xfc}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000d80)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) 664.438342ms ago: executing program 3 (id=2673): unshare(0x22020400) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) close(0x3) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 552.798424ms ago: executing program 4 (id=2674): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f40)={0x154, r0, 0x527, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x24000814) 416.827648ms ago: executing program 6 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 384.881321ms ago: executing program 4 (id=2676): sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000800)={0x0, 0x0}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x2, 0x4004}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffd7c, &(0x7f0000000300)={&(0x7f0000000b00)=@getqdisc={0x38, 0x26, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x10}, {0x0, 0xffff}, {0x0, 0xf}}, [{0x4}, {0x4}, {0xffffffffffffffb6}, {0x4}, {0x4}, {0xa}, {}, {}, {}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000a40)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, 0x0) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'bridge0\x00', &(0x7f0000000680)=@ethtool_rxfh={0x1}}) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xf}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x44}}, 0x0) write(r1, &(0x7f0000000500)="09000300010001", 0x7) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff72}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x8001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060128750000000006000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) 291.085141ms ago: executing program 6 (id=2677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)='\'', 0x1}], 0x1}, 0x80) 290.09555ms ago: executing program 2 (id=2678): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 196.38119ms ago: executing program 4 (id=2679): syz_emit_ethernet(0xce, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xc0, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010105, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000005af3"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x1f, 0x63, [@remote, @broadcast, @private=0xa010100, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @cipso={0x86, 0x3c, 0x3, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x6, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x8]}]}}}}}}}, 0x0) 149.982415ms ago: executing program 7 (id=2680): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x3, 0x39a, &(0x7f0000000340)="$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") open(&(0x7f0000000700)='.\x00', 0x8000, 0x50) openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', &(0x7f0000000780)={0x426241, 0x9, 0x21}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x439}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000ec0)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c7893f6"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000fc0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000001000)=0x40000003, 0x4) 89.933431ms ago: executing program 2 (id=2681): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0xe, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 7.26317ms ago: executing program 6 (id=2682): mkdirat(0xffffffffffffff9c, &(0x7f0000002cc0)='./sys\x00', 0x71) mount(0x0, &(0x7f0000002d00)='./sys\x00', &(0x7f0000002d40)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002d80)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000002000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000010340)='cmdline\x00') read$FUSE(r1, &(0x7f0000010380)={0x2020}, 0x2020) 0s ago: executing program 4 (id=2683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000600)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f"], 0xfdef) kernel console output (not intermixed with test programs): is unknown, defaulting to 1000 [ 728.806999][T11625] loop4: detected capacity change from 0 to 512 [ 737.238013][ T4333] Bluetooth: hci3: command 0x0406 tx timeout [ 740.278643][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.279886][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 740.372335][T11648] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 740.384180][T11660] tipc: Disabling bearer [ 740.523453][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1498'. [ 740.712738][T11693] device syzkaller0 entered promiscuous mode [ 740.719637][T11691] tipc: Enabled bearer , priority 10 [ 740.772798][T11688] tipc: Resetting bearer [ 740.834692][T11695] Bluetooth: MGMT ver 1.22 [ 740.851639][T11688] tipc: Disabling bearer [ 740.862572][T11693] tipc: Started in network mode [ 740.864571][T11693] tipc: Node identity aabfe33dfceb, cluster identity 4711 [ 740.877328][T11693] tipc: Enabled bearer , priority 0 [ 740.912654][T11686] tipc: Resetting bearer [ 740.991238][T11686] tipc: Disabling bearer [ 741.165694][T11721] netlink: 'syz.7.1510': attribute type 1 has an invalid length. [ 741.218835][T11721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.261316][T11723] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1511'. [ 741.294948][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 741.353849][T11721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1510'. [ 741.370099][T11721] device bond2 entered promiscuous mode [ 741.411360][T11721] bond2: (slave dummy0): making interface the new active one [ 741.420193][T11721] device dummy0 entered promiscuous mode [ 741.427225][T11721] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 741.443702][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 741.461700][T11729] netlink: 'syz.7.1510': attribute type 10 has an invalid length. [ 741.465542][T11729] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1510'. [ 741.480526][T11729] bond2: (slave dummy0): Releasing active interface [ 742.942230][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1530'. [ 749.808692][T11781] device syzkaller1 entered promiscuous mode [ 750.025954][T11807] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20001 [ 750.370947][T11826] device syzkaller0 entered promiscuous mode [ 750.533016][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 750.584890][T11843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.635976][T11849] device dummy0 left promiscuous mode [ 750.659753][T11849] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 750.661614][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 750.682846][T11853] fuse: Invalid rootmode [ 750.694464][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 750.704324][T11843] netlink: 'syz.4.1547': attribute type 10 has an invalid length. [ 750.705740][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1547'. [ 750.725240][T11843] device dummy0 entered promiscuous mode [ 750.735732][T11843] bond3: (slave dummy0): Releasing backup interface [ 751.261515][T11885] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 751.303828][T11885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.382346][T11890] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 751.393660][T11894] netlink: 'syz.1.1558': attribute type 10 has an invalid length. [ 751.399654][ T231] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 751.406117][T11894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1558'. [ 751.418551][T11894] device dummy0 entered promiscuous mode [ 751.432462][T11894] bond1: (slave dummy0): Removing an active aggregator [ 751.438533][T11894] bond1: (slave dummy0): Releasing backup interface [ 751.601228][T11904] fuse: Invalid rootmode [ 751.696124][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1562'. [ 751.728165][T11910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.759503][T11910] device dummy0 left promiscuous mode [ 751.780069][T11910] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 751.786528][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 751.793327][T11910] netlink: 'syz.6.1562': attribute type 10 has an invalid length. [ 751.801112][T11910] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1562'. [ 751.810345][T11910] device dummy0 entered promiscuous mode [ 751.820028][T11910] bond1: (slave dummy0): Releasing backup interface [ 752.110489][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'. [ 752.354284][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.369268][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.371734][T11948] fuse: Invalid rootmode [ 752.408014][T11944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 752.492042][T11953] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 752.531817][T11953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 752.569363][T11953] device dummy0 left promiscuous mode [ 752.591675][T11953] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 752.609571][T11953] netlink: 'syz.4.1574': attribute type 10 has an invalid length. [ 752.621108][T11953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1574'. [ 752.632642][T11953] device dummy0 entered promiscuous mode [ 752.637434][ T4967] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 752.649410][T11953] bond4: (slave dummy0): Removing an active aggregator [ 752.658054][T11953] bond4: (slave dummy0): Releasing backup interface [ 752.693624][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1577'. [ 752.725227][T11965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 752.735354][T11966] device syzkaller0 entered promiscuous mode [ 752.752172][T11966] tipc: Started in network mode [ 752.760932][T11966] tipc: Node identity 064c5b7f6772, cluster identity 4711 [ 752.769177][T11966] tipc: Enabled bearer , priority 0 [ 752.775074][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1577'. [ 752.778863][T11965] device dummy0 left promiscuous mode [ 752.793426][T11965] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 752.802152][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 752.810558][T11966] tipc: Resetting bearer [ 752.818586][T11965] netlink: 'syz.6.1577': attribute type 10 has an invalid length. [ 752.823520][T11965] device dummy0 entered promiscuous mode [ 752.833509][T11965] bond2: (slave dummy0): Releasing backup interface [ 752.861182][T11964] tipc: Resetting bearer [ 752.938145][T11964] tipc: Disabling bearer [ 753.103507][T11988] fuse: Bad value for 'rootmode' [ 753.579912][T12009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 753.605799][T12012] device dummy0 left promiscuous mode [ 753.675423][T12012] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 753.703432][T12009] netlink: 'syz.7.1592': attribute type 10 has an invalid length. [ 753.705045][T12009] device dummy0 entered promiscuous mode [ 753.789609][T12009] bond3: (slave dummy0): Releasing backup interface [ 753.813913][T12019] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 753.862898][T12017] device syzkaller0 entered promiscuous mode [ 753.895972][T12017] tipc: Enabled bearer , priority 0 [ 753.975621][T12017] tipc: Resetting bearer [ 754.050455][T12014] tipc: Resetting bearer [ 754.167787][T12014] tipc: Disabling bearer [ 754.259783][T12031] device veth0_to_team left promiscuous mode [ 754.863054][T12051] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20001 [ 755.780957][T12068] loop1: detected capacity change from 0 to 512 [ 756.445690][T12084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 756.812430][T12094] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 756.863922][T12094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 756.921375][T12094] __nla_validate_parse: 5 callbacks suppressed [ 756.921390][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1608'. [ 756.960927][T12094] device bond5 entered promiscuous mode [ 756.981389][T12098] netlink: 'syz.4.1608': attribute type 10 has an invalid length. [ 756.995512][T12098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1608'. [ 757.641230][T12041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.715899][ T9474] Bluetooth: hci2: command 0x0406 tx timeout [ 758.121016][T12123] netem: change failed [ 758.152809][T12132] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 758.487044][T12138] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 758.512861][T12138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 758.631993][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1621'. [ 758.656024][T12138] device bond6 entered promiscuous mode [ 758.678300][T12138] device dummy0 left promiscuous mode [ 758.713609][T12138] bond6: (slave dummy0): making interface the new active one [ 758.750343][T12138] device dummy0 entered promiscuous mode [ 758.757165][T12138] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 758.759186][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 758.784070][T12143] netlink: 'syz.4.1621': attribute type 10 has an invalid length. [ 758.811981][T12143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1621'. [ 758.889463][T12143] bond6: (slave dummy0): Releasing active interface [ 759.218373][T12162] tipc: Started in network mode [ 759.219474][T12162] tipc: Node identity 862c23521421, cluster identity 4711 [ 759.220993][T12162] tipc: Enabled bearer , priority 10 [ 759.287422][T12161] tipc: Disabling bearer [ 759.678070][T12178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 759.856798][T12180] device syzkaller0 entered promiscuous mode [ 759.905822][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1634'. [ 760.566716][T12196] netlink: 'syz.6.1639': attribute type 1 has an invalid length. [ 760.623338][T12196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.678858][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1639'. [ 760.685601][T12201] device bond3 entered promiscuous mode [ 760.728623][T12196] device dummy0 left promiscuous mode [ 760.732062][T12196] bond3: (slave dummy0): making interface the new active one [ 760.733549][T12196] device dummy0 entered promiscuous mode [ 760.771141][T12196] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 760.851848][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 760.854382][T12196] netlink: 'syz.6.1639': attribute type 10 has an invalid length. [ 760.859981][T12196] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1639'. [ 760.871370][T12196] bond3: (slave dummy0): Releasing active interface [ 760.932425][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1641'. [ 761.059126][T12208] 8021q: adding VLAN 0 to HW filter on device bond7 [ 761.115650][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1641'. [ 761.117579][T12211] device dummy0 left promiscuous mode [ 761.121085][T12211] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 761.123404][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 761.174498][T12212] netlink: 'syz.4.1641': attribute type 10 has an invalid length. [ 761.184459][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1641'. [ 761.194279][T12212] device dummy0 entered promiscuous mode [ 761.228820][T12212] bond7: (slave dummy0): Releasing backup interface [ 762.052402][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1652'. [ 762.267153][T12263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 762.296676][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1656'. [ 762.430127][T12261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 762.474516][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1656'. [ 762.501981][T12273] device dummy0 left promiscuous mode [ 762.625772][T12273] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 762.643091][T12267] netlink: 'syz.6.1656': attribute type 10 has an invalid length. [ 762.658833][T12267] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1656'. [ 762.673512][T12267] device dummy0 entered promiscuous mode [ 762.727628][T12267] bond4: (slave dummy0): Releasing backup interface [ 763.545644][T12302] netlink: 'syz.7.1667': attribute type 1 has an invalid length. [ 763.622642][T12302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.649945][T12304] device dummy0 left promiscuous mode [ 763.693592][T12304] bond4: (slave dummy0): making interface the new active one [ 763.749585][T12304] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 763.763638][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 763.775253][T12310] netlink: 'syz.7.1667': attribute type 10 has an invalid length. [ 763.776887][T12310] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1667'. [ 763.827464][T12310] device dummy0 entered promiscuous mode [ 763.871826][T12310] bond4: (slave dummy0): Releasing active interface [ 763.922906][T12319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 765.525998][T12356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'. [ 765.681688][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1683'. [ 765.750037][T12363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 765.752216][T12366] netlink: 'syz.0.1684': attribute type 1 has an invalid length. [ 765.819181][T12366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 765.821631][T12368] device dummy0 left promiscuous mode [ 765.826191][T12368] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 765.847325][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 765.911482][T12371] bond1: (slave dummy0): making interface the new active one [ 765.913614][T12371] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 765.967576][T12363] netlink: 'syz.7.1683': attribute type 10 has an invalid length. [ 765.969371][T12363] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1683'. [ 765.971492][T12363] device dummy0 entered promiscuous mode [ 765.995618][T12363] bond5: (slave dummy0): Releasing backup interface [ 766.057645][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 766.062391][T12366] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 766.064000][T12366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1684'. [ 766.084507][T12366] device dummy0 entered promiscuous mode [ 766.110724][T12366] bond1: (slave dummy0): Releasing active interface [ 766.746205][T12396] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1694'. [ 767.242726][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1699'. [ 767.342675][T12411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 767.430187][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1700'. [ 767.432516][T12415] device dummy0 left promiscuous mode [ 767.438893][T12415] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 767.475456][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 767.511777][T12411] netlink: 'syz.6.1699': attribute type 10 has an invalid length. [ 767.513517][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1699'. [ 767.526966][T12411] device dummy0 entered promiscuous mode [ 767.548862][T12411] bond5: (slave dummy0): Releasing backup interface [ 767.826111][T12430] device syzkaller0 entered promiscuous mode [ 767.856816][T12435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1706'. [ 768.197048][T12441] device syzkaller0 entered promiscuous mode [ 768.238739][T12441] tipc: Enabled bearer , priority 0 [ 768.302927][T12441] tipc: Resetting bearer [ 768.345288][T12440] tipc: Resetting bearer [ 768.506463][T12440] tipc: Disabling bearer [ 768.908630][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1714'. [ 769.183022][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1716'. [ 769.311469][T12470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 769.325758][T12473] device dummy0 left promiscuous mode [ 769.387004][T12473] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 769.399577][T12475] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1717'. [ 769.404139][T12476] netlink: 'syz.6.1716': attribute type 10 has an invalid length. [ 769.442408][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1716'. [ 769.460782][T12476] device dummy0 entered promiscuous mode [ 769.500921][T12476] bond6: (slave dummy0): Releasing backup interface [ 769.755591][T12480] device syzkaller0 entered promiscuous mode [ 770.197862][T12496] loop6: detected capacity change from 0 to 256 [ 770.297644][T12496] FAT-fs (loop6): Directory bread(block 64) failed [ 770.317675][T12496] FAT-fs (loop6): Directory bread(block 65) failed [ 770.319292][T12496] FAT-fs (loop6): Directory bread(block 66) failed [ 770.320673][T12496] FAT-fs (loop6): Directory bread(block 67) failed [ 770.322175][T12496] FAT-fs (loop6): Directory bread(block 68) failed [ 770.323584][T12496] FAT-fs (loop6): Directory bread(block 69) failed [ 770.393902][T12496] FAT-fs (loop6): Directory bread(block 70) failed [ 770.399289][T12496] FAT-fs (loop6): Directory bread(block 71) failed [ 770.400777][T12496] FAT-fs (loop6): Directory bread(block 72) failed [ 770.402099][T12496] FAT-fs (loop6): Directory bread(block 73) failed [ 770.434954][T12502] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1726'. [ 775.026378][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1728'. [ 775.124857][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1730'. [ 775.219631][T12515] 8021q: adding VLAN 0 to HW filter on device bond8 [ 775.305493][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1730'. [ 775.307494][T12515] device bond8 entered promiscuous mode [ 775.445568][T12525] device syzkaller0 entered promiscuous mode [ 775.471183][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 775.477557][T12525] tipc: Started in network mode [ 775.478666][T12525] tipc: Node identity 6efb765e29af, cluster identity 4711 [ 775.480932][T12525] tipc: Enabled bearer , priority 0 [ 775.482762][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 775.486434][ T4341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 775.491972][ T4341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 775.504349][ T4341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 775.510275][ T4341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 775.584073][T12522] tipc: Resetting bearer [ 775.685345][T12522] tipc: Disabling bearer [ 776.003929][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1738'. [ 776.301643][T12526] rxe_eth0 speed is unknown, defaulting to 1000 [ 776.360230][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'. [ 776.654222][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1744'. [ 776.722373][T12559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 776.805179][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1744'. [ 776.997221][T12570] device syzkaller0 entered promiscuous mode [ 777.056351][T12570] tipc: Enabled bearer , priority 0 [ 777.137777][T12568] tipc: Resetting bearer [ 777.226461][T12568] tipc: Disabling bearer [ 777.288529][T12580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'. [ 777.553696][ T9474] Bluetooth: hci4: command 0x0409 tx timeout [ 777.626981][T12526] chnl_net:caif_netlink_parms(): no params data found [ 777.644691][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 777.974339][T12526] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.980990][T12526] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.003571][T12526] device bridge_slave_0 entered promiscuous mode [ 778.023301][T12526] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.035182][T12526] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.070801][T12526] device bridge_slave_1 entered promiscuous mode [ 778.127879][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 778.227627][T12612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 778.251148][T12614] device bond2 entered promiscuous mode [ 778.272182][T12526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.309849][T12526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.461488][T12526] team0: Port device team_slave_0 added [ 778.500803][T12526] team0: Port device team_slave_1 added [ 778.624087][T12526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.638761][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.670772][T12526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.705597][T12623] device syzkaller0 entered promiscuous mode [ 778.716280][T12526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.727228][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.784173][T12526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.803099][T12623] tipc: Enabled bearer , priority 0 [ 778.807405][T12621] tipc: Resetting bearer [ 778.904946][T12621] tipc: Disabling bearer [ 779.037186][T12526] device hsr_slave_0 entered promiscuous mode [ 779.074374][T12526] device hsr_slave_1 entered promiscuous mode [ 779.103660][T12526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.105269][T12526] Cannot create hsr debugfs directory [ 779.287502][T12642] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 779.366888][T12642] bond8: (slave lo): Enslaving as an active interface with an up link [ 779.394198][T12642] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 779.638675][ T9474] Bluetooth: hci4: command 0x041b tx timeout [ 780.294129][T12659] __nla_validate_parse: 2 callbacks suppressed [ 780.294157][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1770'. [ 780.322790][T12662] device dummy0 left promiscuous mode [ 780.327946][T12666] netlink: 'syz.6.1770': attribute type 10 has an invalid length. [ 780.329618][T12666] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1770'. [ 780.331638][T12666] device dummy0 entered promiscuous mode [ 780.705534][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1773'. [ 780.767690][T12674] device syzkaller0 entered promiscuous mode [ 781.104322][T12674] tipc: Enabled bearer , priority 0 [ 781.137014][T12672] tipc: Resetting bearer [ 781.205371][T12672] tipc: Disabling bearer [ 781.713166][ T9474] Bluetooth: hci4: command 0x040f tx timeout [ 782.194159][T12526] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 782.235192][T12526] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 782.275807][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1786'. [ 782.280849][T12526] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 782.334362][T12526] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 782.830979][T12731] device gretap1 entered promiscuous mode [ 782.832522][T12731] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 783.045436][T12526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.133466][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.135824][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.172535][T12526] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.230134][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 783.244491][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 783.257940][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.259425][ T4967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.324525][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 783.326885][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 783.344668][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 783.365738][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.367261][ T4967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.382615][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 783.432500][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 783.449724][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 783.521869][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 783.562271][T12526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 783.595576][T12526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.619577][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 783.621721][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 783.645784][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 783.670559][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 783.690518][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.715658][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 783.734451][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.793305][ T9474] Bluetooth: hci4: command 0x0419 tx timeout [ 783.820075][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 783.822569][T12737] device syzkaller0 entered promiscuous mode [ 784.355979][T12763] device syzkaller0 entered promiscuous mode [ 788.432392][ T4341] Bluetooth: hci5: command 0x0406 tx timeout [ 793.118251][T12526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.121201][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 793.128919][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 793.523994][T12800] device syzkaller0 entered promiscuous mode [ 793.528788][T12800] tipc: Enabled bearer , priority 0 [ 