last executing test programs: 2m51.274840767s ago: executing program 3 (id=211): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m50.869478197s ago: executing program 3 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2m49.790402447s ago: executing program 3 (id=218): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) io_setup(0x3, 0x0) eventfd2(0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x1e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdir(0x0, 0xfffffffffffffffe) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) io_getevents(0x0, 0x1, 0x0, &(0x7f0000000080), 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x800, &(0x7f0000000000)) r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0xffff0018) 2m45.768181898s ago: executing program 3 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 2m44.867227756s ago: executing program 3 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)={0x200, 0x1d8, 0x20}, 0x18) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xd) 2m43.765112684s ago: executing program 3 (id=233): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x28, 0x1a, 0xc01, 0xfffffffe, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x800, 0x0, 0x3, 0xd6}}, 0x20) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020) 2m28.032733204s ago: executing program 32 (id=233): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x28, 0x1a, 0xc01, 0xfffffffe, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x800, 0x0, 0x3, 0xd6}}, 0x20) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020) 1m54.939170498s ago: executing program 0 (id=365): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x8, 0x9, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x7}, 0x20040885) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$inet_smc(0x2b, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0xffffffff}) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x11, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000200)='./file1\x00', 0x100800c, &(0x7f0000001f40)=ANY=[], 0x2, 0x155e, &(0x7f0000002cc0)="$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") 1m52.474016403s ago: executing program 0 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)={0x200, 0x1d8, 0x20}, 0x18) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xd) ptrace$pokeuser(0x6, r5, 0x358, 0xfffffffffffffff8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x130, 0x0, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x101, 0x8, 0xd590}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x2}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m49.956267092s ago: executing program 0 (id=373): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0xfffffffe, 0x80000001, 0xb, 0x1fd, 0x1}) 1m48.821593635s ago: executing program 0 (id=377): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) io_setup(0x3, 0x0) eventfd2(0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x1e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdir(0x0, 0xfffffffffffffffe) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) io_getevents(0x0, 0x1, 0x0, &(0x7f0000000080), 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x800, &(0x7f0000000000)) r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0xffff0018) 1m46.939356466s ago: executing program 0 (id=382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x8, 0x9, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x38, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x7}, 0x20040885) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$inet_smc(0x2b, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0xffffffff}) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x11, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000200)='./file1\x00', 0x100800c, &(0x7f0000001f40)=ANY=[], 0x2, 0x155e, &(0x7f0000002cc0)="$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") 1m42.893986508s ago: executing program 0 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) acct(0x0) socket(0x23, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4, 0x0, 0x0, 0x1d}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x10}, {0x0, 0x3}, {0x0, 0x40}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x8, 0x0, 0xfffffffc}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) inotify_init1(0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m27.523958703s ago: executing program 33 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) acct(0x0) socket(0x23, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4, 0x0, 0x0, 0x1d}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x10}, {0x0, 0x3}, {0x0, 0x40}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x8, 0x0, 0xfffffffc}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) inotify_init1(0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 33.053848258s ago: executing program 7 (id=428): r0 = socket(0x1, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003600)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 31.848954753s ago: executing program 7 (id=587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 15.85309609s ago: executing program 34 (id=587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 15.60887148s ago: executing program 1 (id=632): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fspick(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket(0x28, 0x801, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) poll(0x0, 0x0, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 14.994045056s ago: executing program 1 (id=635): socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000240)=""/228) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x89cd) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe7, &(0x7f0000000140)=0x3) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x24054800) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x40000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, 0x0) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 13.778757748s ago: executing program 2 (id=638): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x3a, &(0x7f0000000100)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4002, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="d9ea693249ca0180c200000086dd61fbddf0751dc53e5d1fa72b3c00000000ffffac1e0001ff0200"/61], 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000000000000000000000022ff020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n'], 0x20) 11.183355525s ago: executing program 1 (id=642): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9.661442846s ago: executing program 2 (id=648): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 9.165952686s ago: executing program 6 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r6, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r5, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) 9.038329589s ago: executing program 2 (id=650): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004000, &(0x7f0000000240)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@user_subvol_rm}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x35, 0x39, 0x32, 0x38, 0x67, 0x2d, 0x2d, 0x37]}}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000340)={0x0, {0x50979c6b8b4af6fa, 0x0, 0x56, 0x2, 0xffffffffffffff60}}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 7.99818807s ago: executing program 2 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_PARAM={{0x79}, 0xce}}}, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 7.948719297s ago: executing program 4 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x300, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd1}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0xfffffed6) sendmsg$nl_route(r2, 0x0, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000200000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0x8) 7.791103866s ago: executing program 6 (id=657): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) 4.405058202s ago: executing program 2 (id=659): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x3a, &(0x7f0000000100)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4002, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="d9ea693249ca0180c200000086dd61fbddf0751dc53e5d1fa72b3c00000000ffffac1e0001ff0200"/61], 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000000000000000000000022ff020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n'], 0x20) 4.038846669s ago: executing program 4 (id=660): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fspick(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket(0x28, 0x801, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) poll(0x0, 0x0, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 3.016269847s ago: executing program 5 (id=661): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 2.948458272s ago: executing program 4 (id=662): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39", 0x3e}, {&(0x7f0000000ec0)}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x48}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.937864399s ago: executing program 6 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044090}, 0xc4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x32, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)={0x64, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.862547568s ago: executing program 2 (id=664): r0 = socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a0000009c0000000000000024000000000000009500200d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x0, 0x8000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d1, 0x0) unshare(0x40080) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b7030000008000008500"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x6, @private2, 0x4}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0xaffd}}, {{0xa, 0x4e21, 0x1000000, @mcast1, 0xd79}}]}, 0x210) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x1}, 0x10) ppoll(&(0x7f0000000580)=[{r7, 0x1508}], 0x1, &(0x7f00000005c0), 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001d00010324bd7002fadbdf250100000053e7daf8620347de9c21df4f94884c00c169b9a6cce9e2e5fe708ba4"], 0x14}}, 0xc004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) 2.574463907s ago: executing program 5 (id=665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001880)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.334513903s ago: executing program 4 (id=666): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004000, &(0x7f0000000240)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@user_subvol_rm}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x35, 0x39, 0x32, 0x38, 0x67, 0x2d, 0x2d, 0x37]}}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000340)={0x0, {0x50979c6b8b4af6fa, 0x0, 0x56, 0x2, 0xffffffffffffff60}}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.304268314s ago: executing program 5 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.036995754s ago: executing program 5 (id=668): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="88", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff7, @loopback, 0x43bc}, 0x1c) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x1, 0x1, 0x401, 0x1, "91179c"}}) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0xf, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x4d00, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x128}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @local, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd7}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.976326195s ago: executing program 1 (id=669): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="88", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff7, @loopback, 0x43bc}, 0x1c) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x1, 0x1, 0x401, 0x1, "91179c"}}) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0xf, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x4d00, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x128}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @local, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd7}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.928608131s ago: executing program 6 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c000280", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1.460346403s ago: executing program 6 (id=671): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) 1.221429629s ago: executing program 4 (id=672): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 698.066326ms ago: executing program 4 (id=673): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fspick(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket(0x28, 0x801, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) poll(0x0, 0x0, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 527.092896ms ago: executing program 5 (id=674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4071, 0xff7}], 0x1}, 0x6}], 0x400000000000294, 0x2101, 0x0) 501.865527ms ago: executing program 1 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) 386.098657ms ago: executing program 6 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0xa, 0x3, 0xff) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000002000)={0xa, 0x4e23, 0x5, @private2, 0x9}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9ca5700fa4e0aedc}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8001}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc2, 0xfffffffe}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000400)={0x1, 'macvlan1\x00'}, 0x18) 209.827128ms ago: executing program 1 (id=677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39", 0x3e}, {&(0x7f0000000ec0)}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x48}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 5 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0) r3 = syz_clone(0x2000000, &(0x7f00000024c0)="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", 0x55b, 0x0, 0x0, 0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000001380)='ns/uts\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x801) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='yeah', 0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)=0x80, 0x4) syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) ioperm(0x1, 0xfffffffffffdff07, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 81.900740][ T5819] cgroup: Unknown subsys name 'net' [ 