last executing test programs: 9m3.444835922s ago: executing program 32 (id=205): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x44, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x3f}, {0x6, 0x4, 0x8, 0x8}, {0x74, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x8, 0x1000, 0xaf1, 0x8, {0x86, 0x2, 0x5, 0x0, 0x1, 0x6}, {0x6, 0x0, 0x8, 0xfe01, 0x401, 0xff}, 0x6, 0xffffffff, 0x6}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x40) 7m52.245256805s ago: executing program 33 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 7m3.548170029s ago: executing program 34 (id=471): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'pimreg0\x00', {0xfffffffb}, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) 5m39.248379519s ago: executing program 4 (id=694): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a1cc04, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_winnt}, {@fat=@discard}]}, 0x81, 0x2ac, &(0x7f0000000840)="$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") socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x54, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x7, 0xd}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xb, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000f9030101000000000002a12373a488610e0905df000008000000050a000200040000000000010005000100016970018172a4073b2aaa9984205d240d3cae54262259b2734498f32a33f95949ec51bdb834af9acc34044a5c2b1a904d"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) 5m33.988894221s ago: executing program 4 (id=702): syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r0, 0x16) 5m32.778990377s ago: executing program 4 (id=705): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 5m32.735547618s ago: executing program 4 (id=706): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x200, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 5m31.358505487s ago: executing program 4 (id=710): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5m29.734188909s ago: executing program 4 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYBLOB="4898421eda593863fd5b7315f63a691c0fbac505bed535c6372cea1f57", @ANYRES32=r1, @ANYRES64=0x0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r0) 5m14.179335331s ago: executing program 35 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYBLOB="4898421eda593863fd5b7315f63a691c0fbac505bed535c6372cea1f57", @ANYRES32=r1, @ANYRES64=0x0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r0) 4m38.243139562s ago: executing program 5 (id=828): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4m34.7204188s ago: executing program 5 (id=838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 4m32.369897782s ago: executing program 5 (id=844): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xfe) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0xa, 0x7, 0x7, 0x10001}) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x1e, 0x4, 0x0) dup3(r7, r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4m27.843893194s ago: executing program 5 (id=853): r0 = getpid() socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @remote, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000008"], 0x18}}], 0x1, 0x4000084) 4m24.142647744s ago: executing program 5 (id=860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) 4m22.819277002s ago: executing program 5 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f00000007c0)=""/232, 0xe8}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f00000008c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/78, 0x4e}, {0x0}], 0x6, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x37, 0x64, 0x61, 0x61, 0x65, 0x62], 0x2d, [0x31, 0x38, 0x33, 0x64], 0x2d, [0x37, 0x31, 0x64], 0x2d, [0x35, 0x34, 0x66, 0x61], 0x2d, [0x33, 0x37, 0x36, 0x31, 0x30, 0x33, 0x37, 0x66]}}}, {@fsname={'fsname', 0x3d, 'debug_want_extra_isize'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000001c0)=0x1, 0x4) socket$tipc(0x1e, 0x2, 0x0) r7 = syz_clone(0xc4200000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m7.705715428s ago: executing program 36 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f00000007c0)=""/232, 0xe8}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f00000008c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/78, 0x4e}, {0x0}], 0x6, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x37, 0x64, 0x61, 0x61, 0x65, 0x62], 0x2d, [0x31, 0x38, 0x33, 0x64], 0x2d, [0x37, 0x31, 0x64], 0x2d, [0x35, 0x34, 0x66, 0x61], 0x2d, [0x33, 0x37, 0x36, 0x31, 0x30, 0x33, 0x37, 0x66]}}}, {@fsname={'fsname', 0x3d, 'debug_want_extra_isize'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000001c0)=0x1, 