793.600246][T12800] tipc: Resetting bearer [ 793.663885][T12796] tipc: Resetting bearer [ 793.796595][T12796] tipc: Disabling bearer [ 793.945372][T12802] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 794.014197][T12821] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 794.128812][T12820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.190277][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 794.231261][T12827] 8021q: adding VLAN 0 to HW filter on device bond9 [ 794.257710][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 794.259980][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 794.317315][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 794.323363][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 794.347444][T12526] device veth0_vlan entered promiscuous mode [ 794.366073][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 794.368320][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 794.403322][T12526] device veth1_vlan entered promiscuous mode [ 794.534871][T12839] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 794.581456][T12839] device bond3 entered promiscuous mode [ 794.632483][T12839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 794.694406][T12526] device veth0_macvtap entered promiscuous mode [ 794.697704][T12526] device veth1_macvtap entered promiscuous mode [ 794.746995][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 794.750034][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 794.781005][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 794.816688][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 794.839090][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 794.847357][T12847] loop4: detected capacity change from 0 to 256 [ 794.872007][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1811'. [ 794.934492][T12845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 794.948793][T12847] FAT-fs (loop4): Directory bread(block 64) failed [ 794.950281][T12847] FAT-fs (loop4): Directory bread(block 65) failed [ 794.977172][T12847] FAT-fs (loop4): Directory bread(block 66) failed [ 794.978677][T12847] FAT-fs (loop4): Directory bread(block 67) failed [ 794.980165][T12847] FAT-fs (loop4): Directory bread(block 68) failed [ 794.993154][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1811'. [ 794.995137][T12839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1809'. [ 794.998051][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 795.006364][T12526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.019252][T12526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.022784][T12847] FAT-fs (loop4): Directory bread(block 69) failed [ 795.024347][T12847] FAT-fs (loop4): Directory bread(block 70) failed [ 795.025805][T12847] FAT-fs (loop4): Directory bread(block 71) failed [ 795.027268][T12847] FAT-fs (loop4): Directory bread(block 72) failed [ 795.028613][T12847] FAT-fs (loop4): Directory bread(block 73) failed [ 795.043013][T12526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.045270][T12526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.047360][T12526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.049396][T12526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.118566][T12526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.137301][T12852] device dummy0 left promiscuous mode [ 795.213095][T12839] bond3: (slave bridge1): making interface the new active one [ 795.225643][T12839] device bridge1 entered promiscuous mode [ 795.249656][T12839] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 796.252967][T12855] netlink: 'syz.7.1811': attribute type 10 has an invalid length. [ 796.254952][T12855] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1811'. [ 796.264423][T12855] device dummy0 entered promiscuous mode [ 796.292926][T10393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 796.296626][T10393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 796.329720][T10393] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 796.372136][T12526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.374299][T12526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.376257][T12526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.378317][T12526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.380283][T12526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.443898][T12526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.493026][T12526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.495651][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 796.498315][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 796.557082][T12526] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.559057][T12526] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.560930][T12526] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.606836][T12526] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.080195][ T4488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.082414][ T4488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.084217][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 797.260532][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.263454][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.265257][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 798.016504][T12912] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 798.018190][T12912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1829'. [ 798.040312][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1829'. [ 798.120141][T12917] device dummy0 left promiscuous mode [ 798.183961][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 798.549212][T12934] device syzkaller0 entered promiscuous mode [ 798.594514][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 798.598087][T12934] tipc: Enabled bearer , priority 0 [ 798.664040][T12934] tipc: Resetting bearer [ 798.686606][T12933] tipc: Resetting bearer [ 798.802045][T12933] tipc: Disabling bearer [ 798.814764][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1840'. [ 798.962662][T12951] 8021q: adding VLAN 0 to HW filter on device bond10 [ 798.994406][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1840'. [ 799.013437][T12955] device dummy0 left promiscuous mode [ 799.042803][T12957] netlink: 'syz.6.1841': attribute type 1 has an invalid length. [ 799.143169][T12957] device bond9 entered promiscuous mode [ 799.170592][T12957] 8021q: adding VLAN 0 to HW filter on device bond9 [ 799.200745][T12951] netlink: 'syz.4.1840': attribute type 10 has an invalid length. [ 799.207444][T12951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1840'. [ 799.224527][T12951] device dummy0 entered promiscuous mode [ 799.398564][T12969] bond9: (slave bridge1): making interface the new active one [ 799.427366][T12969] device bridge1 entered promiscuous mode [ 799.464753][T12969] bond9: (slave bridge1): Enslaving as an active interface with an up link [ 799.506892][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 799.810467][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1844'. [ 799.842480][T12979] device dummy0 left promiscuous mode [ 799.892974][T12979] netlink: 'syz.4.1844': attribute type 10 has an invalid length. [ 799.894771][T12979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1844'. [ 799.939560][T12979] device dummy0 entered promiscuous mode [ 800.139884][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1850'. [ 800.470846][T13004] device syzkaller1 entered promiscuous mode [ 800.498887][T13005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.863988][T13026] tipc: Enabling of bearer rejected, failed to enable media [ 801.007451][T13025] device syzkaller0 entered promiscuous mode [ 801.093224][T13025] tipc: Enabled bearer , priority 0 [ 801.128776][T13023] tipc: Resetting bearer [ 801.292734][T13023] tipc: Disabling bearer [ 801.465972][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1864'. [ 801.577963][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1868'. [ 801.582357][T13042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 801.618380][T13046] device dummy0 left promiscuous mode [ 801.712804][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.714139][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.735368][T13046] netlink: 'syz.7.1868': attribute type 10 has an invalid length. [ 801.737241][T13046] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1868'. [ 801.739682][T13046] device dummy0 entered promiscuous mode [ 801.845803][T13057] device bond0 entered promiscuous mode [ 801.883339][T13057] device bond_slave_0 entered promiscuous mode [ 801.884867][T13057] device bond_slave_1 entered promiscuous mode [ 802.046482][T13057] device batadv0 entered promiscuous mode [ 802.142061][T13057] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 802.191985][T13057] Cannot create hsr debugfs directory [ 802.256980][T13057] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 802.372285][T13057] device bond0 left promiscuous mode [ 802.423577][T13057] device bond_slave_0 left promiscuous mode [ 802.484704][T13057] device bond_slave_1 left promiscuous mode [ 802.682079][T13057] device batadv0 left promiscuous mode [ 802.806888][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1877'. [ 802.909017][T13059] device syzkaller1 entered promiscuous mode [ 802.929675][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1879'. [ 803.416157][T13105] tap0: tun_chr_ioctl cmd 2148553947 [ 803.509878][T13109] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 803.861418][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1889'. [ 803.970386][T13128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 804.102176][T13133] device syzkaller0 entered promiscuous mode [ 804.218387][T13133] tipc: Enabled bearer , priority 0 [ 804.240200][T13137] tipc: Resetting bearer [ 804.286315][T13132] tipc: Resetting bearer [ 804.392134][T13132] tipc: Disabling bearer [ 804.728421][T13157] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 804.982015][T13166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1903'. [ 805.106560][T13176] ip_tables: iptables: counters copy to user failed while replacing table [ 805.165482][T13175] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1907'. [ 805.182278][T13175] device batadv_slave_0 entered promiscuous mode [ 805.276391][T13183] netlink: 'syz.9.1907': attribute type 10 has an invalid length. [ 805.297132][T13183] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1907'. [ 805.317735][T13183] device dummy0 entered promiscuous mode [ 805.365972][T13182] device syzkaller1 entered promiscuous mode [ 805.399054][T13184] tipc: Enabled bearer , priority 0 [ 805.564321][T13181] tipc: Disabling bearer [ 806.309248][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1918'. [ 806.404636][T13212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.519246][T13218] device syzkaller0 entered promiscuous mode [ 806.615611][T13221] netlink: 'syz.9.1923': attribute type 1 has an invalid length. [ 806.618003][T13218] tipc: Enabled bearer , priority 0 [ 806.625461][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1923'. [ 806.627298][T13227] device veth0_virt_wifi entered promiscuous mode [ 806.661639][T13222] tipc: Enabled bearer , priority 0 [ 806.698049][T13215] tipc: Resetting bearer [ 806.852945][T13215] tipc: Disabling bearer [ 806.931389][T13239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 806.981755][T13219] tipc: Disabling bearer [ 807.311417][T13245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1928'. [ 807.586870][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1933'. [ 807.619043][T13258] tipc: Enabled bearer , priority 10 [ 807.789820][T13255] tipc: Disabling bearer [ 807.935459][T13268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.036551][T13271] device syzkaller0 entered promiscuous mode [ 808.128915][T13283] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1941'. [ 808.174651][T13271] tipc: Enabled bearer , priority 0 [ 808.205801][T13269] tipc: Resetting bearer [ 808.382961][T13269] tipc: Disabling bearer [ 808.395392][T13288] tipc: Enabled bearer , priority 0 [ 808.485630][T13294] netlink: 'syz.9.1943': attribute type 1 has an invalid length. [ 808.563897][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1943'. [ 808.604336][T13294] device ipvlan1 entered promiscuous mode [ 808.741152][T13270] tipc: Disabling bearer [ 808.910228][ T4341] Bluetooth: hci1: command 0x0406 tx timeout [ 809.201751][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 809.416203][T13317] tipc: Started in network mode [ 809.433895][T13317] tipc: Node identity f63c5693817d, cluster identity 4711 [ 809.452408][T13317] tipc: Enabled bearer , priority 10 [ 809.568192][T13316] tipc: Disabling bearer [ 809.940725][T13332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.996847][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1956'. [ 811.155353][T13342] rxe_eth0 speed is unknown, defaulting to 1000 [ 811.299357][T13337] tipc: Enabled bearer , priority 0 [ 811.491413][T13335] tipc: Disabling bearer [ 811.579323][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1961'. [ 812.042796][T13370] tipc: Enabled bearer , priority 10 [ 812.199312][T13368] tipc: Disabling bearer [ 813.686086][T13392] loop6: detected capacity change from 0 to 256 [ 813.714251][T13392] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 813.736844][T13392] rxe_eth0 speed is unknown, defaulting to 1000 [ 814.105750][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 814.262680][T13400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.301775][T13403] tipc: Enabled bearer , priority 0 [ 814.321303][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1975'. [ 814.451701][T13399] tipc: Disabling bearer [ 816.364384][T13445] loop7: detected capacity change from 0 to 256 [ 816.374787][T13382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.391992][T13445] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 816.592729][T13445] rxe_eth0 speed is unknown, defaulting to 1000 [ 817.077657][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1986'. [ 817.196135][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'. [ 817.580051][T13475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.599868][T13478] tipc: Enabling