82.021783][ T5819] cgroup: Unknown subsys name 'cpuset' [ 82.031250][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.604152][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.168267][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.183495][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.187918][ T30] cfg80211: failed to load regulatory.db [ 86.191392][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.205069][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.214018][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.221324][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.227917][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.236278][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.244949][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.259941][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.288105][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.297667][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.305183][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.315622][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.324252][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.331459][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.342395][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.342525][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.358098][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.365968][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.391755][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.406473][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.415516][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.424162][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.427335][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.432331][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.441574][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.449474][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.454802][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.472571][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.142969][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.319065][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.416338][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.597529][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.605574][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.613491][ T5834] bridge_slave_0: entered allmulticast mode [ 87.622487][ T5834] bridge_slave_0: entered promiscuous mode [ 87.650529][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.671979][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 87.685724][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.693613][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.701130][ T5834] bridge_slave_1: entered allmulticast mode [ 87.709105][ T5834] bridge_slave_1: entered promiscuous mode [ 87.770828][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.844100][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.852141][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.859678][ T5833] bridge_slave_0: entered allmulticast mode [ 87.867701][ T5833] bridge_slave_0: entered promiscuous mode [ 87.885571][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.931992][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.939818][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.947298][ T5833] bridge_slave_1: entered allmulticast mode [ 87.954987][ T5833] bridge_slave_1: entered promiscuous mode [ 87.978807][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.050952][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.058533][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.065984][ T5845] bridge_slave_0: entered allmulticast mode [ 88.074213][ T5845] bridge_slave_0: entered promiscuous mode [ 88.129290][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.137075][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.144350][ T5845] bridge_slave_1: entered allmulticast mode [ 88.152355][ T5845] bridge_slave_1: entered promiscuous mode [ 88.180488][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.200269][ T5834] team0: Port device team_slave_0 added [ 88.246060][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.264454][ T5834] team0: Port device team_slave_1 added [ 88.327919][ T51] Bluetooth: hci0: command tx timeout [ 88.327923][ T5853] Bluetooth: hci1: command tx timeout [ 88.364110][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.374031][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.381522][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.389103][ T5842] bridge_slave_0: entered allmulticast mode [ 88.397008][ T5842] bridge_slave_0: entered promiscuous mode [ 88.404810][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.412067][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.417881][ T51] Bluetooth: hci2: command tx timeout [ 88.419812][ T5851] bridge_slave_0: entered allmulticast mode [ 88.425229][ T5853] Bluetooth: hci3: command tx timeout [ 88.432873][ T5851] bridge_slave_0: entered promiscuous mode [ 88.456310][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.463518][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.471008][ T5844] bridge_slave_0: entered allmulticast mode [ 88.478674][ T5844] bridge_slave_0: entered promiscuous mode [ 88.502675][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.525091][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.532574][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.540238][ T5842] bridge_slave_1: entered allmulticast mode [ 88.549114][ T5842] bridge_slave_1: entered promiscuous mode [ 88.556245][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.563449][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.567206][ T5853] Bluetooth: hci5: command tx timeout [ 88.570869][ T51] Bluetooth: hci4: command tx timeout [ 88.578135][ T5851] bridge_slave_1: entered allmulticast mode [ 88.589759][ T5851] bridge_slave_1: entered promiscuous mode [ 88.613097][ T5833] team0: Port device team_slave_0 added [ 88.619296][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.626630][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.634281][ T5844] bridge_slave_1: entered allmulticast mode [ 88.642025][ T5844] bridge_slave_1: entered promiscuous mode [ 88.651235][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.658607][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.684813][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.737728][ T5833] team0: Port device team_slave_1 added [ 88.756275][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.763572][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.790399][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.804683][ T5845] team0: Port device team_slave_0 added [ 88.827270][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.872912][ T5845] team0: Port device team_slave_1 added [ 88.882092][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.895101][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.919533][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.932292][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.957405][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.979260][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.986427][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.012614][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.025804][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.033110][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.059371][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.153689][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.161108][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.187176][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.213895][ T5851] team0: Port device team_slave_0 added [ 89.240747][ T5834] hsr_slave_0: entered promiscuous mode [ 89.248706][ T5834] hsr_slave_1: entered promiscuous mode [ 89.260484][ T5844] team0: Port device team_slave_0 added [ 89.268075][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.275969][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.303212][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.324009][ T5842] team0: Port device team_slave_0 added [ 89.332431][ T5851] team0: Port device team_slave_1 added [ 89.341757][ T5844] team0: Port device team_slave_1 added [ 89.371311][ T5842] team0: Port device team_slave_1 added [ 89.443694][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.452244][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.479153][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.533584][ T5833] hsr_slave_0: entered promiscuous mode [ 89.541024][ T5833] hsr_slave_1: entered promiscuous mode [ 89.547668][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 89.553514][ T5833] Cannot create hsr debugfs directory [ 89.567960][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.575270][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.601708][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.613936][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.622179][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.648331][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.662885][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.670193][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.696574][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.752370][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.759430][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.786580][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.806684][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.814064][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.841595][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.885446][ T5845] hsr_slave_0: entered promiscuous mode [ 89.892425][ T5845] hsr_slave_1: entered promiscuous mode [ 89.899491][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 89.905228][ T5845] Cannot create hsr debugfs directory [ 90.047951][ T5844] hsr_slave_0: entered promiscuous mode [ 90.054752][ T5844] hsr_slave_1: entered promiscuous mode [ 90.061192][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 90.066976][ T5844] Cannot create hsr debugfs directory [ 90.118109][ T5842] hsr_slave_0: entered promiscuous mode [ 90.124873][ T5842] hsr_slave_1: entered promiscuous mode [ 90.131343][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 90.137270][ T5842] Cannot create hsr debugfs directory [ 90.192786][ T5851] hsr_slave_0: entered promiscuous mode [ 90.200367][ T5851] hsr_slave_1: entered promiscuous mode [ 90.207246][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 90.213112][ T5851] Cannot create hsr debugfs directory [ 90.408583][ T51] Bluetooth: hci0: command tx timeout [ 90.408599][ T5853] Bluetooth: hci1: command tx timeout [ 90.487503][ T51] Bluetooth: hci3: command tx timeout [ 90.487685][ T5853] Bluetooth: hci2: command tx timeout [ 90.648106][ T5853] Bluetooth: hci5: command tx timeout [ 90.648300][ T51] Bluetooth: hci4: command tx timeout [ 90.874961][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.889632][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.899718][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.910954][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.919466][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.930762][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.939448][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.950727][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.033355][ T5833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.044111][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.053304][ T5833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.064993][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.075077][ T5833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.084823][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.094052][ T5833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.104373][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.205879][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.216443][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.231917][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.244624][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.258901][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.269873][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.281252][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.292520][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.412667][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.424247][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.436589][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.451728][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.462589][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.471130][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.482326][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.491190][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.501996][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.612001][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.629288][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.640658][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.652458][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.661363][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.671128][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.679775][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.691084][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.700096][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.710905][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.762077][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.770366][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.809896][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.817105][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.839843][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.902051][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.909248][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.969945][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.980877][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.989643][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.002146][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.024099][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.031452][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.040547][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.053074][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.062454][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.073883][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.122981][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.220368][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.295217][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.302893][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.334721][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.384360][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.391670][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.449092][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.487190][ T51] Bluetooth: hci0: command tx timeout [ 92.487207][ T5853] Bluetooth: hci1: command tx timeout [ 92.511318][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.560170][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.567514][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.575250][ T51] Bluetooth: hci2: command tx timeout [ 92.581025][ T5853] Bluetooth: hci3: command tx timeout [ 92.596563][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.623987][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.648618][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.655914][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.682353][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.689760][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.727049][ T51] Bluetooth: hci4: command tx timeout [ 92.729156][ T5853] Bluetooth: hci5: command tx timeout [ 92.743248][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.753030][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.760206][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.866790][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.884889][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.973228][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.980480][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.044999][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.052349][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.089634][ T5834] veth0_vlan: entered promiscuous mode [ 93.163437][ T5834] veth1_vlan: entered promiscuous mode [ 93.409681][ T5834] veth0_macvtap: entered promiscuous mode [ 93.463511][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.491190][ T5834] veth1_macvtap: entered promiscuous mode [ 93.632877][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.668786][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.685385][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.755281][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.770968][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.786607][ T139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.803328][ T5845] veth0_vlan: entered promiscuous mode [ 93.815380][ T139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.826809][ T139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.887468][ T5833] veth0_vlan: entered promiscuous mode [ 93.896197][ T5845] veth1_vlan: entered promiscuous mode [ 93.946302][ T5833] veth1_vlan: entered promiscuous mode [ 94.000950][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.122508][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.142002][ T5842] veth0_vlan: entered promiscuous mode [ 94.146067][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.210108][ T5833] veth0_macvtap: entered promiscuous mode [ 94.223119][ T5833] veth1_macvtap: entered promiscuous mode [ 94.241031][ T5845] veth0_macvtap: entered promiscuous mode [ 94.254528][ T5842] veth1_vlan: entered promiscuous mode [ 94.266435][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.282961][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.301141][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.326780][ T5845] veth1_macvtap: entered promiscuous mode [ 94.359107][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.390728][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.419131][ T5851] veth0_vlan: entered promiscuous mode [ 94.446358][ T147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.486812][ T5842] veth0_macvtap: entered promiscuous mode [ 94.513990][ T147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524518][ T147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.542751][ T5851] veth1_vlan: entered promiscuous mode [ 94.550749][ T147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.568147][ T5853] Bluetooth: hci1: command tx timeout [ 94.574356][ T5853] Bluetooth: hci0: command tx timeout [ 94.592444][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.602295][ T5842] veth1_macvtap: entered promiscuous mode [ 94.647316][ T5853] Bluetooth: hci2: command tx timeout [ 94.653620][ T51] Bluetooth: hci3: command tx timeout [ 94.676156][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.686247][ T5844] veth0_vlan: entered promiscuous mode [ 94.754711][ T93] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.787805][ T93] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.799079][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811128][ T51] Bluetooth: hci5: command tx timeout [ 94.817118][ T5853] Bluetooth: hci4: command tx timeout [ 94.836305][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.880926][ T5981] afs: Unknown parameter 'dy' [ 94.956521][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.971206][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.990973][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.999085][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.197162][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.215894][ T5844] veth1_vlan: entered promiscuous mode [ 95.237896][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.295589][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.308626][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.360913][ T5851] veth0_macvtap: entered promiscuous mode [ 95.498372][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.513363][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.542488][ T5851] veth1_macvtap: entered promiscuous mode [ 96.687343][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.733260][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.768848][ T5844] veth0_macvtap: entered promiscuous mode [ 97.784562][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 97.800003][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.869754][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.086219][ T5844] veth1_macvtap: entered promiscuous mode [ 98.929322][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.939424][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.985991][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.013151][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.245677][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.264527][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.314203][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.415092][ T6008] 9pnet_virtio: no channels available for device syz [ 100.244499][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.292220][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.343183][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.427607][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.437271][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.481590][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.495567][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.656255][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.689644][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.778974][ T6019] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 101.032685][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.090419][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.106479][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.146146][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.544696][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.591976][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.715649][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.736532][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.820267][ T6034] netlink: 308 bytes leftover after parsing attributes in process `syz.0.15'. [ 102.843974][ T6027] lo speed is unknown, defaulting to 1000 [ 102.859989][ T6034] netlink: 308 bytes leftover after parsing attributes in process `syz.0.15'. [ 103.009581][ T6037] loop3: detected capacity change from 0 to 1024 [ 103.022232][ T6037] ======================================================= [ 103.022232][ T6037] WARNING: The mand mount option has been deprecated and [ 103.022232][ T6037] and is ignored by this kernel. Remove the mand [ 103.022232][ T6037] option from the mount to silence this warning. [ 103.022232][ T6037] ======================================================= [ 103.845702][ T6027] lo speed is unknown, defaulting to 1000 [ 103.868755][ T6034] Zero length message leads to an empty skb [ 103.875114][ T6037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.901533][ T6037] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 104.905051][ T6037] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.4: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.919567][ T6037] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 104.923889][ T6037] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 104.933413][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 104.933521][ C0] EXT4-fs (loop3): initial error at time 1776769339: ext4_map_blocks:791: inode 3: block 2 [ 104.933580][ C0] EXT4-fs (loop3): last error at time 1776769339: ext4_map_blocks:791: inode 3: block 2 [ 104.971441][ T6037] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.4: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.986013][ T6037] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.008581][ T6037] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 105.027142][ T6037] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4: Failed to acquire dquot type 0 [ 105.038955][ T6037] loop3: lost filesystem error report for type 5 error -117 [ 105.884441][ T6037] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 105.903306][ T6037] loop3: lost filesystem error report for type 5 error -117 [ 105.909021][ T6037] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.4: mark_inode_dirty error [ 105.928814][ T6037] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.929636][ T6037] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 105.950081][ T6037] EXT4-fs (loop3): 1 orphan inode deleted [ 105.957751][ T6037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.207563][ T6027] lo speed is unknown, defaulting to 1000 [ 106.219365][ T1114] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.305654][ T1114] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 106.321548][ T6033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.331098][ T6027] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 106.335910][ T1114] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 0 [ 106.352183][ T6033] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 106.553056][ T6027] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 106.599676][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.648297][ T6048] afs: Unknown parameter 'dy' [ 106.901187][ T6027] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 106.929053][ T5842] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 106.971084][ T6027] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.978767][ T5842] loop3: lost filesystem error report for type 5 error -117 [ 106.980713][ T5842] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 107.029049][ T6027] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 107.044356][ T5842] loop3: lost filesystem error report for type 5 error -117 [ 107.051730][ T5842] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 107.257967][ T5842] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.345018][ T6027] lo speed is unknown, defaulting to 1000 [ 107.702621][ T6057] futex_wake_op: syz.0.20 tries to shift op by -1; fix this program [ 107.723473][ T6059] fuse: Bad value for 'fd' [ 108.412457][ T6027] lo speed is unknown, defaulting to 1000 [ 108.481987][ T6027] lo speed is unknown, defaulting to 1000 [ 108.603111][ T6027] lo speed is unknown, defaulting to 1000 [ 109.583362][ T6060] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.630193][ T6064] loop4: detected capacity change from 0 to 2048 [ 109.642752][ T6060] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 110.019994][ T6073] 9pnet_virtio: no channels available for device syz [ 112.641879][ T6027] lo speed is unknown, defaulting to 1000 [ 112.690605][ T6064] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 112.738990][ T31] audit: type=1800 audit(1776769347.773:2): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 112.739460][ T6073] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 112.772993][ T6073] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 112.783011][ T6073] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 112.965074][ T6027] lo speed is unknown, defaulting to 1000 [ 113.006467][ T6066] siw: device registration error -23 [ 113.012555][ T6072] siw: device registration error -23 [ 114.512974][ T6090] tipc: Started in network mode [ 114.770755][ T6090] tipc: Node identity 560452eb50f2, cluster identity 4711 [ 115.618401][ T6090] tipc: Enabled bearer , priority 0 [ 115.794677][ T6101] syzkaller0: entered promiscuous mode [ 115.807995][ T6101] syzkaller0: entered allmulticast mode [ 116.241562][ T6116] afs: Unknown parameter 'dy' [ 117.255105][ T30] tipc: Node number set to 116806379 [ 117.304668][ T6101] tipc: Resetting bearer [ 117.784394][ T6119] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.794796][ T6120] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 118.080285][ T6086] tipc: Resetting bearer [ 118.235594][ T6128] loop5: detected capacity change from 0 to 2048 [ 118.264298][ T6086] tipc: Disabling bearer [ 119.907699][ T6128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.334073][ T6155] netlink: 308 bytes leftover after parsing attributes