0x4) socket$tipc(0x1e, 0x2, 0x0) r7 = syz_clone(0xc4200000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m3.088622171s ago: executing program 7 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 4m2.819374804s ago: executing program 7 (id=901): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) close(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 4m0.591071454s ago: executing program 7 (id=904): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x7b}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m0.440830436s ago: executing program 7 (id=907): prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) io_setup(0x200, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) ptrace$pokeuser(0x6, r0, 0x78e, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3m56.55054448s ago: executing program 7 (id=911): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 3m53.163434896s ago: executing program 7 (id=920): prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) io_setup(0x200, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) ptrace$pokeuser(0x6, r0, 0x78e, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3m37.374557471s ago: executing program 37 (id=920): prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) io_setup(0x200, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) ptrace$pokeuser(0x6, r0, 0x78e, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2m38.440996665s ago: executing program 9 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open$dir(0x0, 0x127000, 0x8) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) geteuid() socket$unix(0x1, 0x5, 0x0) 2m38.243847668s ago: executing program 9 (id=1115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 2m38.06251673s ago: executing program 9 (id=1118): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0xc) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$KDFONTOP_SET_DEF(r3, 0x5434, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004}}, {{0x0, 0x0, &(0x7f0000001140)=[{0x0}, {&(0x7f0000001040)}], 0x2}}, {{&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20, 0x4004053}}, {{&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040410}}], 0x4, 0x20044880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r5, 0x601}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x2c, r5, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 2m36.923883595s ago: executing program 9 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000067194e63b50000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48) 2m35.491774255s ago: executing program 9 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2m32.142775711s ago: executing program 9 (id=1134): syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="020900000200"], 0x10}}, 0x0) 2m17.004283928s ago: executing program 38 (id=1134): syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="020900000200"], 0x10}}, 0x0) 35.96478005s ago: executing program 3 (id=1546): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 35.779956332s ago: executing program 3 (id=1547): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0xd9}}}], 0x18}, 0x24004800) 35.703079234s ago: executing program 3 (id=1548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x2a, @void}}}}}}}}, 0x32) 35.428662567s ago: executing program 3 (id=1549): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 35.099863033s ago: executing program 3 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f80"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 34.628005289s ago: executing program 3 (id=1555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) shutdown(r0, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 19.484402324s ago: executing program 39 (id=1555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) shutdown(r0, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 17.033958517s ago: executing program 0 (id=1637): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 16.759919601s ago: executing program 0 (id=1639): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x8, 0x4) 13.849594861s ago: executing program 0 (id=1651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x358, &(0x7f0000000480)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) 7.969177651s ago: executing program 0 (id=1682): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x1}, 0x8) 6.948195955s ago: executing program 0 (id=1687): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xc251}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x10140, 0x0) 5.935604959s ago: executing program 0 (id=1697): socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xf, &(0x7f0000000380)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', r0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000001200000000010000000100000506000000000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0xf0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}}) accept4(r2, 0x0, 0x0, 0x800) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 5.207805199s ago: executing program 8 (id=1702): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.33609083s ago: executing program 8 (id=1709): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50) ioctl$int_in(0xffffffffffffffff, 0xfc10, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, 0x0, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r2], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x44000) 4.035727804s ago: executing program 1 (id=1710): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 3.888678376s ago: executing program 8 (id=1711): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00005b1000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0xc5d6f000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {&(0x7f0000000240)="a61d", 0x2}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) 3.888366586s ago: executing program 1 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f000000d400)={0x1f, @none, 0xad}, 0xa) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01}, 0x810) 3.107946807s ago: executing program 1 (id=1715): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa0100fd, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0) 2.949715739s ago: executing program 2 (id=1716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) 2.949300319s ago: executing program 1 (id=1717): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d", 0x64}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 2.929452119s ago: executing program 2 (id=1718): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000d80), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057180ce88661691192dfeb3f420ab94d7b4656eb34b5a6d05aa918223dc798962d3d3be2d2eade00403b6061549e8fc2ebbc4234133cc54df2476337ebec1a5cf2a2ae64d5a9286ddc8955fcca6c082dd79fd4f1b843f7458defb3dc58d291284dc04f2b5496ff20278a", 0xb5}, {&(0x7f0000000340)="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", 0x19e}, {&(0x7f0000000dc0)="4a3dfc057366065560145a484cb1f78097b0bce43d7391d769edd2e5d976fe7b7969d33e2e83c86dc597c7ce3dd775d0cb0e484ddfd7fc2cce12618fa00b885f1fc92edc913e17647897133fa82e22", 0x4f}], 0x3}, 0x0) 2.845461231s ago: executing program 1 (id=1719): ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'gretap0\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000004000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000240)='GPL\x00', 0xc, 0xf1, &(0x7f0000000280)=""/241, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r3, {0xc, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x874f, 0x8, 0x2}, {0x0, 0x3, 0x5}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x40010) syz_emit_ethernet(0x3a, &(0x7f0000002040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xb9, 0x8}}}}}}, 0x0) 2.739986992s ago: executing program 2 (id=1721): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0xfffe, 0x0, @private0, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 2.399913497s ago: executing program 6 (id=1724): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) recvmmsg$unix(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)=""/139, 0x8b}], 0x1}}], 0x1, 0x2061, 0x0) 1.886743814s ago: executing program 2 (id=1725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180900", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xc, 0x0, &(0x7f0000000000)="259a53f271a76d26089c0000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r4 = getuid() r5 = syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000380)=ANY=[], 0x2, 0x826, &(0x7f00000012c0)="$eJzs3U9sHFf9APDvuHacOGp+1e/3U4miNJ0kRUpE6q7t1sXqoWzXY2dae9faXaNEqGqjxilRnLZqVZVGiJJLCwiEOHEsvVa99AZCAokDcEKiBy4cKlXqBVQQSAiEkIJ2djde/1k7ThynlM9n1X2zb957897sZL87W7+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiqUyXSmNJzOXVxTNpf5Xpem1+k/Xd9n6+KtlkuxFJ67/YuzcOtrMO/v/K6ntbT8ficPvV4djbSvbGlf333vPY/w0OdOtv0qGbdbT/qqHeF0nEN1udunRueXnp5dvQkV30nZ92FvbecJV/XGs9z2bVvFHL58uzWZo3aunU5GTpodMzjXQmn8saZxvNbD6t1LNys1ZPT1ROpmNTUxNpNnq2tlidnS7PZd3MRx8cL5Um0ydHF7JyvVGrPvTkaKNyOp+by6uzRZnx0mvRKvNo60B8Km+mzaw8n6YXLi4vTWzV1VahsVU5w6sOnMMP3PPxqx/99eJS64Ds10jSOTDHx8bGx8cmH5l65NFSaXC8NL46o7RGXC8RAxGtErfloOXO2r9B3mDniFm3IuLa/+zMhzfcooFO/I+5yKMai3Em0khjoHheeQxFJaajHrWYb73+3dCa9evi/+cf+tNvNttub/zvRvmDK6sPRRH/j7RfHekX/9f1Ygceg/1arb7X7k1v3ivxelyJS3EulmM5luLltbX2rK2xweNGytzyY7idDuxsq7ORRTXyaEQSecxHuchJi5xapDEVkzEZpXgmTsdMNCKNmchjLrJoxNloRDOy4oiqRD2yKEczalGPNE5EJU5GGmMxFVMxEWlkMRpnoxaLUY3ZmI5y0cqFuFjs94k1/br3G8/+5Pnffvx2a/l6obFNBpK0vszt/zDiL5sUWhfutxH/WyUGOkf3rsQkdsnebb6rO/PBDTvgWhH/B+90NwAAAIDbKCl+fU8iYijuK5Zm8rnsK3e6WwAAAMAOKv6u+XArGWot3RdJ6/y/tEHJDyKGd717AAAAwA5Iijl2SUSMxP3tpe50qY1+BAAAAAD+AxX///9IKxmJeKPIcP4PAAAAnzHf6neN/Y/2FNfYHYnGwnDysz9HvT6UXF0480ByudwqV758V7teJ/ny9RabM4eSA51GimRy8Mr+JCIGK9nhpHv1y3915hJ8UjwfWrkAYb9r/SdbdCA270DxKr4bR9tljp5vp+e7a9pbGZnJ57LRSm3usbGk8+NI89UXLn4tiuF/uzp/IIkLF5eXRp97cfl80ZerrVauXu5cHj7p1opoT6jYpC/XurMp7tt4xEPFRIzOdkfa2y31jr9zNdmBzcef9G7zzTjWLnNspJ2OrB7/3tY2x0YfG4ty+cBAMzvTfPVaz+g7vRhbGflwd7TJNt6FN+N4u8zxE8fbyQa9GF/VixfW92K8d//f2L644V68ffSNM3/7ZS3JJrbqxcQt9gLgTrlQXPVnJQrtK6LQP6+1tQLamri7r1tzO59yF1a+ZXTr98S6wVgX3dObie5vxol2mRPt7xODhzaIK6UNPtFfuvjSrzqf6A+/+8MfPX3k1++vievb6MW7cbJdppPE//6iT4xtjfl7a6LqO60a7/TdbmNuPHlteGIoad98KK48ePHyueeXnl96YXx8YrL0cKn0yHgMFV8VOkmfnoo8AP/dtrrHzvtfv1603114koe3OKtOBrt/UjAaz8WLsRzn41Qx2yAi7t+41ZGeP0M4tcVZ60jPHV5ObXFuuVJ2fG3Z4eNJ9Ck70bPHPveDIvn7bXpDAGAXHNsiDidxT/uyP6/d3amxpsRdSXKq97z7qxFxqF/MbcXyk+0b53bPjqN/LO/1h076xd3YKQDwGZfVP0lGmm8l9Xq+8MzY1NRYuXk6S+u1ylNpPZ+ezdK82szqldPl6myWLtRrzVql+9PxdNZIG4sLC7V6M52p1dOFWiM/U9z5Pe3c+r2RzZerzbzSWJjLyo0srdSqzXKlmU7njUq6sPjEXN44ndWLyo2FrJLP5JVyM69V00ZtsV7JRtO0kWU9BfPprNrMZ/JsKM2r6UI9ny/Xr0bE3OJ8lk5njUo9X2jW2g12t5VXZw7U54tmR9cP/4+7vb8B4NPgldevXDq3vLz08s0t/P5GCt/pMQIAq4nSAAAAAAAAAAAAAADw6bd+ul4rd1sTAYfipqcPvjIcrYV9N1u9tfB0ZyS3MItxk4XB2OEGN1/4wnvtwexEg+vbGerm3L3VvM99q97TPZ1dvEs7YScXnn388UtXrkZEkZMM9u7eJ944ePrDLLqj26Sdjf+lbDTV9a0DEXt+/P12zpf6FE4Gd3ikH3QHuL3q15JN/uHv6scQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyQfwcAAP//LdJG/Q==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2042, 0x10d) fsync(r5) statx(r5, &(0x7f0000000240)='./file1\x00', 0x400, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) setresuid(r4, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 1.786117735s ago: executing program 6 (id=1726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10, 0x4f}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @local}]}, 0x2c}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r5}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) 1.695478916s ago: executing program 2 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x358, &(0x7f0000000480)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) 1.48237473s ago: executing program 8 (id=1728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) 463.179483ms ago: executing program 6 (id=1729): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x91) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 419.885414ms ago: executing program 8 (id=1730): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5", 0x96}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 373.313264ms ago: executing program 8 (id=1731): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x3]}, 0x6) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x3d, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x8, 0x8, 0x4, 0x4009, 0xa}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x50, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) close(r5) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000040)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) 363.626604ms ago: executing program 1 (id=1732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4008040) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x86, &(0x7f0000002600)}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r5, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e804db9321ed9a0d3b0d49aa2ac2a3f14") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r4, 0x20, &(0x7f0000000500)={&(0x7f0000000280)=""/84, 0x54, 0x0, &(0x7f00000004c0)=""/13, 0xd}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x14, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000008000100000000000000000018110000b7a864141bddbbda425668ef843da301c0d15d5ebccab290f0aa2ad6804746afaf59dff75dfcd2fe58a8e5d8a572717e0c9ec4a6f96d505ec31a6c4f4cb1f3a8baa34f384274489e66e23354a692b00d8d4583b2cd64bf27de9c1045fb2e9d147d8e582f907cac", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018500000020000000000000000000000950000000000000018400000fcffffff0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x10, '\x00', 0x0, @cgroup_skb=0x1, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x8, 0x5, 0x3}, 0x10, r6, r3, 0x3, &(0x7f0000000640)=[r7, r1, r8, r3], &(0x7f0000000680)=[{0x5, 0x1, 0x1, 0x3}, {0x3, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x6, 0x6}], 