of bearer rejected, failed to enable media [ 818.899543][T13487] loop9: detected capacity change from 0 to 256 [ 818.923758][T13487] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 819.001802][T13487] rxe_eth0 speed is unknown, defaulting to 1000 [ 819.470422][T13505] netlink: 'syz.4.1999': attribute type 21 has an invalid length. [ 819.508466][T13505] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1999'. [ 820.198630][T13517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'. [ 820.208685][T13516] fuse: Unknown parameter '0x0000000000000003' [ 820.417500][T13525] device syzkaller0 entered promiscuous mode [ 821.764947][T13538] loop9: detected capacity change from 0 to 256 [ 821.811082][T13538] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 821.913581][T13538] rxe_eth0 speed is unknown, defaulting to 1000 [ 822.145443][T13546] device syzkaller0 entered promiscuous mode [ 822.153252][T13544] tipc: Enabled bearer , priority 0 [ 822.196495][T13543] tipc: Resetting bearer [ 822.280343][T13556] netlink: 'syz.9.2010': attribute type 21 has an invalid length. [ 822.282055][T13556] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2010'. [ 822.331228][T13543] tipc: Disabling bearer [ 822.404299][T13557] device syzkaller1 entered promiscuous mode [ 822.632245][T13567] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2016'. [ 822.638039][T13568] fuse: Unknown parameter 'fd0x0000000000000003' [ 824.154627][T13582] rxe_eth0 speed is unknown, defaulting to 1000 [ 824.285619][T13580] device syzkaller0 entered promiscuous mode [ 824.359253][T13594] netlink: 'syz.0.2025': attribute type 21 has an invalid length. [ 824.376094][T13594] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2025'. [ 824.978120][T13619] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2031'. [ 824.983627][T13601] device syzkaller0 entered promiscuous mode [ 825.079476][T13601] tipc: Enabled bearer , priority 0 [ 825.277722][T13631] fuse: Unknown parameter 'fd0x0000000000000003' [ 825.347686][T13600] tipc: Resetting bearer [ 825.521099][T13600] tipc: Disabling bearer [ 826.634192][T13639] loop6: detected capacity change from 0 to 256 [ 826.690140][T13639] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 826.703154][T13639] rxe_eth0 speed is unknown, defaulting to 1000 [ 826.883762][T13646] netlink: 'syz.7.2038': attribute type 21 has an invalid length. [ 826.885431][T13646] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2038'. [ 831.545879][T13657] device syzkaller0 entered promiscuous mode [ 831.630225][T13664] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2044'. [ 832.020357][T13675] fuse: Unknown parameter 'fd0x0000000000000003' [ 832.417254][T13687] rxe_eth0 speed is unknown, defaulting to 1000 [ 832.481039][T13685] loop6: detected capacity change from 0 to 256 [ 832.686352][T13685] FAT-fs (loop6): Directory bread(block 64) failed [ 832.710640][T13685] FAT-fs (loop6): Directory bread(block 65) failed [ 832.713844][T13685] FAT-fs (loop6): Directory bread(block 66) failed [ 832.796347][T13685] FAT-fs (loop6): Directory bread(block 67) failed [ 832.831836][T13685] FAT-fs (loop6): Directory bread(block 68) failed [ 832.870392][T13685] FAT-fs (loop6): Directory bread(block 69) failed [ 832.898371][T13685] FAT-fs (loop6): Directory bread(block 70) failed [ 832.929016][T13685] FAT-fs (loop6): Directory bread(block 71) failed [ 832.958205][T13693] tipc: Enabling of bearer rejected, failed to enable media [ 832.994563][T13685] FAT-fs (loop6): Directory bread(block 72) failed [ 833.003878][T13685] FAT-fs (loop6): Directory bread(block 73) failed [ 837.690549][T13709] netlink: 'syz.7.2054': attribute type 21 has an invalid length. [ 837.692326][T13709] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2054'. [ 837.877865][T13718] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2057'. [ 838.074018][T13720] device syzkaller0 entered promiscuous mode [ 838.899298][T13745] loop4: detected capacity change from 0 to 256 [ 838.962393][T13745] FAT-fs (loop4): Directory bread(block 64) failed [ 838.963865][T13745] FAT-fs (loop4): Directory bread(block 65) failed [ 838.965292][T13745] FAT-fs (loop4): Directory bread(block 66) failed [ 839.002966][T13745] FAT-fs (loop4): Directory bread(block 67) failed [ 839.073444][T13745] FAT-fs (loop4): Directory bread(block 68) failed [ 839.074949][T13745] FAT-fs (loop4): Directory bread(block 69) failed [ 839.076252][T13745] FAT-fs (loop4): Directory bread(block 70) failed [ 839.121551][T13745] FAT-fs (loop4): Directory bread(block 71) failed [ 839.123052][T13745] FAT-fs (loop4): Directory bread(block 72) failed [ 839.124414][T13745] FAT-fs (loop4): Directory bread(block 73) failed [ 839.187303][T13751] netlink: 'syz.6.2068': attribute type 21 has an invalid length. [ 839.189100][T13751] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2068'. [ 839.219939][T13752] tipc: Enabled bearer , priority 0 [ 839.310331][T13746] tipc: Disabling bearer [ 844.166784][T13771] device syzkaller0 entered promiscuous mode [ 845.107530][T13790] netlink: 'syz.6.2080': attribute type 21 has an invalid length. [ 845.118736][T13790] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2080'. [ 849.872389][T13810] tipc: Enabled bearer , priority 0 [ 849.967353][T13809] tipc: Disabling bearer [ 850.218327][T13823] device syzkaller0 entered promiscuous mode [ 851.708192][T13842] loop6: detected capacity change from 0 to 256 [ 851.734452][T13842] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 851.746449][T13842] rxe_eth0 speed is unknown, defaulting to 1000 [ 852.160610][T13847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.178261][T13855] loop4: detected capacity change from 0 to 256 [ 852.420368][T13855] FAT-fs (loop4): Directory bread(block 64) failed [ 852.445605][T13855] FAT-fs (loop4): Directory bread(block 65) failed [ 852.463722][T13855] FAT-fs (loop4): Directory bread(block 66) failed [ 852.489403][T13855] FAT-fs (loop4): Directory bread(block 67) failed [ 852.510898][T13855] FAT-fs (loop4): Directory bread(block 68) failed [ 852.533184][T13855] FAT-fs (loop4): Directory bread(block 69) failed [ 852.561003][T13855] FAT-fs (loop4): Directory bread(block 70) failed [ 852.592561][T13855] FAT-fs (loop4): Directory bread(block 71) failed [ 852.626801][T13855] FAT-fs (loop4): Directory bread(block 72) failed [ 852.658881][T13855] FAT-fs (loop4): Directory bread(block 73) failed [ 863.146037][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.147519][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.236250][T13899] tipc: Enabled bearer , priority 0 [ 866.301380][T13915] device syzkaller0 entered promiscuous mode [ 872.832774][ T9474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 872.836084][ T9474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 872.838196][ T9474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.840772][ T9474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.842655][ T9474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 872.845863][ T9474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 873.889465][ T4341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 873.898480][ T4341] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 873.901000][ T4341] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 873.906364][ T4341] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 873.908236][ T4341] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 873.909910][ T4341] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 874.793763][T13879] tipc: Disabling bearer [ 874.816332][ T4418] tipc: Node number set to 2000770707 [ 874.859202][T13955] rxe_eth0 speed is unknown, defaulting to 1000 [ 874.903420][ T9474] Bluetooth: hci0: command 0x0409 tx timeout [ 875.327611][T13961] rxe_eth0 speed is unknown, defaulting to 1000 [ 875.943839][ T9474] Bluetooth: hci6: command 0x0409 tx timeout [ 876.982922][ T9474] Bluetooth: hci0: command 0x041b tx timeout [ 878.023298][ T9474] Bluetooth: hci6: command 0x041b tx timeout [ 879.062999][ T9474] Bluetooth: hci0: command 0x040f tx timeout [ 880.103049][ T9474] Bluetooth: hci6: command 0x040f tx timeout [ 881.142748][ T9474] Bluetooth: hci0: command 0x0419 tx timeout [ 882.182855][ T9474] Bluetooth: hci6: command 0x0419 tx timeout [ 884.307775][ T231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.310031][ T231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.470771][ T231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.499387][ T231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.623692][ T231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.632013][ T231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.825159][ T231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.855910][ T231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.228666][T13955] chnl_net:caif_netlink_parms(): no params data found [ 885.570348][T13961] chnl_net:caif_netlink_parms(): no params data found [ 885.681273][ T231] tipc: Left network mode [ 886.238290][T13955] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.240445][T13955] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.268775][T13955] device bridge_slave_0 entered promiscuous mode [ 886.510208][T13955] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.512428][T13955] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.518941][T13955] device bridge_slave_1 entered promiscuous mode [ 886.867007][T13961] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.872528][T13961] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.874751][T13961] device bridge_slave_0 entered promiscuous mode [ 886.899417][T13955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.102793][T13955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.109526][T13961] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.121826][T13961] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.146862][T13961] device bridge_slave_1 entered promiscuous mode [ 887.166631][T14095] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2140'. [ 887.173310][T14103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2140'. [ 887.198139][T14105] device dummy0 left promiscuous mode [ 887.323213][T14107] netlink: 'syz.7.2140': attribute type 10 has an invalid length. [ 887.325207][T14107] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2140'. [ 887.329369][T14107] device dummy0 entered promiscuous mode [ 887.616468][T13955] team0: Port device team_slave_0 added [ 887.794871][T13961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.820746][T13961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.865698][T13955] team0: Port device team_slave_1 added [ 888.354626][T13961] team0: Port device team_slave_0 added [ 888.379395][T13955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.393921][T13955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.449591][T13955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.494246][T14124] tipc: Enabled bearer , priority 10 [ 888.509613][T13961] team0: Port device team_slave_1 added [ 888.582384][T13955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.599632][T13955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.655236][T13955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.081788][T14123] tipc: Resetting bearer [ 889.184119][T14123] tipc: Disabling bearer [ 889.287798][T13961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.289406][T13961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.375315][T13961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.430784][T14156] tipc: Enabled bearer , priority 0 [ 889.481010][T14165] tipc: Resetting bearer [ 889.568001][T13961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.583936][T13961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.645200][T13961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.648405][T14154] device syzkaller0 entered promiscuous mode [ 889.650069][T14154] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 889.662621][T14140] tipc: Resetting bearer [ 889.742343][T14140] tipc: Disabling bearer [ 889.752989][ T231] device hsr_slave_0 left promiscuous mode [ 889.789890][ T231] device hsr_slave_1 left promiscuous mode [ 889.841392][ T231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.843107][ T231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.845187][ T231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.846747][ T231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.871932][ T231] device batadv1 left promiscuous mode [ 889.873232][ T231] bridge0: port 3(batadv1) entered disabled state [ 889.902446][ T231] device bridge_slave_1 left promiscuous mode [ 889.903937][ T231] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.950472][ T231] device bridge_slave_0 left promiscuous mode [ 889.952084][ T231] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.061772][ T231] device veth1_macvtap left promiscuous mode [ 890.063213][ T231] device veth0_macvtap left promiscuous mode [ 890.064596][ T231] device veth1_vlan left promiscuous mode [ 890.065834][ T231] device veth0_vlan left promiscuous mode [ 890.583012][ T231] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 890.585269][ T231] device bridge1 left promiscuous mode [ 891.223480][ T231] bond3 (unregistering): Released all slaves [ 891.774066][ T231] bond2 (unregistering): Released all slaves [ 892.322683][ T231] bond1 (unregistering): Released all slaves [ 894.023184][ T231] team0 (unregistering): Port device team_slave_1 removed [ 894.151344][ T231] team0 (unregistering): Port device team_slave_0 removed [ 894.281248][ T231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.431171][ T231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.511856][ T231] bond0 (unregistering): Released all slaves [ 895.722115][T13955] device hsr_slave_0 entered promiscuous mode [ 895.751289][T13955] device hsr_slave_1 entered promiscuous mode [ 895.780816][T13955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.782056][T13955] Cannot create hsr debugfs directory [ 895.809772][T14179] device syzkaller1 entered promiscuous mode [ 895.817016][T14197] tipc: Enabled bearer , priority 10 [ 895.926471][T14193] tipc: Resetting bearer [ 895.962051][T14193] tipc: Disabling bearer [ 896.015451][T13961] device