in process `syz.1.44'. [ 120.396804][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 120.755931][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.146194][ T6167] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.155645][ T6167] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 121.408085][ T6170] afs: Unknown parameter 'dy' [ 121.807604][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 122.002305][ T10] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 122.042310][ T10] usb 6-1: config index 0 descriptor too short (expected 65505, got 72) [ 122.064666][ T10] usb 6-1: config index 1 descriptor too short (expected 65505, got 72) [ 122.272472][ T10] usb 6-1: config index 2 descriptor too short (expected 65505, got 72) [ 122.301522][ T10] usb 6-1: config index 3 descriptor too short (expected 65505, got 72) [ 122.313557][ T10] usb 6-1: config index 4 descriptor too short (expected 65505, got 72) [ 123.081899][ T10] usb 6-1: config index 5 descriptor too short (expected 65505, got 72) [ 123.130595][ T10] usb 6-1: config index 6 descriptor too short (expected 65505, got 72) [ 123.165915][ T10] usb 6-1: config index 7 descriptor too short (expected 65505, got 72) [ 123.195591][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 123.226525][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.254490][ T10] usb 6-1: Product: syz [ 123.269339][ T10] usb 6-1: Manufacturer: syz [ 123.285064][ T10] usb 6-1: SerialNumber: syz [ 123.399435][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 123.453068][ T5911] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 124.654391][ T5911] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 124.662439][ T5911] ath9k_htc: Failed to initialize the device [ 124.708412][ T5911] usb 6-1: ath9k_htc: USB layer deinitialized [ 124.952134][ T6204] netlink: 308 bytes leftover after parsing attributes in process `syz.3.59'. [ 125.401693][ T6207] loop3: detected capacity change from 0 to 128 [ 125.516595][ T6207] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 125.559988][ T6207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.664369][ T6207] fuse: Bad value for 'fd' [ 126.365008][ T30] usb 6-1: USB disconnect, device number 2 [ 126.402371][ T6218] loop3: detected capacity change from 0 to 1024 [ 126.422293][ T6218] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=1 [ 126.431873][ T6218] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 126.446839][ T6218] EXT4-fs (loop3): mount failed [ 127.378487][ T6231] afs: Unknown parameter 'dy' [ 130.600807][ T6253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.623749][ T6253] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 132.269138][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.277630][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.433416][ T6272] 9pnet_virtio: no channels available for device syz [ 133.306622][ T6272] syz.4.76 (6272) used greatest stack depth: 17120 bytes left [ 133.637435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.046982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.430722][ T6279] loop4: detected capacity change from 0 to 1024 [ 134.471219][ T6279] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1 [ 134.480741][ T6279] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 134.496404][ T6279] EXT4-fs (loop4): mount failed [ 134.727838][ T5941] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.888725][ T5941] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 134.922123][ T5941] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 134.949474][ T5941] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 134.986104][ T5941] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 135.026455][ T5941] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 135.307265][ T6291] afs: Unknown parameter 'dy' [ 135.323085][ T5941] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 136.333594][ T5941] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 136.576651][ T5941] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 136.587429][ T5941] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 136.613040][ T5941] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.648650][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.691278][ T5941] usb 2-1: Product: syz [ 136.707476][ T5941] usb 2-1: Manufacturer: syz [ 136.720826][ T5941] usb 2-1: SerialNumber: syz [ 136.978769][ T6310] futex_wake_op: syz.3.87 tries to shift op by -1; fix this program [ 137.986798][ T6314] futex_wake_op: syz.5.88 tries to shift op by -1; fix this program [ 138.173227][ T5941] usb 2-1: can't set config #1, error -71 [ 138.239417][ T5941] usb 2-1: USB disconnect, device number 2 [ 138.904158][ T6324] syzkaller0: entered promiscuous mode [ 138.909957][ T6324] syzkaller0: entered allmulticast mode [ 139.186707][ T6332] loop1: detected capacity change from 0 to 128 [ 139.246635][ T6332] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 139.342581][ T6332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.420384][ T6332] fuse: Bad value for 'fd' [ 141.701104][ T6357] afs: Unknown parameter 'dy' [ 143.248179][ T6363] block nbd0: server does not support multiple connections per device. [ 143.300563][ T6363] block nbd0: shutting down sockets [ 143.777621][ T6367] input: syz1 as /devices/virtual/input/input5 [ 143.788283][ T6369] futex_wake_op: syz.1.104 tries to shift op by -1; fix this program [ 144.819536][ T6386] netlink: 'syz.3.111': attribute type 11 has an invalid length. [ 148.988203][ T6421] futex_wake_op: syz.3.120 tries to shift op by -1; fix this program [ 149.412536][ T6432] futex_wake_op: syz.0.125 tries to shift op by -1; fix this program [ 152.120139][ T6452] loop2: detected capacity change from 0 to 2048 [ 152.237479][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 152.392640][ T6452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.611568][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.980276][ T6469] loop0: detected capacity change from 0 to 4096 [ 153.117053][ T5915] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 154.143499][ T6486] futex_wake_op: syz.2.141 tries to shift op by -1; fix this program [ 154.245394][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.281247][ T5915] usb 2-1: config 1 has an invalid interface number: 118 but max is 0 [ 154.319750][ T5915] usb 2-1: config 1 has no interface number 0 [ 154.735083][ T5915] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 154.760933][ T5915] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 154.811305][ T5915] usb 2-1: config 1 interface 118 has no altsetting 0 [ 154.838695][ T5915] usb 2-1: string descriptor 0 read error: -22 [ 154.850209][ T5915] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 154.889987][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.235913][ T6472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.324496][ T5915] kobil_sct 2-1:1.118: KOBIL USB smart card terminal converter detected [ 155.611073][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'. [ 155.994840][ T5915] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 156.112504][ T5915] usb 2-1: USB disconnect, device number 3 [ 156.401392][ T5915] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 157.141367][ T5915] kobil_sct 2-1:1.118: device disconnected [ 157.590833][ T6515] tipc: Started in network mode [ 157.622946][ T6515] tipc: Node identity fff, cluster identity 10 [ 157.627497][ T6512] loop2: detected capacity change from 0 to 2048 [ 157.636735][ T6515] tipc: Node number set to 4095 [ 157.658165][ T6515] tipc: Cannot configure node identity twice [ 157.745958][ T6512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.205821][ T6527] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.233068][ T6527] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 159.170758][ T6540] futex_wake_op: syz.1.156 tries to shift op by -1; fix this program [ 161.007370][ T6522] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 162.340260][ T6568] loop4: detected capacity change from 0 to 4096 [ 163.419519][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.605628][ T6583] futex_wake_op: syz.1.167 tries to shift op by -1; fix this program [ 168.900457][ T6626] loop2: detected capacity change from 0 to 1024 [ 168.935818][ T6626] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1 [ 168.945832][ T6626] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 168.971690][ T6626] EXT4-fs (loop2): mount failed [ 170.697043][ T5911] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 171.649082][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.671987][ T5911] usb 4-1: config 1 has an invalid interface number: 118 but max is 0 [ 171.698551][ T5911] usb 4-1: config 1 has no interface number 0 [ 171.716993][ T5911] usb 4-1: config 1 interface 118 has no altsetting 0 [ 171.741956][ T5911] usb 4-1: string descriptor 0 read error: -22 [ 171.759833][ T5911] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 171.799971][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.877454][ T5911] kobil_sct 4-1:1.118: required endpoints missing [ 171.888716][ T6668] input: syz1 as /devices/virtual/input/input7 [ 172.011492][ T6673] futex_wake_op: syz.2.195 tries to shift op by -1; fix this program [ 172.118057][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 172.153244][ T6677] syz.4.193 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 172.166609][ T6677] ubi31: attaching mtd0 [ 172.180446][ T6677] ubi31: scanning is finished [ 172.185984][ T6677] ubi31: empty MTD device detected [ 172.290528][ T6677] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 172.299164][ T6677] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 172.306574][ T6677] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 172.313674][ T6677] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 172.321183][ T6677] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 172.328094][ T6677] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 172.336474][ T6677] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3544177261 [ 172.347589][ T6677] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 172.360360][ T6680] ubi31: background thread "ubi_bgt31d" started, PID 6680 [ 172.385116][ T5915] usb 4-1: USB disconnect, device number 2 [ 174.560756][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 176.359572][ T6704] loop0: detected capacity change from 0 to 1024 [ 176.493214][ T6704] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=1 [ 176.522294][ T6704] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 176.564530][ T6704] EXT4-fs (loop0): mount failed [ 177.677594][ T5915] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 177.856191][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.888820][ T5915] usb 2-1: config 1 has an invalid interface number: 118 but max is 0 [ 177.917749][ T5915] usb 2-1: config 1 has no interface number 0 [ 177.935869][ T5915] usb 2-1: config 1 interface 118 has no altsetting 0 [ 177.962920][ T5915] usb 2-1: string descriptor 0 read error: -22 [ 177.969710][ T5915] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 177.983174][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.742523][ T5915] kobil_sct 2-1:1.118: required endpoints missing [ 179.473408][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 179.557281][ T803] usb 2-1: USB disconnect, device number 4 [ 180.021604][ T6748] 9pnet_virtio: no channels available for device syz [ 184.316690][ T6787] Bluetooth: MGMT ver 1.23 [ 184.995961][ T6793] futex_wake_op: syz.3.233 tries to shift op by -1; fix this program [ 185.895969][ T6802] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.027921][ T6802] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 187.646806][ T6831] netlink: 'syz.1.247': attribute type 11 has an invalid length. [ 188.528676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 188.547206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 188.719433][ T6837] loop0: detected capacity change from 0 to 2048 [ 189.838653][ T6837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.863513][ T6844] tipc: Started in network mode [ 189.908824][ T6844] tipc: Node identity 3642b93ead38, cluster identity 4711 [ 189.967412][ T6844] tipc: Enabled bearer , priority 0 [ 190.147776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 190.258406][ T6849] tipc: Resetting bearer [ 191.030894][ T6841] tipc: Disabling bearer [ 191.084262][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.164163][ T803] tipc: Node number set to 2608511294 [ 192.080320][ T6884] netlink: 'syz.4.264': attribute type 11 has an invalid length. [ 192.859674][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 193.692215][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.700211][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.912192][ T6906] futex_wake_op: syz.5.271 tries to shift op by -1; fix this program [ 197.350372][ T6929] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.412501][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 200.607008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 202.018134][ T6969] futex_wake_op: syz.5.286 tries to shift op by -1; fix this program [ 202.143329][ T6969] fuse: Bad value for 'fd' [ 203.534384][ T6978] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.656940][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.668426][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.676318][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.688733][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 203.698093][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.854832][ T6995] netlink: 'syz.1.293': attribute type 11 has an invalid length. [ 205.271168][ T6992] fuse: Bad value for 'fd' [ 205.476574][ T6979] lo speed is unknown, defaulting to 1000 [ 205.778812][ T51] Bluetooth: hci6: command tx timeout [ 207.854661][ T51] Bluetooth: hci6: command tx timeout [ 209.292336][ T7034] ubi: mtd0 is already attached to ubi31 [ 209.356308][ T7037] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.598929][ T6979] chnl_net:caif_netlink_parms(): no params data found [ 209.927552][ T7033] Bluetooth: hci6: command tx timeout [ 210.138958][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.156600][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.173009][ T6979] bridge_slave_0: entered allmulticast mode [ 210.194776][ T6979] bridge_slave_0: entered promiscuous