last executing test programs: 7.2017759s ago: executing program 3 (id=51): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.976375248s ago: executing program 3 (id=54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) 6.536500652s ago: executing program 3 (id=57): socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.489362265s ago: executing program 3 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 4.374321821s ago: executing program 3 (id=68): timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000400)={{}, {r2, r3+10000000}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r5, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) 3.953131014s ago: executing program 3 (id=65): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000300000000001400", @ANYRES64=r0], 0x38}}, 0x0) 3.44446148s ago: executing program 0 (id=66): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) recvmsg$can_bcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1}, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 3.44206174s ago: executing program 1 (id=67): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) iopl(0x3) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3.270733186s ago: executing program 1 (id=70): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 3.230718267s ago: executing program 2 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.15336319s ago: executing program 0 (id=72): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2.965743976s ago: executing program 0 (id=73): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040000) shutdown(r1, 0x2) close(0xffffffffffffffff) 2.965633486s ago: executing program 1 (id=74): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0xa, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 2.065266674s ago: executing program 2 (id=75): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffff149) ioprio_set$pid(0x2, 0x0, 0x4000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 1.950774898s ago: executing program 1 (id=76): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x3328}], 0x1, 0x0, 0x0, 0x0) r3 = epoll_create(0x18) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x1e}) recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) 1.665209577s ago: executing program 2 (id=77): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0xa0241, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0x7, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x3, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0x4, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xfa65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0xed6, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x401, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8011, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1004, 0xf, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) 808.755214ms ago: executing program 1 (id=78): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$incfs_size(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 804.328564ms ago: executing program 0 (id=86): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xde193344a1e0cec0) truncate(&(0x7f0000000280)='./file0\x00', 0x3) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x8, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfff}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 620.475441ms ago: executing program 2 (id=79): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0xff, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0xffffffff, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x3, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800010, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x30, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef28, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x2, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 584.275791ms ago: executing program 1 (id=80): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x571, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pjZ4rLfygu+Q/FJf+huOQ/FJf8h+KS/1Bc8h+KqzX/pT8U0+DIq5tJRKy/5676I9Wbncv5tT3AHWR7O/Gf/KGgfPaH4urpdgeArvEdH9j7N2dHHGt3YvHg+wIcjlK3OwB0zehx+39QVNb/obis/0Nx+YwPWP+H4rH+D8XV3+b+X29ruXfXRETcExE/Kh852rzXF/D/qz/i9RevfuuZiNLvk+zz/+jAqf7pN177Xmu73uSv9S2C3oj45ItPfeG56ZWVpUfT+j/fqF/5Ylb/WLdGA3SimafNPAaKa3l1bW66VqsuKSgoFK7QnAcuVzZmm4/DmnteeDjizfc3LkJI417JHo2zPdna5LH6HmXfVnLLtQrJAexdfuZ0xPrzEXF/3viT7H7njZ2Pvq3yrvhvz57Tx/Fs/SRtM9xh/PI9+4v/QEv8kZb47+gw/uZHOmx4mwx+vbvxX/5l9vpP9PTkvf77vTZm6N+cf+Kr+wywT7/5dXfjnxrpbvzPL0S8ms4/E3n5V0rT8sbO5875p7/lOun/1qdGb85/V3bNf6Ub81+5zfx3osM4P3y6+rG8+vKPI958PuKB3PjNeMfqsfq2Srvin2yZfx7cI/4fPvzTubz6s69FbF+OGI38+K2xxlfmF8eXV9dOX5yfnqnOVC9VKo9PTU5OnZmcGK+vUY83V6p3e/L68Afy6k9+uTH+vjbxm+Nv9/pv7zHmVmtf+nj/O3Pqf3K8Ef/Bk/nv/1AWv/H69+yK/67sOf138o/sWt60zbWIOJrVPxQR33ll8OG8fn3oeiP++TbjL90Sf/f4H+lw/J/91T+fzat/7oMd/gUAwIFqvzTQ7Z4BAAAH7TB2Grs9RiBf31ZvtG4DJ+st+wrrN/cV0vpr2f5CeT3ib9keQ1r/ULZLlpZzNxqA/znDa+/+ebf7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFB0y6trc9O1WnVpuds9AQ7bvwIAAP//zFYBIA==") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000008004) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000ffff"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x48}], 0x2, 0x45833af92e4b39ff, 0x0) 539.095733ms ago: executing program 0 (id=81): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x1000003}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 227.274773ms ago: executing program 2 (id=82): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.03ms ago: executing program 2 (id=83): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) 0s ago: executing program 0 (id=92): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. syzkaller login: [ 80.818189][ T5762] cgroup: Unknown subsys name 'net' [ 