hsr_slave_0 entered promiscuous mode [ 896.030865][T13961] device hsr_slave_1 entered promiscuous mode [ 896.050883][T13961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.053649][T13961] Cannot create hsr debugfs directory [ 896.456382][T14236] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.618079][T14241] device syzkaller1 entered promiscuous mode [ 896.927633][ T231] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.939075][T14247] tipc: Enabled bearer , priority 10 [ 897.056105][T14246] tipc: Resetting bearer [ 897.123040][T14246] tipc: Disabling bearer [ 897.173274][ T231] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.354021][ T231] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.483965][ T231] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.688162][T14288] device syzkaller1 entered promiscuous mode [ 897.825891][T14295] tipc: Enabled bearer , priority 10 [ 897.828067][T14292] tipc: Resetting bearer [ 897.891438][T14292] tipc: Disabling bearer [ 897.998125][ T231] tipc: Left network mode [ 898.053495][T13955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 898.224068][T13955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 898.323575][T13955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 898.346416][T13955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 898.539023][T14318] device syzkaller1 entered promiscuous mode [ 898.664476][T13961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 898.681495][T13961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 898.745831][T14324] tipc: Enabled bearer , priority 10 [ 898.758105][T14319] tipc: Resetting bearer [ 898.825050][T14319] tipc: Disabling bearer [ 898.827633][T13961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 898.854798][T13961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 898.929782][T13955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.053543][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.055260][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.064100][T13955] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.158999][T14343] device syzkaller1 entered promiscuous mode [ 899.218193][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.221507][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.225209][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.226679][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.429363][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 899.433852][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 899.435880][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.437713][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.439103][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.446836][T14356] tipc: Enabled bearer , priority 10 [ 899.481235][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 899.495401][T14351] tipc: Resetting bearer [ 899.522730][T14351] tipc: Disabling bearer [ 899.528780][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 899.534273][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 899.538150][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 899.751613][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.764119][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 899.766194][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 899.820620][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.822712][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.842320][T13961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.870684][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.884109][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.897038][T13955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 899.927782][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.929619][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.977168][T13961] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.995380][ T231] device hsr_slave_0 left promiscuous mode [ 900.024035][ T231] device hsr_slave_1 left promiscuous mode [ 900.050897][ T231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.052215][ T231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.053920][ T231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.055301][ T231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.079038][ T231] device bridge_slave_1 left promiscuous mode [ 900.086361][ T231] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.111422][ T231] device bridge_slave_0 left promiscuous mode [ 900.112657][ T231] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.190359][ T231] device veth1_macvtap left promiscuous mode [ 900.191552][ T231] device veth0_macvtap left promiscuous mode [ 900.193005][ T231] device veth1_vlan left promiscuous mode [ 900.194115][ T231] device veth0_vlan left promiscuous mode [ 901.965475][ T231] team0 (unregistering): Port device team_slave_1 removed [ 902.092937][ T231] team0 (unregistering): Port device team_slave_0 removed [ 902.222178][ T231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.372486][ T231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.472896][ T231] bond0 (unregistering): Released all slaves [ 903.675466][T14389] tipc: Enabled bearer , priority 10 [ 903.677633][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 903.679540][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.684507][ T5018] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.685766][ T5018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.701814][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 903.715907][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 903.717681][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.719039][ T5018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.728955][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 903.734849][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 903.753173][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 903.758890][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 903.807029][T13961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 903.816675][T13961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 903.819299][T14383] tipc: Resetting bearer [ 903.874341][T14383] tipc: Disabling bearer [ 903.879155][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 903.882196][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 903.885261][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 903.906780][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 903.917430][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 903.923519][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.933314][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 903.938340][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.975921][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 903.980961][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.982391][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.006589][T13955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.091255][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 904.093393][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 904.155075][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 904.175660][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 904.190679][T13955] device veth0_vlan entered promiscuous mode [ 904.203895][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 904.215207][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 904.241010][T13955] device veth1_vlan entered promiscuous mode [ 904.326289][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 904.332408][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 904.342406][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 904.353169][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 904.365020][T13955] device veth0_macvtap entered promiscuous mode [ 904.385558][T13955] device veth1_macvtap entered promiscuous mode [ 904.456275][T13955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.462570][T13955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.467708][T13955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.473797][T13955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.481204][T13955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.484048][T14419] device syzkaller1 entered promiscuous mode [ 904.524482][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 904.527615][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 904.532062][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 904.534051][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 904.537916][T13955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.541027][T13955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.543191][T13955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.545129][T13955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.548042][T13955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.557056][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 904.566540][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 904.594160][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 904.596010][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.606483][T13955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.615813][T13955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.624246][T13955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.632709][T13955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.662260][T13961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.804494][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 904.818293][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 904.905217][T13961] device veth0_vlan entered promiscuous mode [ 904.909313][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 904.915037][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 904.919479][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 904.922669][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 904.940836][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.944380][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.957097][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 904.969340][T13961] device veth1_vlan entered promiscuous mode [ 904.986971][T14427] tipc: Enabled bearer , priority 10 [ 904.998361][T14426] tipc: Resetting bearer [ 905.041411][T14426] tipc: Disabling bearer [ 905.067290][ T1595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.068930][ T1595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.093325][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 905.101327][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 905.114311][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 905.192161][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 905.194101][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 905.198649][T13961] device veth0_macvtap entered promiscuous mode [ 905.208903][T13961] device veth1_macvtap entered promiscuous mode [ 905.262233][T14439] device syzkaller1 entered promiscuous mode [ 905.353811][T13961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.356010][T13961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.364705][T13961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.375017][T13961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.376763][T13961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.395845][T13961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.406472][T13961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.411266][T14443] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 905.414779][T14450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2110'. [ 905.416560][T14450] device gre0 entered promiscuous mode [ 905.431495][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 905.433488][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 905.442819][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 905.453306][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 905.466337][T13961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.472074][T13961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.483223][T13961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.495615][T13961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.505765][T13961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.515826][T13961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.534456][T13961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.562463][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 905.565696][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 905.575481][T13961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.589362][T13961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.598858][T13961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.607811][T13961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.828123][ T5018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.831344][ T5018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.835298][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 905.889323][T13707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.892455][T13707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.894038][T14471] tipc: Enabled bearer , priority 10 [ 905.897386][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 905.908838][T14468] tipc: Resetting bearer [ 905.986607][T14468] tipc: Disabling bearer [ 906.129223][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 906.293686][T14487] device syzkaller1 entered promiscuous mode [ 906.470629][T14504] netlink: 'syz.6.2242': attribute type 1 has an invalid length. [ 906.546354][T14504] device bond10 entered promiscuous mode [ 906.557208][T14504] 8021q: adding VLAN 0 to HW filter on device bond10 [ 906.574905][T14507] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2242'. [ 906.622727][T14507] bond10: (slave bridge2): making interface the new active one [ 906.624202][T14507] device bridge2 entered promiscuous mode [ 906.641996][T14507] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 906.658936][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 906.767044][T14515] tipc: Enabled bearer , priority 10 [ 906.779099][T14513] tipc: Resetting bearer [ 906.851472][T14513] tipc: Disabling bearer [ 907.105311][T14541] device syzkaller1 entered promiscuous mode [ 907.294412][T14559] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 907.311428][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'. [ 907.316719][T14559] device bond0 entered promiscuous mode [ 907.323434][T14559] device bond_slave_0 entered promiscuous mode [ 907.327916][T14559] device bond_slave_1 entered promiscuous mode [ 907.373749][T14559] device bridge1 entered promiscuous mode [ 907.386106][T14559] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 907.635071][T14574] tipc: Enabled bearer , priority 10 [ 907.644766][T14573] tipc: Resetting bearer [ 907.684494][T14576] binder: 14575:14576 tried to acquire reference to desc 0, got 1 instead [ 907.701132][T14576] binder: 14575:14576 got transaction with invalid data ptr [ 907.706270][T14576] binder: 14575:14576 transaction call to 14575:0 failed 5/29201/-14, size 0-24 line 3351 [ 907.713510][T14573] tipc: Disabling bearer [ 907.720435][ T4418] binder: undelivered TRANSACTION_ERROR: 29201 [ 907.791642][T14581] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2264'. [ 907.805405][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'. [ 907.937080][T14589] No such timeout policy "syz1" [ 908.072693][T14595] device syzkaller1 entered promiscuous mode [ 908.343010][T14602] ubi31: attaching mtd0 [ 908.344721][T14602] ubi31: scanning is finished [ 908.345550][T14602] ubi31: empty MTD device detected [ 908.368262][T14605] netlink: 'syz.3.2272': attribute type 1 has an invalid length. [ 908.392398][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2272'. [ 908.404449][T14605] device bond_slave_0 entered promiscuous mode [ 909.494883][T14602] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 909.509611][T14602] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 909.511078][T14602] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 909.512434][T14602] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 909.513856][T14602] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 909.515178][T14602] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 909.516559][T14602] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2480129645 [ 909.567248][T14623] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2278'. [ 909.568934][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2278'. [ 909.574763][T14602] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 909.578117][T14617] ubi31: background thread "ubi_bgt31d" started, PID 14617 [ 909.632569][T14626] tipc: Started in network mode [ 909.633503][T14626] tipc: Node identity de4a847e2ab4, cluster identity 4711 [ 909.656373][T14626] tipc: Enabled bearer , priority 10 [ 909.684135][T14616] tipc: Resetting bearer [ 909.803137][T14616] tipc: Disabling bearer [ 909.977506][T14642] device syzkaller1 entered promiscuous mode [ 910.087940][T14648] device syzkaller0 entered promiscuous mode [ 910.172092][T14648] tipc: Enabled bearer , priority 0 [ 910.262860][T14660] tipc: Resetting bearer [ 910.287286][T14646] tipc: Resetting bearer [ 910.344199][T14646] tipc: Disabling bearer [ 910.381971][T14665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 910.390343][T14668] loop3: detected capacity change from 0 to 256 [ 910.451686][T14668] FAT-fs (loop3): Directory bread(block 64) failed [ 910.460619][T14668] FAT-fs (loop3): Directory bread(block 65) failed [ 910.468001][T14668] FAT-fs (loop3): Directory bread(block 66) failed [ 910.477070][T14668] FAT-fs (loop3): Directory bread(block 67) failed [ 910.486366][T14668] FAT-fs (loop3): Directory bread(block 68) failed [ 910.495573][T14668] FAT-fs (loop3): Directory bread(block 69) failed [ 910.504161][T14668] FAT-fs (loop3): Directory bread(block 70) failed [ 910.513258][T14668] FAT-fs (loop3): Directory bread(block 71) failed [ 910.518080][T14668] FAT-fs (loop3): Directory bread(block 72) failed [ 910.527228][T14668] FAT-fs (loop3): Directory bread(block 73) failed [ 910.592221][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2293'. [ 911.933362][T14677] netlink: 'syz.2.2293': attribute type 10 has an invalid length. [ 912.899609][T14677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2293'. [ 912.928495][T14677] device dummy0 entered promiscuous mode [ 914.206318][T14696] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2298'. [ 914.234485][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2298'. [ 914.298385][T14702] tipc: Started in network mode [ 914.301923][T14702] tipc: Node identity d2099311d72f, cluster identity 4711 [ 914.303286][T14702] tipc: Enabled bearer , priority 10 [ 914.343128][T14699] tipc: Resetting bearer [ 914.412251][T14699] tipc: Disabling bearer [ 914.665975][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2307'. [ 914.681409][T14725] loop4: detected capacity change from 0 to 256 [ 914.721010][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2307'. [ 914.735821][T14725] FAT-fs (loop4): Directory bread(block 64) failed [ 914.740554][T14723] device team_slave_1 entered promiscuous mode [ 914.743758][T14725] FAT-fs (loop4): Directory bread(block 65) failed [ 914.753570][T14725] FAT-fs (loop4): Directory bread(block 66) failed [ 914.761880][T14725] FAT-fs (loop4): Directory bread(block 67) failed [ 914.771745][T14723] device dummy0 left promiscuous mode [ 914.773094][T14725] FAT-fs (loop4): Directory bread(block 68) failed [ 914.784806][T14725] FAT-fs (loop4): Directory bread(block 69) failed [ 914.794965][T14725] FAT-fs (loop4): Directory bread(block 70) failed [ 914.804896][T14730] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2310'. [ 914.806964][T14725] FAT-fs (loop4): Directory bread(block 71) failed [ 914.817756][T14725] FAT-fs (loop4): Directory bread(block 72) failed [ 914.821981][T14723] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 914.825852][T14725] FAT-fs (loop4): Directory bread(block 73) failed [ 914.828184][T14723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2307'. [ 914.844818][T14723] device dummy0 entered promiscuous mode [ 914.865936][T14730] device dummy0 left promiscuous mode [ 914.879006][T14735] netlink: 'syz.7.2310': attribute type 10 has an invalid length. [ 914.892151][T14735] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2310'. [ 914.900444][T14735] device dummy0 entered promiscuous mode [ 917.927408][T14745] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2314'. [ 918.280526][T14749] tipc: Enabled bearer , priority 10 [ 918.282552][T14748] tipc: Resetting bearer [ 918.370870][T14748] tipc: Disabling bearer [ 918.427596][T14762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.440356][T14762] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.459235][T14762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 918.610941][T14780] Soft offlining pfn 0x13e9dd at process virtual address 0x205dd000 [ 918.632818][T14779] binder: 14777:14779 tried to acquire reference to desc 0, got 1 instead [ 918.665697][T14779] binder: 14777:14779 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 918.685867][T14779] binder: 14779 RLIMIT_NICE not set [ 918.695529][T14779] binder: 14779 RLIMIT_NICE not set [ 918.703220][T14779] binder: 14779 RLIMIT_NICE not set [ 918.714564][T14779] binder: 14777:14779 got reply transaction with no transaction stack [ 918.726058][T14779] binder: 14777:14779 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2964 [ 918.799159][ T14] binder: undelivered TRANSACTION_COMPLETE [ 918.800428][ T14] binder: undelivered transaction 11, process died. [ 918.801984][ T14] binder: undelivered TRANSACTION_COMPLETE [ 918.806484][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 918.817342][T14787] binder: 14786:14787 ioctl c0306201 20001880 returned -14 [ 918.837383][T14787] binder: 14786:14787 got reply transaction with no transaction stack [ 918.847704][T14787] binder: 14786:14787 transaction reply to 0:0 failed 15/29201/-71, size 0-0 line 2964 [ 918.891895][T14792] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2328'. [ 919.126001][T14802] tipc: Enabled bearer , priority 0 [ 919.162985][T14802] tipc: Resetting bearer [ 919.250866][T14800] tipc: Disabling bearer [ 919.305361][T14809] tipc: Enabled bearer , priority 10 [ 919.327409][T14807] tipc: Resetting bearer [ 919.512176][T14807] tipc: Disabling bearer [ 919.563333][T14824] loop6: detected capacity change from 0 to 512 [ 919.574370][T14825] loop7: detected capacity change from 0 to 512 [ 919.599090][T14824] EXT4-fs (loop6): Test dummy encryption mode enabled [ 919.616321][T14825] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 919.630941][T14824] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.2338: inode has both inline data and extents flags [ 919.647202][T14825] EXT4-fs (loop7): 1 truncate cleaned up [ 919.652960][T14824] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2338: couldn't read orphan inode 15 (err -117) [ 919.658780][T14825] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 919.674123][T14824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 919.773023][T14836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2340'. [ 919.801406][T10657] EXT4-fs (loop7): unmounting filesystem. [ 919.877576][ T9842] EXT4-fs (loop6): unmounting filesystem. [ 920.088507][T14847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.452571][T14855] tipc: Enabled bearer , priority 0 [ 920.481161][T14855] tipc: Resetting bearer [ 920.549688][T14854] tipc: Disabling bearer [ 920.672822][T14863] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2348'. [ 920.685674][T14863] device dummy0 left promiscuous mode [ 920.713889][T14863] netlink: 'syz.6.2348': attribute type 10 has an invalid length. [ 920.721978][T14863] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2348'. [ 920.735033][T14863] device dummy0 entered promiscuous mode [ 920.856152][T14868] tipc: Enabled bearer , priority 10 [ 920.867530][T14867] tipc: Resetting bearer [ 920.939596][T14867] tipc: Disabling bearer [ 921.079003][T14881] Bluetooth: MGMT ver 1.22 [ 921.193132][T14886] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2355'. [ 921.232688][T14888] device-mapper: table: 248:2: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 921.235033][T14888] device-mapper: ioctl: error adding target to table [ 921.452252][T14897] tipc: Enabled bearer , priority 0 [ 921.464371][T14897] tipc: Resetting bearer [ 921.508928][T14905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 921.590869][T14893] tipc: Disabling bearer [ 921.603892][T14912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2362'. [ 921.606912][T14912] device netdevsim0 entered promiscuous mode [ 921.615016][T14912] device dummy0 left promiscuous mode [ 921.645686][T14912] netlink: 'syz.2.2362': attribute type 10 has an invalid length. [ 921.660243][T14912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2362'. [ 921.675102][T14912] device dummy0 entered promiscuous mode [ 921.814403][T14921] tipc: Enabled bearer , priority 10 [ 921.822416][T14916] tipc: Resetting bearer [ 922.091452][T14916] tipc: Disabling bearer [ 922.186526][T14933] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2368'. [ 922.352610][T14942] binder: 14941:14942 tried to acquire reference to desc 0, got 1 instead [ 922.365458][T14942] binder: 14941:14942 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 922.391193][T14942] binder: 14942 RLIMIT_NICE not set [ 922.401026][T14942] binder_alloc: 14941: binder_alloc_buf, no vma [ 922.415254][T14942] binder: cannot allocate buffer: vma cleared, target dead or dying [ 922.415296][T14942] binder: 14941:14942 transaction reply to 14941:14942 failed 21/29189/-3, size 0-0 line 3248 [ 922.446439][T14942] binder: send failed reply for transaction 20 to 14941:14942 [ 922.474951][ T4446] binder: undelivered TRANSACTION_COMPLETE [ 922.656453][T14954] tipc: Enabling of bearer rejected, failed to enable media [ 922.830250][T14966] FAULT_INJECTION: forcing a failure. [ 922.830250][T14966] name failslab, interval 1, probability 0, space 0, times 0 [ 922.861421][T14966] CPU: 0 PID: 14966 Comm: syz.3.2377 Not tainted syzkaller #0 [ 922.862938][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 922.865040][T14966] Call trace: [ 922.865734][T14966] dump_backtrace+0x1c4/0x1f0 [ 922.866699][T14966] show_stack+0x2c/0x3c [ 922.867562][T14966] __dump_stack+0x30/0x40 [ 922.868451][T14966] dump_stack_lvl+0xf4/0x15c [ 922.869378][T14966] dump_stack+0x1c/0x5c [ 922.870202][T14966] should_fail_ex+0x3cc/0x524 [ 922.871148][T14966] __should_failslab+0xc0/0x11c [ 922.872119][T14966] should_failslab+0x10/0x28 [ 922.873011][T14966] __kmem_cache_alloc_node+0x7c/0x318 [ 922.874033][T14966] __kmalloc_node_track_caller+0xb8/0x174 [ 922.875104][T14966] kstrdup+0x68/0xb0 [ 922.875827][T14966] vidtv_psi_nit_table_init+0x208/0x6d0 [ 922.876846][T14966] vidtv_channel_si_init+0xdd4/0x124c [ 922.877838][T14966] vidtv_mux_init+0x3ac/0x1554 [ 922.878699][T14966] vidtv_start_feed+0x2e0/0x49c [ 922.879558][T14966] dmx_section_feed_start_filtering+0x328/0x464 [ 922.880667][T14966] dvb_dmxdev_filter_start+0xafc/0xf10 [ 922.881636][T14966] dvb_dmxdev_filter_set+0x2cc/0x57c [ 922.882601][T14966] dvb_demux_do_ioctl+0x410/0x4d8 [ 922.883516][T14966] dvb_usercopy+0x248/0x45c [ 922.884327][T14966] dvb_demux_ioctl+0x3c/0x54 [ 922.885154][T14966] __arm64_sys_ioctl+0x14c/0x1c8 [ 922.886067][T14966] invoke_syscall+0x98/0x290 [ 922.886931][T14966] el0_svc_common+0x13c/0x258 [ 922.887803][T14966] do_el0_svc+0x5c/0x134 [ 922.888601][T14966] el0_svc+0x58/0x12c [ 922.889337][T14966] el0t_64_sync_handler+0x84/0xf0 [ 922.890243][T14966] el0t_64_sync+0x18c/0x190 [ 922.944158][T14975] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2379'. [ 923.244655][T14994] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2386'. [ 923.661381][T15020] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2392'. [ 923.776363][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2394'. [ 923.784862][T15023] tipc: Enabled bearer , priority 0 [ 923.801307][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2394'. [ 923.811303][T15023] tipc: Resetting bearer [ 923.818700][T15025] device dummy0 left promiscuous mode [ 923.908793][T15022] tipc: Disabling bearer [ 923.914942][T15025] netlink: 