mode [ 210.213173][ T7041] batadv_slave_1: entered promiscuous mode [ 210.229382][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.257114][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.274949][ T6979] bridge_slave_1: entered allmulticast mode [ 210.288828][ T6979] bridge_slave_1: entered promiscuous mode [ 210.306454][ T7039] batadv_slave_1: left promiscuous mode [ 210.450611][ T7053] bpq0: entered promiscuous mode [ 210.507937][ T6979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.501560][ T6979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.807443][ T7033] Bluetooth: hci1: command 0x0406 tx timeout [ 212.814846][ T7033] Bluetooth: hci0: command 0x0406 tx timeout [ 212.820966][ T7033] Bluetooth: hci2: command 0x0406 tx timeout [ 212.827130][ T7033] Bluetooth: hci3: command 0x0406 tx timeout [ 212.833150][ T7033] Bluetooth: hci5: command 0x0406 tx timeout [ 212.840820][ T7033] Bluetooth: hci6: command tx timeout [ 214.924936][ T6979] team0: Port device team_slave_0 added [ 214.979391][ T6979] team0: Port device team_slave_1 added [ 215.231522][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.421838][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.567478][ T6979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.605348][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.625774][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.147551][ T6979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.187080][ T7090] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.228400][ T7090] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.441387][ T6979] hsr_slave_0: entered promiscuous mode [ 216.702005][ T6979] hsr_slave_1: entered promiscuous mode [ 216.716291][ T6979] debugfs: 'hsr0' already exists in 'hsr' [ 216.727566][ T6979] Cannot create hsr debugfs directory [ 217.458739][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 217.641425][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.687281][ T10] usb 3-1: config 1 has an invalid interface number: 118 but max is 0 [ 217.736526][ T10] usb 3-1: config 1 has no interface number 0 [ 217.764832][ T7112] ubi: mtd0 is already attached to ubi31 [ 217.771463][ T10] usb 3-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 217.834063][ T10] usb 3-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 217.937378][ T7115] 9pnet_virtio: no channels available for device syz [ 218.509071][ T10] usb 3-1: config 1 interface 118 has no altsetting 0 [ 220.097118][ T7115] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 220.106624][ T7115] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 220.116373][ T7115] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 220.519683][ T10] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 220.601266][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.744934][ T10] usb 3-1: can't set config #1, error -71 [ 220.776319][ T10] usb 3-1: USB disconnect, device number 2 [ 221.224867][ T7142] loop4: detected capacity change from 0 to 4096 [ 221.256165][ T7143] loop2: detected capacity change from 0 to 4096 [ 221.718481][ T5853] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 222.028323][ T6979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.048141][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.346421][ T6979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.478162][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.555496][ T6979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.650707][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.671259][ T6979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.720308][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.311480][ T7170] loop5: detected capacity change from 0 to 2048 [ 223.313586][ T6979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.004308][ T5911] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 224.161981][ T6979] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.184320][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.208239][ T5911] usb 2-1: config 1 has an invalid interface number: 118 but max is 0 [ 224.218455][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.225597][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.229353][ T7170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.236251][ T5911] usb 2-1: config 1 has no interface number 0 [ 224.268183][ T5911] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 224.273665][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.286603][ T7073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.288043][ T5911] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 224.305211][ T5911] usb 2-1: config 1 interface 118 has no altsetting 0 [ 224.514612][ T7187] loop0: detected capacity change from 0 to 4096 [ 225.785400][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.944539][ T7198] process 'syz.4.349' launched './file1' with NULL argv: empty string added [ 228.427185][ T5853] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 228.682356][ T5911] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 228.702753][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.895018][ T5911] usb 2-1: can't set config #1, error -71 [ 228.991159][ T5911] usb 2-1: USB disconnect, device number 5 [ 229.264491][ T6979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.306060][ T7231] loop0: detected capacity change from 0 to 128 [ 230.345854][ T7231] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 230.425963][ T7231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.494556][ T7231] fuse: Unknown parameter '0xffffffffffffffff' [ 231.737036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 232.719227][ T7254] block nbd0: server does not support multiple connections per device. [ 232.911424][ T7254] block nbd0: shutting down sockets [ 232.979763][ T7257] 9p: Bad value for 'wfdno' [ 233.042747][ T7257] loop0: detected capacity change from 0 to 128 [ 233.142751][ T6979] veth0_vlan: entered promiscuous mode [ 233.174170][ T6979] veth1_vlan: entered promiscuous mode [ 233.327997][ T7257] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.336286][ T6979] veth0_macvtap: entered promiscuous mode [ 233.972182][ T6979] veth1_macvtap: entered promiscuous mode [ 234.072447][ T7257] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.086141][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.356031][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.422602][ T5853] Bluetooth: hci5: unexpected event for opcode 0x2006 [ 234.444879][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.471764][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.742212][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.796557][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.016619][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.113831][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.235504][ T5834] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.308752][ T6663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.344620][ T6663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.261234][ T7299] netlink: 'syz.6.375': attribute type 10 has an invalid length. [ 238.402296][ T7299] veth0_vlan: left promiscuous mode [ 238.447249][ T7299] veth0_vlan: entered promiscuous mode [ 238.544335][ T7299] team0: Device veth0_vlan failed to register rx_handler [ 239.698470][ T30] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 240.522403][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 240.549484][ T30] usb 7-1: config 255 has an invalid interface number: 2 but max is 1 [ 240.557967][ T30] usb 7-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 240.569086][ T30] usb 7-1: config 255 has no interface number 0 [ 240.576165][ T30] usb 7-1: config 255 interface 2 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 240.588459][ T30] usb 7-1: config 255 interface 2 has no altsetting 0 [ 240.601025][ T30] usb 7-1: string descriptor 0 read error: -22 [ 240.608839][ T30] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1e.2d [ 240.619148][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.741886][ T30] as10x_usb: device has been detected [ 240.773702][ T30] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 240.999129][ T5853] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 241.784407][ T30] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 242.551627][ T7325] 9p: Bad value for 'wfdno' [ 242.657794][ T30] as10x_usb: error during firmware upload part1 [ 242.663052][ T7325] loop0: detected capacity change from 0 to 128 [ 242.664731][ T30] Registered device Abilis Systems DVB-Titan [ 242.682347][ T30] usb 7-1: USB disconnect, device number 2 [ 242.722755][ T30] Unregistered device Abilis Systems DVB-Titan [ 242.752582][ T7325] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.780097][ T30] as10x_usb: device has been disconnected [ 242.821144][ T7325] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.966371][ T7325] syz.0.382 (pid 7325) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 243.501839][ T7325] fscrypt: key with descriptor e8dab99234bb312e is too short (got 17 bytes, need 32+ bytes) [ 243.835663][ T7343] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 243.859920][ T7343] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 244.773504][ T5834] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.507016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 248.393652][ T7375] Bluetooth: MGMT ver 1.23 [ 251.927398][ T7393] siw: device registration error -23 [ 252.619968][ T7403] tipc: Started in network mode [ 252.677539][ T7403] tipc: Node identity 16fa86f8e65d, cluster identity 4711 [ 252.723716][ T7403] tipc: Enabled bearer , priority 0 [ 252.768888][ T7406] syzkaller0: entered promiscuous mode [ 252.802447][ T7406] syzkaller0: entered allmulticast mode [ 252.962787][ T7402] tipc: Resetting bearer [ 253.051937][ T7402] tipc: Disabling bearer [ 254.471857][ T5853] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 255.722537][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.733502][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.542607][ T7462] siw: device registration error -23 [ 260.007263][ T5853] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 261.221889][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 263.100274][ T5154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.112549][ T5154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.120781][ T5154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.129066][ T5154] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.153653][ T5154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.223978][ T7490] lo speed is unknown, defaulting to 1000 [ 265.207002][ T5154] Bluetooth: hci7: command tx timeout [ 265.397518][ T7513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.428559][ T7513] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 265.688335][ T7527] loop2: detected capacity change from 0 to 128 [ 265.732060][ T7527] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 265.754822][ T7490] chnl_net:caif_netlink_parms(): no params data found [ 265.770467][ T7527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.803483][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 265.868865][ T7527] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 266.297034][ T7536] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.932155][ T7536] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.288319][ T5154] Bluetooth: hci7: command tx timeout [ 268.280573][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.320364][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 268.333500][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.365548][ T7490] bridge_slave_0: entered allmulticast mode [ 268.411453][ T7490] bridge_slave_0: entered promiscuous mode [ 268.469683][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 268.560339][ T7073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.740425][ T7073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.762907][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.770969][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.780280][ T7490] bridge_slave_1: entered allmulticast mode [ 268.790249][ T7490] bridge_slave_1: entered promiscuous mode [ 268.966065][ T7073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.096418][ T7563] netlink: 'syz.4.449': attribute type 10 has an invalid length. [ 269.262131][ T7565] fuse: Bad value for 'fd' [ 269.377547][ T5853] Bluetooth: hci7: command tx timeout [ 269.391257][ T7490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.228020][ T7563] veth0_vlan: left promiscuous mode [ 270.268720][ T7563] veth0_vlan: entered promiscuous mode [ 270.298800][ T7563] team0: Device veth0_vlan failed to register rx_handler [ 270.380053][ T5911] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 270.580317][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.762367][ T5911] usb 5-1: config 255 has an invalid interface number: 2 but max is 1 [ 270.932515][ T5911] usb 5-1: config 255 has an invalid interface number: 88 but max is 1 [ 271.096944][ T5911] usb 5-1: config 255 has no interface number 0 [ 271.172900][ T5911] usb 5-1: config 255 has no interface number 1 [ 271.219835][ T5911] usb 5-1: config 255 interface 2 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 271.242590][ T7073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.294822][ T5911] usb 5-1: too many endpoints for config 255 interface 88 altsetting 8: 234, using maximum allowed: 30 [ 271.328833][ T5911] usb 5-1: config 255 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 271.344007][ T5911] usb 5-1: config 255 interface 2 has no altsetting 0 [ 271.351248][ T5911] usb 5-1: config 255 interface 88 has no altsetting 0 [ 271.383563][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 271.402383][ T7490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.416034][ T5911] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1e.2d [ 271.438331][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.448008][ T5853] Bluetooth: hci7: command tx timeout [ 271.504687][ T5911] as10x_usb: device has been detected [ 271.520799][ T5911] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 271.574116][ T5911] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 271.727727][ T7490] team0: Port device team_slave_0 added [ 272.417494][ T7490] team0: Port