80.964860][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.608513][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.272349][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.281500][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.290751][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.298495][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.306908][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.315361][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.323560][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.332398][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.339919][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.348250][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.351947][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.356748][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.370144][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.372777][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.385945][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.388573][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.398010][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.408259][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.416028][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.421673][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.431370][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.439239][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.442383][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.453812][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.938640][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 85.111067][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.118965][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.126781][ T5774] bridge_slave_0: entered allmulticast mode [ 85.134986][ T5774] bridge_slave_0: entered promiscuous mode [ 85.148588][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.155958][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.163255][ T5774] bridge_slave_1: entered allmulticast mode [ 85.170370][ T5774] bridge_slave_1: entered promiscuous mode [ 85.178157][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.189090][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.206231][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.338120][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.351815][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.439721][ T5774] team0: Port device team_slave_0 added [ 85.446182][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.453677][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.460963][ T5775] bridge_slave_0: entered allmulticast mode [ 85.468847][ T5775] bridge_slave_0: entered promiscuous mode [ 85.510979][ T5774] team0: Port device team_slave_1 added [ 85.520723][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.528940][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.536253][ T5775] bridge_slave_1: entered allmulticast mode [ 85.543559][ T5775] bridge_slave_1: entered promiscuous mode [ 85.550512][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.557971][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.565611][ T5773] bridge_slave_0: entered allmulticast mode [ 85.573160][ T5773] bridge_slave_0: entered promiscuous mode [ 85.601713][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.608931][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.616493][ T5776] bridge_slave_0: entered allmulticast mode [ 85.623989][ T5776] bridge_slave_0: entered promiscuous mode [ 85.653390][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.660631][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.670303][ T5773] bridge_slave_1: entered allmulticast mode [ 85.678044][ T5773] bridge_slave_1: entered promiscuous mode [ 85.696380][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.703734][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.711027][ T5776] bridge_slave_1: entered allmulticast mode [ 85.718555][ T5776] bridge_slave_1: entered promiscuous mode [ 85.729262][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.743484][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.764640][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.771769][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.799412][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.822123][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.829149][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.855177][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.925469][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.937392][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.951482][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.986784][ T5775] team0: Port device team_slave_0 added [ 85.996637][ T5775] team0: Port device team_slave_1 added [ 86.004775][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.028291][ T5776] team0: Port device team_slave_0 added [ 86.038502][ T5776] team0: Port device team_slave_1 added [ 86.125073][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.132330][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.158677][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.174648][ T5773] team0: Port device team_slave_0 added [ 86.188412][ T5774] hsr_slave_0: entered promiscuous mode [ 86.195637][ T5774] hsr_slave_1: entered promiscuous mode [ 86.203646][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.210640][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.239540][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.252059][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.259101][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.285553][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.298494][ T5773] team0: Port device team_slave_1 added [ 86.307471][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.314827][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.340981][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.388955][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.396125][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.422203][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.435328][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.442541][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.468668][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.512544][ T5084] Bluetooth: hci2: command tx timeout [ 86.512561][ T5778] Bluetooth: hci3: command tx timeout [ 86.512973][ T5778] Bluetooth: hci0: command tx timeout [ 86.518690][ T5781] Bluetooth: hci1: command tx timeout [ 86.609752][ T5775] hsr_slave_0: entered promiscuous mode [ 86.616494][ T5775] hsr_slave_1: entered promiscuous mode [ 86.623595][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.631502][ T5775] Cannot create hsr debugfs directory [ 86.642833][ T5776] hsr_slave_0: entered promiscuous mode [ 86.650296][ T5776] hsr_slave_1: entered promiscuous mode [ 86.656917][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.667461][ T5776] Cannot create hsr debugfs directory [ 86.722287][ T5773] hsr_slave_0: entered promiscuous mode [ 86.729073][ T5773] hsr_slave_1: entered promiscuous mode [ 86.735691][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.743387][ T5773] Cannot create hsr debugfs directory [ 87.202215][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.216381][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.271399][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.291078][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.367480][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.398450][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.442890][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.460941][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.571139][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.592601][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.628467][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.646340][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.821289][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.835967][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.848596][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.863105][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.898077][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.970944][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.986116][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.017064][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.024584][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.090392][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.105736][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.112984][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.155011][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.162258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.217692][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.224958][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.270563][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.305405][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.388897][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.408975][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.439148][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.446463][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.499261][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.506518][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.548738][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.556006][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.582059][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.589297][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.597408][ T5781] Bluetooth: hci1: command tx timeout [ 88.603774][ T5781] Bluetooth: hci2: command tx timeout [ 88.603885][ T5778] Bluetooth: hci3: command tx timeout [ 88.609220][ T5781] Bluetooth: hci0: command tx timeout [ 88.849373][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.990256][ T5774] veth0_vlan: entered promiscuous mode [ 89.037531][ T5774] veth1_vlan: entered promiscuous mode [ 89.076184][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.170213][ T5774] veth0_macvtap: entered promiscuous mode [ 89.194352][ T5774] veth1_macvtap: entered promiscuous mode [ 89.256991][ T5776] veth0_vlan: entered promiscuous mode [ 89.285854][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.310821][ T5776] veth1_vlan: entered promiscuous mode [ 89.328433][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.354897][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.366927][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.378009][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.387273][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.396694][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.439594][ T5776] veth0_macvtap: entered promiscuous mode [ 89.477775][ T5776] veth1_macvtap: entered promiscuous mode [ 89.498261][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.606512][ T5775] veth0_vlan: entered promiscuous mode [ 89.616780][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.628492][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.643727][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.670764][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.681452][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.694706][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.708514][ T5775] veth1_vlan: entered promiscuous mode [ 89.758076][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.768681][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.780746][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.788203][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.804491][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.813752][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.846780][ T5773] veth0_vlan: entered promiscuous mode [ 89.874791][ T5775] veth0_macvtap: entered promiscuous mode [ 89.906831][ T5775] veth1_macvtap: entered