'syz.6.2394': attribute type 10 has an invalid length. [ 923.916645][T15025] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2394'. [ 923.922509][T15025] device dummy0 entered promiscuous mode [ 924.113848][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2398'. [ 924.134421][T15040] device dummy0 left promiscuous mode [ 924.153632][T15040] netlink: 'syz.4.2398': attribute type 10 has an invalid length. [ 924.162212][T15040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2398'. [ 924.170908][T15040] device dummy0 entered promiscuous mode [ 924.339191][ T9474] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 924.340946][ T9474] Bluetooth: hci0: Injecting HCI hardware error event [ 924.343637][ T4341] Bluetooth: hci0: hardware error 0x00 [ 924.453890][T15057] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2403'. [ 924.579050][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.580375][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.607156][T15065] tipc: Enabled bearer , priority 0 [ 924.638669][T15066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 924.643712][T15065] tipc: Resetting bearer [ 924.728313][T15064] tipc: Disabling bearer [ 924.739587][T15068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2407'. [ 924.765423][T15068] netlink: 'syz.3.2407': attribute type 10 has an invalid length. [ 924.781267][T15068] device dummy0 entered promiscuous mode [ 925.004725][T15082] netlink: 'syz.4.2411': attribute type 1 has an invalid length. [ 925.043793][T15082] 8021q: adding VLAN 0 to HW filter on device bond11 [ 925.074492][T15082] device bond11 entered promiscuous mode [ 925.082630][T15082] device dummy0 left promiscuous mode [ 925.104171][T15082] device dummy0 entered promiscuous mode [ 925.106803][T15082] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 925.115876][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 925.131985][T15082] netlink: 'syz.4.2411': attribute type 10 has an invalid length. [ 925.152141][T15082] bond11: (slave dummy0): Releasing backup interface [ 925.303790][ T9474] Bluetooth: hci2: unexpected cc 0x0c47 length: 2 > 1 [ 925.758674][T15116] tipc: Enabling of bearer rejected, failed to enable media [ 926.063094][T15134] device dummy0 left promiscuous mode [ 926.064943][T15129] netlink: 'syz.4.2421': attribute type 10 has an invalid length. [ 926.067170][T15129] device dummy0 entered promiscuous mode [ 926.497648][ T4341] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 934.200435][T15145] tipc: Enabled bearer , priority 10 [ 934.214159][T15137] tipc: Resetting bearer [ 934.340738][T15137] tipc: Disabling bearer [ 934.400301][T15174] binder_user_error: 2 callbacks suppressed [ 934.400312][T15174] binder: tried to use weak ref as strong ref [ 934.402857][T15174] binder: 15173:15174 Acquire 1 refcount change on invalid ref 0 ret -22 [ 934.420535][T15174] binder: 15173:15174 got transaction to invalid handle, 1 [ 934.421839][T15174] binder_debug: 2 callbacks suppressed [ 934.421853][T15174] binder: 15174:15173 cannot find target node [ 934.423779][T15174] binder: 15173:15174 transaction call to 0:0 failed 24/29201/-22, size 0-24 line 3063 [ 934.460786][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 934.555289][T15185] __nla_validate_parse: 9 callbacks suppressed [ 934.555303][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2435'. [ 934.583725][T15185] device dummy0 left promiscuous mode [ 934.611116][T15195] tipc: Enabling of bearer rejected, failed to enable media [ 934.718507][T15196] netlink: 'syz.2.2435': attribute type 10 has an invalid length. [ 934.720711][T15196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2435'. [ 934.744672][T15196] device dummy0 entered promiscuous mode [ 934.938715][T15211] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2439'. [ 944.229625][T15237] tipc: Enabled bearer , priority 10 [ 944.230952][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'. [ 944.232560][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2450'. [ 944.236348][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'. [ 944.238085][T15247] device dummy0 left promiscuous mode [ 944.253268][T15248] device dummy0 left promiscuous mode [ 944.282034][T15249] netlink: 'syz.6.2450': attribute type 10 has an invalid length. [ 944.283522][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2450'. [ 944.285257][T15249] device dummy0 entered promiscuous mode [ 944.295425][T15250] netlink: 'syz.2.2448': attribute type 10 has an invalid length. [ 944.296896][T15250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2448'. [ 944.328014][T15250] device dummy0 entered promiscuous mode [ 944.331628][T15255] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2451'. [ 944.350216][T15231] tipc: Resetting bearer [ 944.410120][T15231] tipc: Disabling bearer [ 945.385416][T15269] tipc: Enabling of bearer rejected, failed to enable media [ 945.621026][T15279] device syzkaller0 entered promiscuous mode [ 945.792840][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 945.811678][T15278] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 949.932835][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2465'. [ 949.969840][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2465'. [ 949.984073][T15324] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2466'. [ 949.997187][T15322] device dummy0 left promiscuous mode [ 950.021215][T15322] netlink: 'syz.2.2465': attribute type 10 has an invalid length. [ 950.036600][T15322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2465'. [ 950.050641][T15322] device dummy0 entered promiscuous mode [ 950.362018][T15341] tipc: Enabling of bearer rejected, failed to enable media [ 950.920514][T15362] loop3: detected capacity change from 0 to 512 [ 950.948939][T15362] EXT4-fs: Ignoring removed oldalloc option [ 950.969605][T15362] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 951.017218][T15362] EXT4-fs (loop3): 1 truncate cleaned up [ 951.028680][T15362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 951.108440][T15363] loop7: detected capacity change from 0 to 4096 [ 951.123180][T15362] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 951.149240][T15363] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 951.700654][T13955] EXT4-fs (loop3): unmounting filesystem. [ 951.800767][T10657] EXT4-fs (loop7): unmounting filesystem. [ 953.072430][T15444] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2479'. [ 954.464071][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2480'. [ 954.544503][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2480'. [ 954.568296][T15469] device dummy0 left promiscuous mode [ 954.602695][T15469] netlink: 'syz.7.2480': attribute type 10 has an invalid length. [ 954.616736][T15469] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2480'. [ 954.699568][T15469] device dummy0 entered promiscuous mode [ 954.718011][T15470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 954.740567][T15470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 956.386459][T15470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 957.372247][T15470] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 958.270059][T15476] loop4: detected capacity change from 0 to 512 [ 958.281641][T15476] EXT4-fs (loop4): Test dummy encryption mode enabled [ 958.315757][T15476] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.2483: inode has both inline data and extents flags [ 958.318203][T15476] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.2483: couldn't read orphan inode 15 (err -117) [ 958.320790][T15476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 958.477673][T15489] tipc: Enabling of bearer rejected, failed to enable media [ 958.504994][ T9840] EXT4-fs (loop4): unmounting filesystem. [ 958.739033][T15503] loop6: detected capacity change from 0 to 512 [ 959.184905][T15503] EXT4-fs: Ignoring removed oldalloc option [ 959.203475][T15503] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 959.242427][T15503] EXT4-fs (loop6): 1 truncate cleaned up [ 959.274257][T15503] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 959.648680][T15523] loop4: detected capacity change from 0 to 4096 [ 959.663819][ T9842] EXT4-fs (loop6): unmounting filesystem. [ 959.732305][T15523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 959.758784][T15522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 959.786284][T15522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 959.787712][T15522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 959.790486][T15522] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 960.178883][T15538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2494'. [ 960.232194][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2494'. [ 960.259632][T15540] device dummy0 left promiscuous mode [ 960.297666][T15540] netlink: 'syz.6.2494': attribute type 10 has an invalid length. [ 960.308877][T15540] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2494'. [ 960.327984][T15540] device dummy0 entered promiscuous mode [ 960.435924][ T9840] EXT4-fs (loop4): unmounting filesystem. [ 960.564779][T15547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 960.581684][T15547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 960.601662][T15547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 960.618800][T15547] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 960.645705][T15554] device syzkaller0 entered promiscuous mode [ 961.351675][ T4341] block nbd4: Receive control failed (result -107) [ 961.407725][T15483] block nbd4: shutting down sockets [ 961.521220][T15585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 963.184819][T15585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 963.186386][T15585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 963.208324][T15585] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 963.371306][T15599] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 963.398175][T15606] device syzkaller0 entered promiscuous mode [ 963.546612][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 963.646368][T15609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 963.648521][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2514'. [ 963.650058][T15613] device bond1 entered promiscuous mode [ 963.651664][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2515'. [ 963.678280][T15620] netlink: 'syz.3.2514': attribute type 10 has an invalid length. [ 963.679853][T15620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2514'. [ 963.831740][T15632] loop2: detected capacity change from 0 to 128 [ 963.894094][T15632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 963.901853][T15632] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 964.014131][T13961] EXT4-fs (loop2): unmounting filesystem. [ 964.188968][T15646] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 964.208143][T15648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 964.224399][T15648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 964.225915][T15648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 964.246705][T15648] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 964.277418][T15663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2529'. [ 964.287405][T15659] device syzkaller0 entered promiscuous mode [ 964.493113][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2531'. [ 964.536151][T15671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 964.645895][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2531'. [ 964.647597][T15671] device bond7 entered promiscuous mode [ 964.867025][T15681] loop6: detected capacity change from 0 to 512 [ 964.872688][T15671] device dummy0 left promiscuous mode [ 964.885540][T15681] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 964.913444][T15681] EXT4-fs (loop6): 1 truncate cleaned up [ 964.916023][T15671] device dummy0 entered promiscuous mode [ 964.918658][T15681] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 964.930317][T15671] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 964.941899][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 964.950490][T15678] netlink: 'syz.7.2531': attribute type 10 has an invalid length. [ 964.961927][T15678] bond7: (slave dummy0): Releasing backup interface [ 965.008221][ T9842] EXT4-fs (loop6): unmounting filesystem. [ 965.068227][ T27] audit: type=1326 audit(2000001153.358:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15690 comm="syz.4.2538" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef792e8 code=0x7ffc0000 [ 965.090840][ T27] audit: type=1326 audit(2000001153.378:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15690 comm="syz.4.2538" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff7ef792e8 code=0x7ffc0000 [ 965.132910][ T27] audit: type=1326 audit(2000001153.378:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15690 comm="syz.4.2538" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef792e8 code=0x7ffc0000 [ 965.248061][ T27] audit: type=1326 audit(2000001153.378:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15690 comm="syz.4.2538" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef792e8 code=0x7ffc0000 [ 965.282171][T15696] __nla_validate_parse: 1 callbacks suppressed [ 965.282184][T15696] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2540'. [ 965.466474][T15706] device syzkaller0 entered promiscuous mode [ 965.502022][T15702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 965.529452][T15702] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 965.612842][T15709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 965.626205][T15709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 965.632386][T15709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 965.653976][T15709] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 965.888428][T15730] loop2: detected capacity change from 0 to 512 [ 965.932129][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2551'. [ 965.947868][T15730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 965.971226][T15730] EXT4-fs (loop2): 1 truncate cleaned up [ 965.972706][T15730] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 966.030568][T15734] 8021q: adding VLAN 0 to HW filter on device bond11 [ 