device team_slave_1 added [ 272.422945][ T5911] as10x_usb: error during firmware upload part1 [ 272.478133][ T5911] Registered device Abilis Systems DVB-Titan [ 272.542648][ T5911] as10x_usb: device has been detected [ 272.587913][ T5911] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 272.655369][ T5911] usb 5-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 272.675815][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.678669][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.458'. [ 272.712065][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.746322][ T5911] as10x_usb: error during firmware upload part1 [ 272.777442][ T5911] Registered device Abilis Systems DVB-Titan [ 272.789314][ T5911] usb 5-1: USB disconnect, device number 2 [ 272.842179][ T7490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.946331][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.971527][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.019434][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 273.031149][ T7490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.100865][ T5911] Unregistered device Abilis Systems DVB-Titan [ 273.143906][ T5911] as10x_usb: device has been disconnected [ 273.428810][ T7616] siw: device registration error -23 [ 274.373949][ T5911] Unregistered device Abilis Systems DVB-Titan [ 274.413432][ T5911] as10x_usb: device has been disconnected [ 274.623409][ T7490] hsr_slave_0: entered promiscuous mode [ 274.640870][ T7490] hsr_slave_1: entered promiscuous mode [ 274.836224][ T7490] debugfs: 'hsr0' already exists in 'hsr' [ 274.990637][ T7490] Cannot create hsr debugfs directory [ 275.035087][ T7624] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.447326][ T7624] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.984643][ T7639] netlink: 'syz.2.472': attribute type 10 has an invalid length. [ 276.288893][ T7631] capability: warning: `syz.5.467' uses 32-bit capabilities (legacy support in use) [ 277.035617][ T7639] veth0_vlan: left promiscuous mode [ 277.075395][ T7639] veth0_vlan: entered promiscuous mode [ 277.121515][ T7639] team0: Device veth0_vlan failed to register rx_handler [ 277.177019][ T5948] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 277.190971][ T7643] bpq0: left promiscuous mode [ 277.342403][ T7073] bridge_slave_1: left allmulticast mode [ 277.362085][ T5948] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.369705][ T7073] bridge_slave_1: left promiscuous mode [ 277.403997][ T5948] usb 3-1: config 255 has an invalid interface number: 2 but max is 1 [ 277.411880][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.451072][ T5948] usb 3-1: config 255 has an invalid interface number: 88 but max is 1 [ 277.499834][ T5948] usb 3-1: config 255 has no interface number 0 [ 277.507635][ T7073] bridge_slave_0: left allmulticast mode [ 277.523140][ T5948] usb 3-1: config 255 has no interface number 1 [ 277.541235][ T7073] bridge_slave_0: left promiscuous mode [ 277.547732][ T5948] usb 3-1: config 255 interface 2 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 277.573806][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.590594][ T5948] usb 3-1: too many endpoints for config 255 interface 88 altsetting 8: 234, using maximum allowed: 30 [ 277.636387][ T5948] usb 3-1: config 255 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 277.667982][ T5948] usb 3-1: config 255 interface 2 has no altsetting 0 [ 277.675201][ T5948] usb 3-1: config 255 interface 88 has no altsetting 0 [ 277.690565][ T5948] usb 3-1: string descriptor 0 read error: -22 [ 277.698394][ T5948] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1e.2d [ 277.726707][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.798210][ T5948] as10x_usb: device has been detected [ 277.812109][ T5948] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 277.874233][ T5948] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 277.904461][ T5948] as10x_usb: error during firmware upload part1 [ 277.912281][ T5948] Registered device Abilis Systems DVB-Titan [ 277.968050][ T5948] as10x_usb: device has been detected [ 278.227282][ T5948] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 278.594421][ T5948] usb 3-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 278.629486][ T5948] as10x_usb: error during firmware upload part1 [ 278.679936][ T5948] Registered device Abilis Systems DVB-Titan [ 278.721123][ T5948] usb 3-1: USB disconnect, device number 3 [ 278.812289][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 278.858164][ T5948] Unregistered device Abilis Systems DVB-Titan [ 278.879133][ T5948] as10x_usb: device has been disconnected [ 279.072389][ T5948] Unregistered device Abilis Systems DVB-Titan [ 279.089492][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.479'. [ 279.451210][ T5948] as10x_usb: device has been disconnected [ 280.008836][ T7073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.093481][ T7073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.136788][ T7073] bond0 (unregistering): Released all slaves [ 281.309637][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 281.819053][ T5498] 8021q: adding VLAN 0 to HW filter on device eth1 [ 282.828465][ T7712] siw: device registration error -23 [ 282.925175][ T7718] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 283.438772][ T7718] veth0_vlan: left promiscuous mode [ 283.460296][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.492'. [ 283.511065][ T7718] veth0_vlan: entered promiscuous mode [ 283.565879][ T7718] team0: Device veth0_vlan failed to register rx_handler [ 283.573875][ T5948] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 283.747094][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 283.773735][ T5948] usb 5-1: config 255 has an invalid interface number: 2 but max is 1 [ 283.809010][ T5948] usb 5-1: config 255 has an invalid interface number: 88 but max is 1 [ 283.818665][ T5948] usb 5-1: config 255 has no interface number 0 [ 283.830127][ T5948] usb 5-1: config 255 has no interface number 1 [ 283.863051][ T5948] usb 5-1: config 255 interface 2 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 283.896853][ T5948] usb 5-1: too many endpoints for config 255 interface 88 altsetting 8: 234, using maximum allowed: 30 [ 283.935771][ T5948] usb 5-1: config 255 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 283.958226][ T5948] usb 5-1: config 255 interface 2 has no altsetting 0 [ 283.966637][ T5948] usb 5-1: config 255 interface 88 has no altsetting 0 [ 283.996997][ T5948] usb 5-1: string descriptor 0 read error: -22 [ 284.012780][ T5948] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1e.2d [ 284.059371][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.139971][ T5948] as10x_usb: device has been detected [ 284.168678][ T5948] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 284.171900][ T7739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.186376][ T7739] IPv6: NLM_F_CREATE should be set when creating new route [ 284.213954][ T5948] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 284.365899][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 285.162470][ T5948] as10x_usb: error during firmware upload part1 [ 285.482061][ T5948] Registered device Abilis Systems DVB-Titan [ 285.494979][ T5948] as10x_usb: device has been detected [ 285.511126][ T5948] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 285.571687][ T5948] usb 5-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 285.664366][ T7073] hsr_slave_0: left promiscuous mode [ 285.733594][ T7073] hsr_slave_1: left promiscuous mode [ 285.763175][ T5948] as10x_usb: error during firmware upload part1 [ 285.777075][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.811005][ T5948] Registered device Abilis Systems DVB-Titan [ 285.839041][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.861213][ T5948] usb 5-1: USB disconnect, device number 3 [ 285.962330][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.983966][ T7763] netlink: 'syz.2.499': attribute type 2 has an invalid length. [ 286.013274][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.053690][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 286.055761][ T5948] Unregistered device Abilis Systems DVB-Titan [ 286.151226][ T5948] as10x_usb: device has been disconnected [ 286.223265][ T7073] veth1_macvtap: left promiscuous mode [ 286.283685][ T7073] veth0_macvtap: left promiscuous mode [ 286.330727][ T7073] veth1_vlan: left promiscuous mode [ 286.372441][ T7073] veth0_vlan: left promiscuous mode [ 286.447424][ T5948] Unregistered device Abilis Systems DVB-Titan [ 286.461824][ T5948] as10x_usb: device has been disconnected [ 287.721627][ T7784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.729037][ T7784] IPv6: NLM_F_CREATE should be set when creating new route [ 287.928550][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 288.272608][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 288.341204][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 288.569054][ T7791] netlink: 'syz.6.505': attribute type 11 has an invalid length. [ 289.208962][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.506'. [ 289.349261][ T7760] bridge_slave_0: left allmulticast mode [ 289.379471][ T7760] bridge_slave_0: left promiscuous mode [ 289.401795][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.433019][ T7760] bridge_slave_1: left allmulticast mode [ 289.440541][ T7760] bridge_slave_1: left promiscuous mode [ 289.449157][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.464193][ T7760] bond0: (slave bond_slave_0): Releasing backup interface [ 289.475605][ T7760] bond0: (slave bond_slave_1): Releasing backup interface [ 289.499338][ T7760] team0: Port device team_slave_0 removed [ 289.511963][ T7760] team0: Port device team_slave_1 removed [ 289.519346][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.527511][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.536581][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.544341][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.556331][ T7760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.595102][ T7763] bond1: option primary_reselect: invalid value (133) [ 289.604420][ T7763] bond1 (unregistering): Released all slaves [ 289.640763][ T5498] 8021q: adding VLAN 0 to HW filter on device eth2 [ 289.684929][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 289.744569][ T7799] tipc: Enabled bearer , priority 0 [ 289.776501][ T7490] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 289.867820][ T7490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.941624][ T7763] bond1: option primary_reselect: invalid value (133) [ 289.970596][ T7763] bond1 (unregistering): Released all slaves [ 290.081672][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.511'. [ 290.234965][ T7490] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 290.302845][ T7490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.339017][ T7490] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 290.392927][ T7490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.433455][ T7801] syzkaller0: entered promiscuous mode [ 290.450774][ T7801] syzkaller0: entered allmulticast mode [ 290.463999][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.513'. [ 290.484114][ T7799] tipc: Resetting bearer [ 290.493943][ T7796] tipc: Resetting bearer [ 290.766545][ T7796] tipc: Disabling bearer [ 291.226733][ T7490] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 291.272548][ T7490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.641630][ T7841] netlink: 'syz.2.518': attribute type 11 has an invalid length. [ 292.349323][ T7851] bridge_slave_0: left allmulticast mode [ 292.379466][ T7851] bridge_slave_0: left promiscuous mode [ 292.392131][ T7843] netlink: 'syz.1.519': attribute type 2 has an invalid length. [ 292.429442][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.495660][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'. [ 292.547664][ T7851] bridge_slave_1: left allmulticast mode [ 292.556571][ T7851] bridge_slave_1: left promiscuous mode [ 292.576242][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.579159][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.523'. [ 292.614565][ T7851] bond0: (slave bond_slave_0): Releasing backup interface [ 292.652453][ T7851] bond0: (slave bond_slave_1): Releasing backup interface [ 292.695980][ T7851] team0: Port device team_slave_0 removed [ 292.736776][ T7851] team0: Port device team_slave_1 removed [ 292.750097][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.773076][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.801677][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.523'. [ 292.819562][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.838510][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.095195][ T7851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.124390][ T7490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.134218][ T7843] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 293.137661][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'. [ 294.034455][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 294.049066][ T7843] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 294.055320][ T5498] 8021q: adding VLAN 0 to HW filter on device eth3 [ 294.121157][ T7490] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.247683][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.254992][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.264776][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.272072][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.297242][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 294.405624][ T7886] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.437046][ T5948] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 295.600510][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.616345][ T5948] usb 2-1: config 1 has an invalid interface number: 118 but max is 0 [ 295.670204][ T5948] usb 2-1: config 1 has no interface number 0 [ 295.700048][ T5948] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 295.809132][ T5948] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 295.932488][ T5948] usb 2-1: config 1 interface 118 has no altsetting 0 [ 296.315566][ T5948] usb 2-1: string descriptor 0 read error: -22 [ 296.502385][ T5948] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 