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000003c0)=0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 251.928116ms ago: executing program 6 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x9}]}}]}, 0x40}}, 0x0) 201.848267ms ago: executing program 2 (id=1734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)=""/29, &(0x7f0000000240)=0x1d) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmmsg(r0, &(0x7f0000000940), 0x0, 0x20040010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) sendto$inet6(r0, &(0x7f0000000040)="eca727e4a7d0dacebece68d033d58d05dede71cd8afe590897aa78ccb16ced4442e5718559a35326b93d5b8d6f99019c853ad34b8255226e135cdf5de5b00bc2a13edb6103fb5a8fabb4daa9f5d61ce0899fa0556cb837e776fc10f55abb4897c3b98af3a565c0b899a0346f2102ec0d44054410ed5fc07e11d0df271c64d273db575b7642f1d1818ee61021b9eb894324643940b2f4c544edc0ea0bb3aa79dea2b8220a0f1c117dc748c628ceadd8138de9858e057bd39716a264aaac576a10f5143b31839d163794b5db767e199d5d728d", 0xd2, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @private0, 0x74}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbd}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x22, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 140.548078ms ago: executing program 6 (id=1735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x18, r1, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 0s ago: executing program 6 (id=1736): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002880)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): m="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.616698][ T26] audit: type=1326 audit(250.580:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.663177][ T6595] loop3: detected capacity change from 0 to 256 [ 250.665639][ T26] audit: type=1326 audit(250.600:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.704042][ T26] audit: type=1326 audit(250.600:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.743998][ T26] audit: type=1326 audit(250.610:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.771944][ T26] audit: type=1326 audit(250.610:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.786321][ T26] audit: type=1326 audit(250.610:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.790471][ T6595] FAT-fs (loop3): Unrecognized mount option "shor†name=mixed" or missing value [ 250.792450][ T26] audit: type=1326 audit(250.610:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.801077][ T26] audit: type=1326 audit(250.610:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 250.807781][ T26] audit: type=1326 audit(250.610:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff82b669dc code=0x7ffc0000 [ 253.271725][ T6614] loop7: detected capacity change from 0 to 256 [ 253.300901][ T6618] loop5: detected capacity change from 0 to 1024 [ 253.767994][ T6614] FAT-fs (loop7): Directory bread(block 64) failed [ 253.769964][ T6614] FAT-fs (loop7): Directory bread(block 65) failed [ 253.771906][ T6614] FAT-fs (loop7): Directory bread(block 66) failed [ 253.773861][ T6614] FAT-fs (loop7): Directory bread(block 67) failed [ 253.775822][ T6614] FAT-fs (loop7): Directory bread(block 68) failed [ 253.777706][ T6614] FAT-fs (loop7): Directory bread(block 69) failed [ 253.779590][ T6614] FAT-fs (loop7): Directory bread(block 70) failed [ 253.781499][ T6614] FAT-fs (loop7): Directory bread(block 71) failed [ 253.783426][ T6614] FAT-fs (loop7): Directory bread(block 72) failed [ 253.785328][ T6614] FAT-fs (loop7): Directory bread(block 73) failed [ 253.897825][ T6618] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.937147][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.939053][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.019297][ T6633] loop4: detected capacity change from 0 to 1024 [ 255.062488][ T6635] 9pnet: Insufficient options for proto=fd [ 255.074213][ T6640] udc-core: couldn't find an available UDC or it's busy [ 255.082378][ T6633] EXT4-fs (loop4): Test dummy encryption mode enabled [ 255.099368][ T6640] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 255.104681][ T6641] loop3: detected capacity change from 0 to 256 [ 255.107487][ T6633] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,noblock_validity,max_batch_time=0x000000007fffffff,acl,init_itable=0x000000000000000e,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 260.268542][ T6694] loop3: detected capacity change from 0 to 2048 [ 260.575010][ T6694] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 261.669904][ T6703] 9pnet: Insufficient options for proto=fd [ 261.839219][ T6694] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 