966.047187][T15740] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2551'. [ 966.062013][T15742] loop4: detected capacity change from 0 to 512 [ 966.063607][T15740] device bond11 entered promiscuous mode [ 966.071946][T15742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 966.099468][T15742] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 966.108116][T15734] device dummy0 left promiscuous mode [ 966.147174][T15742] EXT4-fs (loop4): 1 truncate cleaned up [ 966.152189][T13961] EXT4-fs (loop2): unmounting filesystem. [ 966.157090][T15734] device dummy0 entered promiscuous mode [ 966.164889][T15742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 966.170906][T15734] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 966.195700][T15740] netlink: 'syz.6.2551': attribute type 10 has an invalid length. [ 966.277901][T15740] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2551'. [ 966.305396][T15740] bond11: (slave dummy0): Releasing backup interface [ 967.371867][T15757] device syzkaller0 entered promiscuous mode [ 967.506296][ T9840] EXT4-fs (loop4): unmounting filesystem. [ 967.687841][T15768] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 967.705857][T15768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 967.719741][T15768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 967.740620][T15768] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 967.907743][T15784] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 967.947133][T15792] loop3: detected capacity change from 0 to 512 [ 968.019427][T15792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 968.034620][T15792] EXT4-fs (loop3): 1 truncate cleaned up [ 968.035979][T15792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 968.155017][T13955] EXT4-fs (loop3): unmounting filesystem. [ 968.233656][T15804] device syzkaller0 entered promiscuous mode [ 968.268489][T15813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 968.368188][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2572'. [ 968.370019][T15813] device bond8 entered promiscuous mode [ 968.379745][T15818] device dummy0 left promiscuous mode [ 968.397183][T15818] device dummy0 entered promiscuous mode [ 968.400148][T15818] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 968.409607][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 968.414497][T15813] netlink: 'syz.7.2572': attribute type 10 has an invalid length. [ 968.427134][T15813] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2572'. [ 968.447823][T15813] bond8: (slave dummy0): Releasing backup interface [ 968.577836][T15830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 968.598459][T15830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 968.610059][T15830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 968.627302][T15830] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 968.919853][T15854] loop2: detected capacity change from 0 to 512 [ 968.939364][T15854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 968.962402][T15854] EXT4-fs (loop2): 1 truncate cleaned up [ 968.968193][T15854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 969.006711][T13961] EXT4-fs (loop2): unmounting filesystem. [ 969.081286][T15864] device syzkaller0 entered promiscuous mode [ 969.093941][T15862] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 969.280772][T15868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 969.305823][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2589'. [ 969.312286][T15868] device bond1 entered promiscuous mode [ 969.320516][T15868] device dummy0 left promiscuous mode [ 969.341854][T15868] device dummy0 entered promiscuous mode [ 969.346993][T15868] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 969.352551][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 969.361306][T15868] netlink: 'syz.2.2589': attribute type 10 has an invalid length. [ 969.366372][T15868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2589'. [ 969.383228][T15868] bond1: (slave dummy0): Releasing backup interface [ 969.568401][T15885] loop7: detected capacity change from 0 to 512 [ 969.575834][T15885] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 969.582021][T15885] EXT4-fs (loop7): 1 truncate cleaned up [ 969.584664][T15885] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 969.618789][T10657] EXT4-fs (loop7): unmounting filesystem. [ 969.655864][ T4341] block nbd2: Receive control failed (result -107) [ 969.659584][T15887] block nbd2: shutting down sockets [ 969.668105][T15890] device syzkaller0 entered promiscuous mode [ 969.915425][T15900] 8021q: adding VLAN 0 to HW filter on device bond9 [ 969.921468][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2603'. [ 969.926747][T15900] device bond9 entered promiscuous mode [ 969.929102][T15900] device dummy0 left promiscuous mode [ 969.939291][T15900] device dummy0 entered promiscuous mode [ 969.940652][T15900] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 969.942435][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 969.949536][T15900] netlink: 'syz.7.2603': attribute type 10 has an invalid length. [ 969.950990][T15900] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2603'. [ 969.953855][T15900] bond9: (slave dummy0): Releasing backup interface [ 970.133718][T15913] loop7: detected capacity change from 0 to 512 [ 970.135638][T15913] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 970.138731][T15913] EXT4-fs (loop7): 1 truncate cleaned up [ 970.140144][T15913] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 970.160836][T10657] EXT4-fs (loop7): unmounting filesystem. [ 970.234316][T15920] device syzkaller0 entered promiscuous mode [ 970.424323][ T4341] block nbd7: Receive control failed (result -107) [ 970.427337][T15925] block nbd7: shutting down sockets [ 970.443815][T15928] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 970.451204][T15928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2615'. [ 970.463602][T15928] device dummy0 left promiscuous mode [ 970.464850][T15928] netlink: 'syz.2.2615': attribute type 10 has an invalid length. [ 970.466122][T15928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2615'. [ 970.467748][T15928] device dummy0 entered promiscuous mode [ 970.538621][T15934] netlink: 'syz.7.2618': attribute type 4 has an invalid length. [ 970.543352][T15934] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2618'. [ 970.545872][T15934] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 970.735896][T15944] device syzkaller0 entered promiscuous mode [ 970.903116][ T4341] block nbd2: Receive control failed (result -107) [ 970.905928][T15949] block nbd2: shutting down sockets [ 970.937646][T15952] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 970.941993][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2627'. [ 970.944782][T15952] device dummy0 left promiscuous mode [ 970.951544][T15952] netlink: 'syz.2.2627': attribute type 10 has an invalid length. [ 970.955734][T15952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2627'. [ 970.957390][T15952] device dummy0 entered promiscuous mode [ 971.163009][T15806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.445076][T15969] device syzkaller0 entered promiscuous mode [ 980.048036][T15999] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 980.050082][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2638'. [ 980.056226][T16004] device dummy0 left promiscuous mode [ 980.067986][T16008] netlink: 'syz.3.2638': attribute type 10 has an invalid length. [ 980.069404][T16008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2638'. [ 980.071105][T16008] device dummy0 entered promiscuous mode [ 980.080645][T16029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 980.100162][T16040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 980.245629][T16053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2648'. [ 980.275483][T16053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2648'. [ 980.354462][T16053] device dummy0 left promiscuous mode [ 980.372042][T16062] netlink: 'syz.2.2648': attribute type 10 has an invalid length. [ 980.379969][T16062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2648'. [ 980.396491][T16062] device dummy0 entered promiscuous mode [ 981.154252][T16092] loop2: detected capacity change from 0 to 512 [ 981.199410][T16092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 981.264140][T16092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 981.265840][T16092] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.424761][T13961] EXT4-fs (loop2): unmounting filesystem. [ 982.621129][T16122] 8021q: adding VLAN 0 to HW filter on device bond12 [ 982.636733][T16121] device syzkaller0 entered promiscuous mode [ 982.686192][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2665'. [ 982.688357][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2664'. [ 982.690036][T16128] device bond12 entered promiscuous mode [ 982.747796][T16131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2665'. [ 982.751118][T16122] device dummy0 left promiscuous mode [ 982.756533][T16122] device dummy0 entered promiscuous mode [ 982.763829][T16122] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 986.011898][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.013119][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.772684][T16127] device dummy0 left promiscuous mode [ 990.786340][T16128] netlink: 'syz.6.2664': attribute type 10 has an invalid length. [ 990.787851][T16128] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2664'. [ 990.793923][T16128] bond12: (slave dummy0): Releasing backup interface [ 990.818626][T16131] netlink: 'syz.3.2665': attribute type 10 has an invalid length. [ 990.820115][T16131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2665'. [ 990.834238][T16131] device dummy0 entered promiscuous mode [ 990.837165][T16143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 991.228124][T16156] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 991.616604][T16189] device syzkaller0 entered promiscuous mode [ 991.783616][T16196] loop7: detected capacity change from 0 to 256 [ 991.838716][T16196] FAT-fs (loop7): Directory bread(block 64) failed [ 991.851227][T16196] FAT-fs (loop7): Directory bread(block 65) failed [ 991.866025][T16196] FAT-fs (loop7): Directory bread(block 66) failed [ 991.876230][T16196] FAT-fs (loop7): Directory bread(block 67) failed [ 991.886362][T16196] FAT-fs (loop7): Directory bread(block 68) failed [ 991.898918][T16196] FAT-fs (loop7): Directory bread(block 69) failed [ 991.911694][T16196] FAT-fs (loop7): Directory bread(block 70) failed [ 991.924115][T16196] FAT-fs (loop7): Directory bread(block 71) failed [ 991.932232][T16196] FAT-fs (loop7): Directory bread(block 72) failed [ 991.945321][T16201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 991.947319][T16196] FAT-fs (loop7): Directory bread(block 73) failed [ 991.975340][T16204] Unable to handle kernel read from unreadable memory at virtual address ffff80002193e000 [ 991.977690][T16204] KASAN: probably user-memory-access in range [0x000000010c9f0000-0x000000010c9f0007] [ 991.979421][T16204] Mem abort info: [ 991.980047][T16204] ESR = 0x000000009600000f [ 991.981039][T16204] EC = 0x25: DABT (current EL), IL = 32 bits [ 991.982139][T16204] SET = 0, FnV = 0 [ 991.982839][T16204] EA = 0, S1PTW = 0 [ 991.983499][T16204] FSC = 0x0f: level 3 permission fault [ 991.984360][T16204] Data abort info: [ 991.985028][T16204] ISV = 0, ISS = 0x0000000f [ 991.985795][T16204] CM = 0, WnR = 0 [ 991.986420][T16204] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020bb8e000 [ 991.987688][T16204] [ffff80002193e000] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=1000000109822003, pte=0168010000001fd3 [ 991.990240][T16204] Internal error: Oops: 000000009600000f [#1] PREEMPT SMP [ 991.991563][T16204] Modules linked in: [ 991.992302][T16204] CPU: 0 PID: 16204 Comm: syz.6.2682 Not tainted syzkaller #0 [ 991.993715][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 991.995531][T16204] pstate: 22400005 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 991.996967][T16204] pc : __memcpy_fromio+0x2c8/0x454 [ 991.997947][T16204] lr : __memcpy_fromio+0x2b0/0x454 [ 991.998853][T16204] sp : ffff8000221d77d0 [ 991.999620][T16204] x29: ffff8000221d77d0 x28: dfff800000000000 x27: 0168010000001fd3 [ 992.001107][T16204] x26: 0168010000001fd3 x25: ffff80002193e000 x24: 0000000000001000 [ 992.002589][T16204] x23: dfff800000000000 x22: ffff0000d1de0000 x21: 0000000000000ff8 [ 992.004105][T16204] x20: ffff80002193e000 x19: ffff0000d1de0008 x18: 1fffe00033c2177e [ 992.005611][T16204] x17: ffff8000163dd000 x16: ffff8000082f5420 x15: 000000000004ffff [ 992.007110][T16204] x14: ffff70000443aee0 x13: 1ffff0000443aee0 x12: 0000000000080000 [ 992.008887][T16204] x11: ff008000080478a8 x10: 0000000000000002 x9 : ffff0000da695400 [ 992.010623][T16204] x8 : 1fffe0001a3bc000 x7 : ffff8000087f4d84 x6 : 0000000000000000 [ 992.012233][T16204] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082f5548 [ 992.013862][T16204] x2 : 0000000000001000 x1 : 0000000000001000 x0 : 0000000000000007 [ 992.015514][T16204] Call trace: [ 992.016156][T16204] __memcpy_fromio+0x2c8/0x454 [ 992.017116][T16204] generic_access_phys+0x2a4/0x2bc [ 992.018073][T16204] kernfs_vma_access+0x14c/0x1d4 [ 992.018988][T16204] __access_remote_vm+0x2a4/0x5a8 [ 992.019945][T16204] access_remote_vm+0x48/0x60 [ 992.020827][T16204] proc_pid_cmdline_read+0x49c/0x958 [ 992.021790][T16204] vfs_read+0x2a4/0x7b8 [ 992.022560][T16204] ksys_read+0x12c/0x228 [ 992.023346][T16204] __arm64_sys_read+0x7c/0x90 [ 992.024208][T16204] invoke_syscall+0x98/0x290 [ 992.025083][T16204] el0_svc_common+0x13c/0x258 [ 992.025956][T16204] do_el0_svc+0x5c/0x134 [ 992.026753][T16204] el0_svc+0x58/0x12c [ 992.027487][T16204] el0t_64_sync_handler+0x84/0xf0 [ 992.028403][T16204] el0t_64_sync+0x18c/0x190 [ 992.029239][T16204] Code: aa1303f6 91002273 aa0803f5 d343fec8 (f9400298) [ 992.030467][T16204] ---[ end trace 0000000000000000 ]--- [ 992.288576][T16204] Kernel panic - not syncing: Oops: Fatal exception [ 992.289892][T16204] Kernel Offset: disabled [ 992.290720][T16204] CPU features: 0x050000,000f0097,a65bfea7 [ 992.291832][T16204] Memory Limit: none [ 992.553683][T16204] Rebooting in 86400 seconds..