296.654310][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.798908][ T7894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.904107][ T5948] kobil_sct 2-1:1.118: KOBIL USB smart card terminal converter detected [ 297.008184][ T5948] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 298.102258][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 298.379468][ T7490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.446504][ T5948] usb 2-1: USB disconnect, device number 6 [ 299.532338][ T5948] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 299.940643][ T5948] kobil_sct 2-1:1.118: device disconnected [ 300.802630][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 301.033233][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.542'. [ 301.097127][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 301.313699][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 301.529571][ T5498] 8021q: adding VLAN 0 to HW filter on device eth4 [ 302.024097][ T5154] block nbd0: Receive control failed (result -22) [ 302.070016][ T7963] nbd0: detected capacity change from 0 to 32 [ 302.119774][ T5841] block nbd0: Dead connection, failed to find a fallback [ 302.139448][ T5841] block nbd0: shutting down sockets [ 302.170562][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 302.210325][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 302.284996][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 302.514221][ T7975] loop4: detected capacity change from 0 to 32768 [ 302.525751][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 302.535499][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 302.561620][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 302.586505][ T7975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.549 (7975) [ 302.612682][ T7975] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.623091][ T7975] BTRFS info (device loop4): using sha256 checksum algorithm [ 302.683885][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 302.762898][ T7994] fuse: Bad value for 'rootmode' [ 302.774154][ T7975] BTRFS info (device loop4): rebuilding free space tree [ 302.809674][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 302.849785][ T7975] BTRFS info (device loop4): enabling ssd optimizations [ 302.857072][ T7975] BTRFS info (device loop4): using spread ssd allocation scheme [ 302.864815][ T7975] BTRFS info (device loop4): enabling free space tree [ 302.871846][ T7975] BTRFS info (device loop4): force clearing of disk cache [ 302.880426][ T7975] BTRFS info (device loop4): enabling auto defrag [ 302.886950][ T7975] BTRFS info (device loop4): max_inline set to 0 [ 302.909458][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 302.952958][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.007493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.845061][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.868892][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.883563][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.891925][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.903638][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.933666][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.943255][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 303.952534][ T5841] ldm_validate_partition_table(): Disk read failed. [ 304.057564][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.067568][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.076135][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.088539][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.096716][ T5841] Dev nbd0: unable to read RDB block 0 [ 304.105457][ T5841] nbd0: unable to read partition table [ 304.257823][ T7490] veth0_vlan: entered promiscuous mode [ 304.258661][ T5841] ldm_validate_partition_table(): Disk read failed. [ 304.324915][ T5841] Dev nbd0: unable to read RDB block 0 [ 304.371481][ T7490] veth1_vlan: entered promiscuous mode [ 304.539968][ T5841] nbd0: unable to read partition table [ 305.268974][ T7490] veth0_macvtap: entered promiscuous mode [ 305.363737][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.387022][ T7490] veth1_macvtap: entered promiscuous mode [ 305.395674][ T93] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 305.565395][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.556'. [ 305.605332][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.659732][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.750709][ T93] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.804326][ T93] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.072802][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.080585][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.238090][ T8039] 9p: Bad value for 'wfdno' [ 306.285256][ T8039] loop1: detected capacity change from 0 to 128 [ 306.464420][ T8039] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.479880][ T8039] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 306.549652][ T8039] fscrypt: key with descriptor e8dab99234bb312e is too short (got 17 bytes, need 32+ bytes) [ 306.754951][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.831977][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.877313][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.892027][ T8050] loop4: detected capacity change from 0 to 32768 [ 306.902857][ T8050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.563 (8050) [ 306.921666][ T8050] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.932251][ T8050] BTRFS info (device loop4): using sha256 checksum algorithm [ 307.094923][ T8050] BTRFS info (device loop4): rebuilding free space tree [ 307.125860][ T8050] BTRFS info (device loop4): enabling ssd optimizations [ 307.133227][ T8050] BTRFS info (device loop4): using spread ssd allocation scheme [ 307.141003][ T8050] BTRFS info (device loop4): enabling free space tree [ 307.147928][ T8050] BTRFS info (device loop4): force clearing of disk cache [ 307.155229][ T8050] BTRFS info (device loop4): enabling auto defrag [ 307.161980][ T8050] BTRFS info (device loop4): max_inline set to 0 [ 307.361083][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.379035][ T93] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.280646][ T93] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.342164][ T93] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.493068][ T8076] fuse: Unknown parameter 'use00000000000000000000' [ 308.629251][ T1114] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.174351][ T7510] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.091995][ T6042] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.784028][ T8113] 9pnet_virtio: no channels available for device syz [ 312.516743][ T7073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.611522][ T7073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.055075][ T6571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.103923][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.579'. [ 313.119459][ T6571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.343261][ T8134] warning: `syz.2.579' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.547559][ T8155] block nbd1: server does not support multiple connections per device. [ 315.577692][ T8155] block nbd1: shutting down sockets [ 315.945446][ T8171] 9pnet_virtio: no channels available for device syz [ 316.815767][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.826935][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.602077][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.593'. [ 319.045962][ T8206] lo speed is unknown, defaulting to 1000 [ 321.293112][ T8222] netlink: 'syz.5.598': attribute type 10 has an invalid length. [ 321.308663][ T8222] veth0_vlan: left promiscuous mode [ 321.315636][ T8222] veth0_vlan: entered promiscuous mode [ 321.324379][ T8222] team0: Device veth0_vlan failed to register rx_handler [ 321.737500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 321.931531][ T8234] afs: Unknown parameter 'dy' [ 322.639862][ T30] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 323.010045][ T8243] 9p: Bad value for 'wfdno' [ 323.056725][ T8243] loop6: detected capacity change from 0 to 128 [ 323.195172][ T8243] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.312551][ T8243] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 323.440706][ T8243] fscrypt: key with descriptor e8dab99234bb312e is too short (got 17 bytes, need 32+ bytes) [ 324.183164][ T6979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.607162][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.610'. [ 326.953699][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.6.612'. [ 327.977096][ T30] usb 6-1: device descriptor read/64, error -110 [ 328.034730][ T8295] afs: Unknown parameter 'dy' [ 328.887720][ T5853] Bluetooth: hci6: command 0x0406 tx timeout [ 329.166362][ T8300] bpq0: entered promiscuous mode [ 329.760088][ T8317] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.804515][ T8317] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 330.524147][ T8328] tipc: Enabled bearer , priority 0 [ 330.601444][ T8324] syzkaller0: entered promiscuous mode [ 330.640750][ T8324] syzkaller0: entered allmulticast mode [ 330.697904][ T8327] tipc: Resetting bearer [ 330.741976][ T8323] tipc: Resetting bearer [ 331.333790][ T8323] tipc: Disabling bearer [ 331.958543][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.969929][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.980169][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.999982][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.011845][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.660781][ T8358] loop2: detected capacity change from 0 to 32768 [ 332.671705][ T8342] lo speed is unknown, defaulting to 1000 [ 332.679048][ T8358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.634 (8358) [ 332.704354][ T8358] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.714612][ T8358] BTRFS info (device loop2): using sha256 checksum algorithm [ 332.839930][ T8358] BTRFS info (device loop2): rebuilding free space tree [ 332.898579][ T8358] BTRFS info (device loop2): enabling ssd optimizations [ 332.905743][ T8358] BTRFS info (device loop2): using spread ssd allocation scheme [ 332.915770][ T8358] BTRFS info (device loop2): enabling free space tree [ 332.922602][ T8358] BTRFS info (device loop2): force clearing of disk cache [ 332.929822][ T8358] BTRFS info (device loop2): enabling auto defrag [ 332.936282][ T8358] BTRFS info (device loop2): max_inline set to 0 [ 334.107016][ T5853] Bluetooth: hci1: command tx timeout [ 334.119786][ T5851] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.161716][ T6076] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 334.426977][ T8397] 9pnet_virtio: no channels available for device syz [ 335.345685][ T8397] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 335.357463][ T8397] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 335.370235][ T8397] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 336.207065][ T5853] Bluetooth: hci1: command tx timeout [ 337.353515][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 337.559831][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 337.600319][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.645900][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 337.728416][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.782893][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.860827][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 337.908605][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 337.951561][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.961044][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.970135][ T10] usb 5-1: Product: syz [ 337.978614][ T10] usb 5-1: Manufacturer: syz [ 338.026219][ T8408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 338.080531][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 338.089052][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 338.223340][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 338.248401][ T5853] Bluetooth: hci1: command tx timeout [ 338.303762][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 338.400032][ T29] usb 5-1: USB disconnect, device number 4 [ 338.445879][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.513483][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.557196][ T8342] bridge_slave_0: entered allmulticast mode [ 338.599383][ T8342] bridge_slave_0: entered promiscuous mode [ 338.628980][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.666062][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.691947][ T8342] bridge_slave_1: entered allmulticast mode [ 338.721164][ T8342] bridge_slave_1: entered promiscuous mode [ 338.780342][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.649'. [ 338.946040][ T8435] loop2: detected capacity change from 0 to 32768 [ 338.957884][ T8435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.650 (8435) [ 338.968829][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.023411][ T8435] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.033769][ T8435] BTRFS info (device loop2): using sha256 checksum algorithm [ 339.151909][ T8435] BTRFS info (device loop2): rebuilding free space tree [ 339.179281][ T8435] BTRFS info (device loop2): enabling ssd optimizations [ 339.186337][ T8435] BTRFS info (device loop2): using spread ssd allocation scheme [ 339.194083][ T8435] BTRFS info (device loop2): enabling free space tree [ 339.201340][ T8435] BTRFS info (device loop2): force clearing of disk cache [ 339.208906][ T8435] BTRFS info (device loop2): enabling auto defrag [ 339.215523][ T8435] BTRFS info (device loop2): max_inline set to 0 [ 339.220814][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.6.649'. [ 339.226431][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.274539][ T8342] team0: Port device team_slave_0 added [ 339.283914][ T8342] team0: Port device team_slave_1 added [ 339.481427][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.524162][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.561136][ T1114] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 339.617423][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.646761][ T5851] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.661868][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.701516][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.863420][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.332384][ T5853] Bluetooth: hci1: command tx timeout [ 341.965596][ T8468] netlink: 'syz.4.656': attribute type 21 has an invalid length. [ 342.033052][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.656'. [ 342.950993][ T5853] Bluetooth: hci5: unexpected event for opcode 0x2006 [ 343.215043][ T8342] hsr_slave_0: entered promiscuous mode [ 343.243394][ T8342] hsr_slave_1: entered promiscuous mode [ 343.333087][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.658'. [ 345.143436][ T8502] tipc: Started in network mode [ 345.158116][ T8502] tipc: Node identity fff, cluster identity 10 [ 345.170951][ T8502] tipc: Node number set to 4095 [ 345.188573][ T8502] tipc: Cannot configure node identity twice [ 345.405492][ T6571] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.727116][ T8511] loop4: detected capacity change from 0 to 32768 [ 345.736648][ T8511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.666 (8511) [ 345.755751][ T8511] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 345.765997][ T8511] BTRFS info (device loop4): using sha256 checksum algorithm [ 345.804698][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.670'. [ 345.811137][ T8524] netlink: 'syz.5.668': attribute type 2 has an invalid length. [ 345.868209][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 346.013493][ T8501] lo speed is unknown, defaulting to 1000 [ 346.033455][ T8528] netlink: 'syz.1.669': attribute type 2 has an invalid length. [ 346.046617][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 346.067143][ T8515] bridge_slave_0: left allmulticast mode [ 346.088304][ T8515] bridge_slave_0: left promiscuous mode [ 346.097620][ T8511] BTRFS info (device loop4): rebuilding free space tree [ 346.115979][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.122348][ T8511] BTRFS info (device loop4): enabling ssd optimizations [ 346.130313][ T8511] BTRFS info (device loop4): using spread ssd allocation scheme [ 346.138426][ T8511] BTRFS info (device loop4): enabling free space tree [ 346.145229][ T8511] BTRFS info (device loop4): force clearing of disk cache [ 346.152442][ T8511] BTRFS info (device loop4): enabling auto defrag [ 346.159111][ T8511] BTRFS info (device loop4): max_inline set to 0 [ 346.229443][ T8540] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 346.296517][ T8515] bridge_slave_1: left allmulticast mode [ 346.325375][ T8515] bridge_slave_1: left promiscuous mode [ 346.354773][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.393348][ T8545] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 346.405447][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 346.427707][ T139] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 346.469917][ T8515] bond0: (slave bond_slave_0): Releasing backup interface [ 346.506791][ T8515] bond0: (slave bond_slave_1): Releasing backup interface [ 346.571477][ T8515] team0: Port device team_slave_0 removed [ 346.639358][ T8515] team0: Port device team_slave_1 removed [ 346.655307][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.677024][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.700490][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.717182][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.770614][ T8515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.814467][ T8524] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 346.841940][ T8526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.908394][ T6571] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.993514][ T8528] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 347.002806][ T5941] lo speed is unknown, defaulting to 1000 [ 347.682506][ T6571] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.726088][ T8562] batadv_slave_1: entered promiscuous mode [ 347.930363][ T32] INFO: task syz.3.233:6793 blocked for more than 143 seconds. [ 347.977204][ T32] Tainted: G L syzkaller #0 [ 347.992519][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.004230][ T32] task:syz.3.233 state:D stack:25872 pid:6793 tgid:6788 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 348.021067][ T32] Call Trace: [ 348.024527][ T32] [ 348.028258][ T32] __schedule+0x17b4/0x5680 [ 348.032955][ T32] ? __pfx___schedule+0x10/0x10 [ 348.041801][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.049265][ T32] ? schedule+0x90/0x360 [ 348.053751][ T32] schedule+0x164/0x360 [ 348.065618][ T32] fuse_wait_aborted+0x15b/0x250 [ 348.073765][ T32] ? __pfx_fuse_wait_aborted+0x10/0x10 [ 348.080665][ T32] ? do_new_mount+0x341/0xd30 [ 348.086444][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 348.126456][ T32] ? __pfx_fuse_abort_conn+0x10/0x10 [ 348.160195][ T32] fuse_conn_destroy+0x1b1/0x3b0 [ 348.208906][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.225241][ T32] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 348.232853][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.240924][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.458500][ T32] ? fuse_kill_sb_anon+0x1cc/0x270 [ 348.493681][ T32] ? up_write+0x1ab/0x410 [ 348.516465][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.524890][ T32] ? lockdep_hardirqs_on+0x7a/0x110 [ 348.532504][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.543139][ T32] fuse_kill_sb_anon+0x1ef/0x270 [ 348.552499][ T32] deactivate_locked_super+0xbc/0x130 [ 348.562423][ T32] ? __pfx_fuse_fill_super+0x10/0x10 [ 348.575097][ T32] get_tree_nodev+0xd7/0x150 [ 348.584486][ T32] fuse_get_tree+0x295/0x3b0 [ 348.594709][ T32] vfs_get_tree+0x92/0x2a0 [ 348.599415][ T32] do_new_mount+0x341/0xd30 [ 348.605121][ T32] ? apparmor_capable+0x126/0x170 [ 348.622086][ T32] ? __pfx_do_new_mount+0x10/0x10 [ 348.627398][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.633368][ T32] ? ns_capable+0x89/0xe0 [ 348.637892][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.643662][ T32] ? path_mount+0x690/0x10e0 [ 348.648447][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.654172][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.660008][ T32] ? user_path_at+0xd4/0x160 [ 348.664718][ T32] __se_sys_mount+0x31d/0x420 [ 348.669903][ T32] ? __pfx___se_sys_mount+0x10/0x10 [ 348.675262][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.682407][ T32] ? __x64_sys_mount+0x20/0xc0 [ 348.687510][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.693623][ T32] do_syscall_64+0x15f/0xf80 [ 348.698474][ T32] ? trace_irq_disable+0x3b/0x140 [ 348.703669][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.710545][ T32] RIP: 0033:0x7f650779c819 [ 348.715073][ T32] RSP: 002b:00007f650864f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.723903][ T32] RAX: ffffffffffffffda RBX: 00007f6507a16090 RCX: 00007f650779c819 [ 348.732476][ T32] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 348.740857][ T32] RBP: 00007f6507832c91 R08: 00002000000003c0 R09: 0000000000000000 [ 348.749117][ T32] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000000 [ 348.757451][ T32] R13: 00007f6507a16128 R14: 00007f6507a16090 R15: 00007fffe8d22978 [ 348.765514][ T32] [ 348.769012][ T8557] batadv_slave_1: left promiscuous mode [ 348.782547][ T32] [ 348.782547][ T32] Showing all locks held in the system: [ 348.790674][ T32] 3 locks held by kworker/u8:0/12: [ 348.796144][ T32] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 348.808248][ T32] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 348.820650][ T32] #2: ffffffff8fde2fc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 348.830069][ T32] 1 lock held by khungtaskd/32: [ 348.835019][ T32] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 348.872340][ T32] 2 locks held by getty/5589: [ 348.886164][ T32] #0: ffff888036a700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 348.930506][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 348.948877][ T32] 1 lock held by syz-executor/5845: [ 348.958930][ T32] 5 locks held by kworker/u8:12/6075: [ 348.966053][ T32] 8 locks held by kworker/u8:14/6571: [ 348.971767][ T32] #0: ffff88801be9e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 348.984704][ T32] #1: ffffc9000edb7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 348.996473][ T32] #2: ffffffff8fdd46a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 349.006575][ T32] #3: ffff88807d295128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 349.017575][ T32] #4: ffff888055a18258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 349.029509][ T32] #5: ffffffff8fde2fc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830 [ 349.040446][ T32] #6: ffff888053264d90 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x588/0x22c0 [ 349.054026][ T32] #7: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 349.066117][ T32] 1 lock held by syz.3.233/6793: [ 349.072286][ T32] #0: ffff88804dc6e0d8 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0 [ 349.082635][ T32] 7 locks held by syz-executor/8342: [ 349.089459][ T32] #0: ffff8880353b4410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 349.098661][ T32] #1: ffff888042db6c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 349.108702][ T32] #2: ffff88802905ed28 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 349.118931][ T32] #3: ffffffff8f64f7a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 349.129911][ T32] #4: ffff888022b72128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 349.139626][ T32] #5: ffff888022b73258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc20 [ 349.149782][ T32] #6: ffffffff8fde2fc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 349.159496][ T32] 2 locks held by syz.2.664/8501: [ 349.164667][ T32] #0: ffffffff8fdd46a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 349.174328][ T32] #1: ffffffff8e962eb8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 349.202850][ T32] [ 349.205257][ T32] ============================================= [ 349.205257][ T32] [ 349.225476][ T32] NMI backtrace for cpu 0 [ 349.225508][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 349.225541][ T32] Tainted: [L]=SOFTLOCKUP [ 349.225550][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.225565][ T32] Call Trace: [ 349.225574][ T32] [ 349.225586][ T32] dump_stack_lvl+0xe8/0x150 [ 349.225629][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 349.225677][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.225706][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 349.225745][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 349.225785][ T32] sys_info+0x135/0x170 [ 349.225816][ T32] watchdog+0xfd3/0x1030 [ 349.225855][ T32] ? watchdog+0x1c9/0x1030 [ 349.225893][ T32] kthread+0x388/0x470 [ 349.225923][ T32] ? __pfx_watchdog+0x10/0x10 [ 349.225953][ T32] ? __pfx_kthread+0x10/0x10 [ 349.225984][ T32] ret_from_fork+0x514/0xb70 [ 349.226033][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 349.226071][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.226100][ T32] ? __switch_to+0xc79/0x1410 [ 349.226134][ T32] ? __pfx_kthread+0x10/0x10 [ 349.226162][ T32] ret_from_fork_asm+0x1a/0x30 [ 349.226208][ T32] [ 349.226217][ T32] Sending NMI from CPU 0 to CPUs 1: [ 349.364696][ C1] NMI backtrace for cpu 1 [ 349.364729][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.364771][ C1] Tainted: [L]=SOFTLOCKUP [ 349.364782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.364801][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 349.364844][ C1] Code: 4b 71 02 e9 fe ef 57 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 11 11 00 fb f4 d7 ef 57 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 349.364870][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 349.364897][ C1] RAX: 0000000000b32f3f RBX: ffffffff819aae9a RCX: 0000000080000001 [ 349.364920][ C1] RDX: 0000000000000001 RSI: ffffffff8dfd6fd1 RDI: ffffffff8c289ce0 [ 349.364943][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 349.364967][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 349.364990][ C1] R13: 1ffff11003b56000 R14: 0000000000000001 R15: 1ffff11003b56000 [ 349.365016][ C1] FS: 0000000000000000(0000) GS:ffff888125317000(0000) knlGS:0000000000000000 [ 349.365042][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.365063][ C1] CR2: 00007fbae8de92f8 CR3: 0000000075a66000 CR4: 0000000000350ef0 [ 349.365087][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.365106][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 349.365125][ C1] Call Trace: [ 349.365138][ C1] [ 349.365149][ C1] default_idle+0x9/0x20 [ 349.365230][ C1] default_idle_call+0x72/0xb0 [ 349.365276][ C1] do_idle+0x36a/0x5f0 [ 349.365315][ C1] ? __pfx_do_idle+0x10/0x10 [ 349.365347][ C1] ? do_idle+0x11/0x5f0 [ 349.365387][ C1] cpu_startup_entry+0x43/0x60 [ 349.365420][ C1] start_secondary+0x101/0x110 [ 349.365466][ C1] common_startup_64+0x13e/0x147 [ 349.365524][ C1] [ 349.557523][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 349.564744][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 349.575540][ T32] Tainted: [L]=SOFTLOCKUP [ 349.580065][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.590218][ T32] Call Trace: [ 349.593514][ T32] [ 349.596441][ T32] vpanic+0x56c/0xa60 [ 349.600432][ T32] ? __pfx___schedule+0x10/0x10 [ 349.605629][ T32] ? __pfx_vpanic+0x10/0x10 [ 349.610171][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.615914][ T32] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 349.622237][ T32] panic+0xc5/0xd0 [ 349.626092][ T32] ? __pfx_panic+0x10/0x10 [ 349.630557][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.636323][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.642046][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 349.647444][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.653293][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 349.659658][ T32] watchdog+0x102c/0x1030 [ 349.664125][ T32] ? watchdog+0x1c9/0x1030 [ 349.668577][ T32] kthread+0x388/0x470 [ 349.672681][ T32] ? __pfx_watchdog+0x10/0x10 [ 349.677562][ T32] ? __pfx_kthread+0x10/0x10 [ 349.682168][ T32] ret_from_fork+0x514/0xb70 [ 349.686780][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 349.691907][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.697636][ T32] ? __switch_to+0xc79/0x1410 [ 349.702589][ T32] ? __pfx_kthread+0x10/0x10 [ 349.707367][ T32] ret_from_fork_asm+0x1a/0x30 [ 349.712350][ T32] [ 349.716089][ T32] Kernel Offset: disabled [ 349.720430][ T32] Rebooting in 86400 seconds..