261.945832][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 262.364949][ T6718] xt_bpf: check failed: parse error [ 262.494709][ T6720] hub 9-0:1.0: USB hub found [ 262.496388][ T6720] hub 9-0:1.0: 8 ports detected [ 263.195046][ T6736] loop4: detected capacity change from 0 to 256 [ 263.284901][ T6736] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.298982][ T6736] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 263.331219][ T6736] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 263.824179][ T6746] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 263.879858][ T6746] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 264.967841][ T6754] loop3: detected capacity change from 0 to 1024 [ 265.001037][ T6754] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 265.003178][ T6754] EXT4-fs (loop3): Ignoring removed bh option [ 265.036056][ T6754] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.104371][ T6754] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 265.286394][ T6765] 9pnet: Insufficient options for proto=fd [ 265.466364][ T6769] xt_hashlimit: max too large, truncated to 1048576 [ 270.470296][ T6804] loop5: detected capacity change from 0 to 512 [ 270.506129][ T6804] EXT4-fs (loop5): Test dummy encryption mode enabled [ 270.508050][ T6804] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 270.510225][ T6804] EXT4-fs (loop5): Unrecognized mount option "subj_user=sched_switch" or missing value [ 271.715553][ T6817] udc-core: couldn't find an available UDC or it's busy [ 271.721437][ T6817] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 272.130714][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 272.186015][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 272.243747][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 272.302746][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 272.309040][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 272.314001][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 272.331377][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 273.642009][ T6852] loop7: detected capacity change from 0 to 256 [ 273.649084][ T6852] FAT-fs (loop7): Unrecognized mount option "shor†name=mixed" or missing value [ 274.979908][ T6870] loop7: detected capacity change from 0 to 512 [ 275.131225][ T6870] EXT4-fs (loop7): failed to initialize system zone (-117) [ 275.133473][ T6870] EXT4-fs (loop7): mount failed [ 276.334979][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 276.334994][ T26] audit: type=1326 audit(276.230:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 276.342701][ T26] audit: type=1326 audit(276.270:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 276.352456][ T26] audit: type=1326 audit(276.270:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 276.358821][ T26] audit: type=1326 audit(276.270:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 276.366857][ T26] audit: type=1326 audit(276.290:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=287 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 276.373526][ T26] audit: type=1326 audit(276.290:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 276.379902][ T26] audit: type=1326 audit(276.290:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 276.444528][ T6893] Illegal XDP return value 4294967274, expect packet loss! [ 276.456542][ T6897] fuse: Bad value for 'fd' [ 276.681029][ T6907] loop5: detected capacity change from 0 to 256 [ 277.849274][ T6907] FAT-fs (loop5): Directory bread(block 64) failed [ 277.851275][ T6907] FAT-fs (loop5): Directory bread(block 65) failed [ 277.853196][ T6907] FAT-fs (loop5): Directory bread(block 66) failed [ 277.855166][ T6907] FAT-fs (loop5): Directory bread(block 67) failed [ 277.857048][ T6907] FAT-fs (loop5): Directory bread(block 68) failed [ 277.858805][ T6907] FAT-fs (loop5): Directory bread(block 69) failed [ 277.860628][ T6907] FAT-fs (loop5): Directory bread(block 70) failed [ 277.862502][ T6907] FAT-fs (loop5): Directory bread(block 71) failed [ 277.864397][ T6907] FAT-fs (loop5): Directory bread(block 72) failed [ 277.866557][ T6907] FAT-fs (loop5): Directory bread(block 73) failed [ 279.280397][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.675'. [ 279.937594][ T6927] loop5: detected capacity change from 0 to 512 [ 280.111815][ T6927] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.676: casefold flag without casefold feature [ 280.125398][ T6927] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.676: couldn't read orphan inode 15 (err -117) [ 280.132706][ T6927] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 