promiscuous mode [ 89.923098][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.927480][ T5773] veth1_vlan: entered promiscuous mode [ 89.937390][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.997246][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.009548][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.024299][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.041250][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.054126][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.142054][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.172198][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.183091][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.195940][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.207890][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.223630][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.237221][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.247707][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259464][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.308592][ T5773] veth0_macvtap: entered promiscuous mode [ 90.327995][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.356998][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.397976][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.409661][ T5773] veth1_macvtap: entered promiscuous mode [ 90.416506][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.509545][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.540071][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.559396][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.570173][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.580152][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.591250][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.620187][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.674619][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.683595][ T5084] Bluetooth: hci3: command tx timeout [ 90.690644][ T5084] Bluetooth: hci2: command tx timeout [ 90.697297][ T5781] Bluetooth: hci1: command tx timeout [ 90.702402][ T5778] Bluetooth: hci0: command tx timeout [ 90.741597][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.781619][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.801580][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.825571][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.839851][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.857900][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.903215][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.916335][ T5853] ======================================================= [ 90.916335][ T5853] WARNING: The mand mount option has been deprecated and [ 90.916335][ T5853] and is ignored by this kernel. Remove the mand [ 90.916335][ T5853] option from the mount to silence this warning. [ 90.916335][ T5853] ======================================================= [ 90.921719][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.976374][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.985406][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.006126][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.019280][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.123290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.131214][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.441090][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.494568][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.658294][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.694039][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.198131][ T27] cfg80211: failed to load regulatory.db [ 92.252616][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.416922][ T5872] Zero length message leads to an empty skb [ 92.510155][ T5883] syz.3.12[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.744549][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 92.753882][ T51] Bluetooth: hci2: command tx timeout [ 92.753950][ T51] Bluetooth: hci1: command tx timeout [ 92.753983][ T51] Bluetooth: hci3: command tx timeout [ 92.773552][ T5778] Bluetooth: hci0: command tx timeout [ 92.785964][ T5886] loop2: detected capacity change from 0 to 2048 [ 93.040248][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.131713][ T5886] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.268740][ T5886] fs-verity: sha512 using implementation "sha512-avx2" [ 93.545494][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.769126][ T5905] loop1: detected capacity change from 0 to 2048 [ 93.899440][ T5905] loop1: p1 < > p3 p4 [ 93.899440][ T5905] p4: [ 93.927927][ T5905] loop1: p3 start 458752 is beyond EOD, truncated [ 93.934606][ T5905] loop1: p4 size 722688 extends beyond EOD, truncated [ 93.950038][ T5905] loop1: p5 start 262464109 is beyond EOD, truncated [ 93.957197][ T5905] loop1: p6 size 2304 extends beyond EOD, truncated [ 94.693610][ T5908] io-wq is not configured for unbound workers [ 94.938895][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 94.958325][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 94.999343][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 95.182587][ T28] audit: type=1326 audit(1779047976.365:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.3.22" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bdf39ce59 code=0x0 [ 97.092404][ T5944] tipc: Failed to remove unknown binding: 66,0,0/0:273946093/273946095 [ 97.131693][ T5944] tipc: Failed to remove unknown binding: 66,0,0/0:273946093/273946094 [ 97.164892][ T5944] tipc: Failed to remove unknown binding: 66,0,0/0:273946093/273946095 [ 97.194917][ T5944] tipc: Failed to remove unknown binding: 66,0,0/0:273946093/273946094 [ 97.295254][ T2173] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.533893][ T2173] usb 2-1: Using ep0 maxpacket: 16 [ 97.557201][ T2173] usb 2-1: config 222 has an invalid interface number: 31 but max is 0 [ 97.592287][ T2173] usb 2-1: config 222 has no interface number 0 [ 97.599426][ T2173] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 97.641854][ T2173] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 97.666176][ T2173] usb 2-1: config 222 interface 31 has no altsetting 0 [ 97.680572][ T2173] usb 2-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 97.697684][ T2173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.711825][ T2173] usb 2-1: Product: syz [ 97.717235][ T2173] usb 2-1: Manufacturer: syz [ 97.722153][ T2173] usb 2-1: SerialNumber: syz [ 97.737521][ T5940] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.988703][ T5963] loop3: detected capacity change from 0 to 128 [ 97.999485][ T2173] ldusb 2-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 98.043760][ T5963] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.064816][ T5963] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.142086][ T2173] usb 2-1: USB disconnect, device number 2 [ 98.209573][ T2173] ldusb 2-1:222.31: LD USB Device #0 now disconnected [ 98.310948][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.496757][ T5973] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 98.509985][ T5973] syz_tun: entered promiscuous mode [ 98.572474][ T5973] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 99.546648][ T5994] loop3: detected capacity change from 0 to 2048 [ 99.737535][ T5994] loop3: p1 < > p3 p4 [ 99.737535][ T5994] p4: [ 99.775221][ T5994] loop3: p3 start 458752 is beyond EOD, truncated [ 99.782136][ T5994] loop3: p4 size 722688 extends beyond EOD, truncated [ 99.795959][ T5994] loop3: p5 start 262464109 is beyond EOD, truncated [ 99.803279][ T5994] loop3: p6 size 2304 extends beyond EOD, truncated [ 100.962939][ T6001] tipc: Failed to remove unknown binding: 66,0,0/0:223301836/223301838 [ 101.137260][ T6001] tipc: Failed to remove unknown binding: 66,0,0/0:223301836/223301837 [ 101.203535][ T6001] tipc: Failed to remove unknown binding: 66,0,0/0:223301836/223301838 [ 101.217396][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.229935][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 101.279212][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.291671][ T6001] tipc: Failed to remove unknown binding: 66,0,0/0:223301836/223301837 [ 101.739504][ T6016] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.924895][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.034635][ T968] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.633596][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 103.082616][ T968] usb 3-1: config 222 has an invalid interface number: 31 but max is 0 [ 103.090975][ T968] usb 3-1: config 222 has no interface number 0 [ 103.098398][ T968] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 103.112257][ T968] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 103.123793][ T968] usb 3-1: config 222 interface 31 has no altsetting 0 [ 103.154678][ T968] usb 3-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 103.171833][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.194222][ T968] usb 3-1: Product: syz [ 103.198561][ T968] usb 3-1: Manufacturer: syz [ 103.223216][ T968] usb 3-1: SerialNumber: syz [ 103.246599][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.267147][ T6010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.523747][ T968] ldusb 3-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 103.537905][ T968] usb 3-1: USB disconnect, device number 2 [ 103.549204][ T968] ldusb 3-1:222.31: LD USB Device #0 now disconnected [ 104.891281][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.63'. [ 104.931670][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz.1.63'. [ 105.590431][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 105.781385][ T6071] netlink: 'syz.1.74': attribute type 12 has an invalid length. [ 106.609093][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.622027][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.642082][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.660959][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.668989][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.680218][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.730907][ T28] audit: type=1326 audit(1779047987.915:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 106.783423][ T28] audit: type=1326 audit(1779047987.915:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 106.807322][ T28] audit: type=1326 audit(1779047987.945:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 106.833309][ T28] audit: type=1326 audit(1779047987.945:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 106.857519][ T28] audit: type=1326 audit(1779047987.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 106.915607][ T28] audit: type=1326 audit(1779047987.945:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 106.972268][ T28] audit: type=1326 audit(1779047987.945:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 107.048931][ T28] audit: type=1326 audit(1779047987.945:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 107.082230][ T28] audit: type=1326 audit(1779047987.945:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e9b9ce59 code=0x7ffc0000 [ 107.108624][ T28] audit: type=1326 audit(1779047987.955:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3e9b5d68e code=0x7ffc0000 [ 107.171035][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 107.181484][ T6088] veth0_macvtap: left promiscuous mode [ 107.328578][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 107.412035][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.419378][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.427300][ T6078] bridge_slave_0: entered allmulticast mode [ 107.438770][ T6078] bridge_slave_0: entered promiscuous mode [ 107.449681][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.457364][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.465043][ T6078] bridge_slave_1: entered allmulticast mode [ 107.472506][ T6078] bridge_slave_1: entered promiscuous mode [ 107.507449][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.524453][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.567658][ T6078] team0: Port device team_slave_0 added [ 107.577482][ T6078] team0: Port device team_slave_1 added [ 107.608241][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.615309][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.647920][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.660888][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.668392][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.696550][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.750888][ T6078] hsr_slave_0: entered promiscuous mode [ 107.757820][ T6078] hsr_slave_1: entered promiscuous mode [ 107.765665][ T6078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.773457][ T6078] Cannot create hsr debugfs directory [ 107.973969][ T6098] netlink: 'syz.0.86': attribute type 3 has an invalid length. [ 108.110698][ T6078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.206912][ T6105] loop1: detected capacity change from 0 to 512 [ 108.212700][ T6103] tipc: Failed to remove unknown binding: 66,0,0/0:2949404202/2949404204 [ 108.224409][ T6103] tipc: Failed to remove unknown binding: 66,0,0/0:2949404202/2949404203 [ 108.254338][ T6103] tipc: Failed to remove unknown binding: 66,0,0/0:2949404202/2949404204 [ 108.283865][ T6103] tipc: Failed to remove unknown binding: 66,0,0/0:2949404202/2949404203 [ 108.319352][ T6078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.374251][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.422118][ T6105] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.487056][ T6078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.515229][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 108.590235][ T6078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.697694][ T6113] tipc: Started in network mode [ 108.703482][ T6113] tipc: Node identity 7f000001, cluster identity 4711 [ 108.714799][ T6113] tipc: Enabled bearer , priority 10 [ 108.748941][ T6113] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 108.759552][ T6113] tipc: Enabled bearer , priority 10 [ 108.761937][ T1327] [ 108.768147][ T1327] ============================================ [ 108.774347][ T1327] WARNING: possible recursive locking detected [ 108.780552][ T1327] syzkaller #0 Not tainted [ 108.785005][ T1327] -------------------------------------------- [ 108.791197][ T1327] kworker/u4:9/1327 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.797385][ T1327] ffffe8ffffd684d8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x644/0xa70 [ 108.806719][ T1327] [ 108.806719][ T1327] but task is already holding lock: [ 108.814134][ T1327] ffffe8ffffc68528 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4db/0xa70 [ 108.823428][ T1327] [ 108.823428][ T1327] other info that might help us debug this: [ 108.831516][ T1327] Possible unsafe locking scenario: [ 108.831516][ T1327] [ 108.838995][ T1327] CPU0 [ 108.842305][ T1327] ---- [ 108.845601][ T1327] lock(&pd_list->lock); [ 108.849957][ T1327] lock(&pd_list->lock); [ 108.854313][ T1327] [ 108.854313][ T1327] *** DEADLOCK *** [ 108.854313][ T1327] [ 108.862484][ T1327] May be due to missing lock nesting notation [ 108.862484][ T1327] [ 108.870829][ T1327] 3 locks held by kworker/u4:9/1327: [ 108.876137][ T1327] #0: ffff888141e6c938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 108.888099][ T1327] #1: ffffc90004e0fd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 108.900002][ T1327] #2: ffffe8ffffc68528 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4db/0xa70 [ 108.909715][ T1327] [ 108.909715][ T1327] stack backtrace: [ 108.915653][ T1327] CPU: 0 PID: 1327 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 108.923218][ T1327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.933298][ T1327] Workqueue: pencrypt_parallel padata_parallel_worker [ 108.940112][ T1327] Call Trace: [ 108.943424][ T1327] [ 108.946387][ T1327] dump_stack_lvl+0x18c/0x250 [ 108.951099][ T1327] ? show_regs_print_info+0x20/0x20 [ 108.956321][ T1327] ? print_deadlock_bug+0x435/0x5d0 [ 108.961560][ T1327] __lock_acquire+0x5dbc/0x7d40 [ 108.966470][ T1327] ? mark_lock+0x94/0x320 [ 108.970835][ T1327] ? verify_lock_unused+0x140/0x140 [ 108.976067][ T1327] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 108.982082][ T1327] ? lock_chain_count+0x20/0x20 [ 108.986959][ T1327] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.993149][ T1327] ? lockdep_hardirqs_on+0x98/0x150 [ 108.998376][ T1327] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.004563][ T1327] lock_acquire+0x19e/0x420 [ 109.009101][ T1327] ? padata_do_serial+0x644/0xa70 [ 109.014160][ T1327] ? read_lock_is_recursive+0x20/0x20 [ 109.019561][ T1327] ? __rwlock_init+0x150/0x150 [ 109.024350][ T1327] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 109.029933][ T1327] _raw_spin_lock+0x2e/0x40 [ 109.034477][ T1327] ? padata_do_serial+0x644/0xa70 [ 109.039543][ T1327] padata_do_serial+0x644/0xa70 [ 109.044428][ T1327] ? padata_parallel_worker+0x44/0x1c0 [ 109.049943][ T1327] padata_parallel_worker+0x6f/0x1c0 [ 109.055259][ T1327] ? process_scheduled_works+0x96f/0x15d0 [ 109.061009][ T1327] process_scheduled_works+0xa5d/0x15d0 [ 109.066600][ T1327] ? worker_attach_to_pool+0x380/0x380 [ 109.072102][ T1327] ? assign_work+0x3d2/0x5d0 [ 109.076723][ T1327] worker_thread+0xa55/0xfc0 [ 109.081341][ T1327] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 109.087272][ T1327] ? _raw_spin_unlock+0x40/0x40 [ 109.092167][ T1327] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 109.098095][ T1327] kthread+0x2fa/0x390 [ 109.102187][ T1327] ? pr_cont_work+0x560/0x560 [ 109.106898][ T1327] ? kthread_blkcg+0xd0/0xd0 [ 109.111514][ T1327] ret_from_fork+0x48/0x80 [ 109.115960][ T1327] ? kthread_blkcg+0xd0/0xd0 [ 109.120582][ T1327] ret_from_fork_asm+0x11/0x20 [ 109.125389][ T1327] [ 109.141794][ T5778] Bluetooth: hci3: command tx timeout [ 109.171603][ T6078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.250073][ T6078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.375644][ T6111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.860377][ T968] tipc: Node number set to 2130706433 [ 110.194408][ T6115] bond0: (slave syz_tun): Releasing backup interface [ 110.464086][ T32] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.565657][ T32] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.659578][ T32] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.719603][ T32] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.628156][ T32] hsr_slave_0: left promiscuous mode [ 111.636575][ T32] hsr_slave_1: left promiscuous mode [ 111.645028][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.652808][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.660765][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.670559][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.678780][ T32] bridge_slave_1: left allmulticast mode [ 111.686994][ T32] bridge_slave_1: left promiscuous mode [ 111.693531][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.705145][ T32] bridge_slave_0: left allmulticast mode [ 111.710857][ T32] bridge_slave_0: left promiscuous mode [ 111.717074][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.734294][ T32] veth1_macvtap: left promiscuous mode [ 111.741408][ T32] veth1_vlan: left promiscuous mode [ 111.749743][ T32] veth0_vlan: left promiscuous mode [ 112.074846][ T32] team0 (unregistering): Port device team_slave_1 removed [ 112.105099][ T32] team0 (unregistering): Port device team_slave_0 removed [ 112.138527][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.164903][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.246649][ T32] bond0 (unregistering): Released all slaves [ 112.663102][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.730137][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.793391][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.850342][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.987354][ T32] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.054786][ T32] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.121265][ T32] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.197276][ T32] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.625076][ T32] tipc: Disabling bearer [ 113.634044][ T32] tipc: Disabling bearer [ 113.639682][ T32] tipc: Left network mode [ 114.684487][ T32] hsr_slave_0: left promiscuous mode [ 114.690527][ T32] hsr_slave_1: left promiscuous mode [ 114.698767][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.706452][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.715709][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.725134][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.734140][ T32] bridge_slave_1: left allmulticast mode [ 114.739845][ T32] bridge_slave_1: left promiscuous mode [ 114.746358][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.757181][ T32] bridge_slave_0: left allmulticast mode [ 114.763545][ T32] bridge_slave_0: left promiscuous mode [ 114.769335][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.785691][ T32] hsr_slave_0: left promiscuous mode [ 114.793937][ T32] hsr_slave_1: left promiscuous mode [ 114.800062][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.817477][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.826100][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.836976][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.845521][ T32] bridge_slave_1: left allmulticast mode [ 114.851218][ T32] bridge_slave_1: left promiscuous mode [ 114.858914][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.870220][ T32] bridge_slave_0: left allmulticast mode [ 114.877277][ T32] bridge_slave_0: left promiscuous mode [ 114.884139][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.908995][ T32] hsr_slave_0: left promiscuous mode [ 114.917803][ T32] hsr_slave_1: left promiscuous mode [ 114.924854][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.935837][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.945485][ T32] bridge_slave_1: left allmulticast mode [ 114.951186][ T32] bridge_slave_1: left promiscuous mode [ 114.958431][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.967583][ T32] bridge_slave_0: left allmulticast mode [ 114.973808][ T32] bridge_slave_0: left promiscuous mode [ 114.979515][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.992253][ T32] veth1_macvtap: left promiscuous mode [ 114.997826][ T32] veth0_macvtap: left promiscuous mode [ 115.003484][ T32] veth1_vlan: left promiscuous mode [ 115.008802][ T32] veth0_vlan: left promiscuous mode [ 115.015675][ T32] veth1_macvtap: left promiscuous mode [ 115.021207][ T32] veth0_macvtap: left promiscuous mode [ 115.026947][ T32] veth1_vlan: left promiscuous mode [ 115.034086][ T32] veth0_vlan: left promiscuous mode [ 115.342498][ T32] team0 (unregistering): Port device team_slave_1 removed [ 115.368024][ T32] team0 (unregistering): Port device team_slave_0 removed [ 115.381071][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.396937][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.481370][ T32] bond0 (unregistering): Released all slaves [ 115.672631][ T32] team0 (unregistering): Port device team_slave_1 removed [ 115.697811][ T32] team0 (unregistering): Port device team_slave_0 removed [ 115.713815][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.733344][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.809260][ T32] bond0 (unregistering): Released all slaves [ 116.001199][ T32] team0 (unregistering): Port device team_slave_1 removed [ 116.024296][ T32] team0 (unregistering): Port device team_slave_0 removed [ 116.055901][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.083770][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.180048][ T32] bond0 (unregistering): Released all slaves