281.292411][ T6951] loop4: detected capacity change from 0 to 4096 [ 281.840506][ T6951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 281.926797][ T4155] Bluetooth: hci3: command 0x0406 tx timeout [ 283.649518][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.685'. [ 283.700823][ T6961] device bridge_slave_1 left promiscuous mode [ 283.847099][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.937881][ T6967] loop3: detected capacity change from 0 to 256 [ 284.345486][ T6967] FAT-fs (loop3): Directory bread(block 64) failed [ 284.347534][ T6967] FAT-fs (loop3): Directory bread(block 65) failed [ 284.349503][ T6967] FAT-fs (loop3): Directory bread(block 66) failed [ 284.351363][ T6967] FAT-fs (loop3): Directory bread(block 67) failed [ 284.353313][ T6967] FAT-fs (loop3): Directory bread(block 68) failed [ 284.355313][ T6967] FAT-fs (loop3): Directory bread(block 69) failed [ 284.357149][ T6967] FAT-fs (loop3): Directory bread(block 70) failed [ 284.358995][ T6967] FAT-fs (loop3): Directory bread(block 71) failed [ 284.360816][ T6967] FAT-fs (loop3): Directory bread(block 72) failed [ 284.362620][ T6967] FAT-fs (loop3): Directory bread(block 73) failed [ 285.521883][ T6961] device bridge_slave_0 left promiscuous mode [ 285.523866][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.356488][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.6.690'. [ 288.831161][ T7002] loop4: detected capacity change from 0 to 256 [ 289.318277][ T7006] loop5: detected capacity change from 0 to 256 [ 290.815588][ T7006] exfat: Unknown parameter 'iochar' [ 291.762951][ T7006] netlink: 9 bytes leftover after parsing attributes in process `syz.5.693'. [ 291.807795][ T7006] device gretap0 entered promiscuous mode [ 292.841737][ T7012] loop7: detected capacity change from 0 to 764 [ 293.838110][ T26] audit: type=1326 audit(293.810:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 293.965938][ T26] audit: type=1326 audit(293.910:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 293.972077][ T26] audit: type=1326 audit(293.910:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 294.995408][ T7022] loop5: detected capacity change from 0 to 512 [ 295.042557][ T26] audit: type=1326 audit(293.910:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 295.049436][ T26] audit: type=1326 audit(293.980:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 295.071942][ T26] audit: type=1326 audit(293.980:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 295.101638][ T26] audit: type=1326 audit(293.980:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 295.125097][ T26] audit: type=1326 audit(293.980:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 295.125666][ T7022] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.177337][ T26] audit: type=1326 audit(293.980:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 295.238458][ T7033] loop3: detected capacity change from 0 to 256 [ 295.243535][ T26] audit: type=1326 audit(293.980:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.5.700" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab6419a8 code=0x7ffc0000 [ 296.370521][ T7042] tipc: Started in network mode [ 296.373166][ T7042] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 296.375950][ T7042] tipc: Enabling of bearer rejected, failed to enable media [ 296.469843][ T7033] FAT-fs (loop3): Directory bread(block 64) failed [ 296.471788][ T7033] FAT-fs (loop3): Directory bread(block 65) failed [ 296.473916][ T7033] FAT-fs (loop3): Directory bread(block 66) failed [ 296.475857][ T7033] FAT-fs (loop3): Directory bread(block 67) failed [ 296.477679][ T7033] FAT-fs (loop3): Directory bread(block 68) failed [ 296.479435][ T7033] FAT-fs (loop3): Directory bread(block 69) failed [ 296.481274][ T7033] FAT-fs (loop3): Directory bread(block 70) failed [ 296.483089][ T7033] FAT-fs (loop3): Directory bread(block 71) failed [ 296.485140][ T7033] FAT-fs (loop3): Directory bread(block 72) failed [ 296.486871][ T7033] FAT-fs (loop3): Directory bread(block 73) failed [ 298.413943][ T7072] loop5: detected capacity change from 0 to 512 [ 299.060097][ T7079] loop3: detected capacity change from 0 to 512 [ 299.593023][ T7072] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 302.775646][ T7103] udc-core: couldn't find an available UDC or it's busy [ 302.777526][ T7103] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.014682][ T7115] x_tables: duplicate underflow at hook 3 [ 303.881819][ T7113] loop7: detected capacity change from 0 to 256 [ 304.089705][ T7113] FAT-fs (loop7): Directory bread(block 64) failed [ 304.091714][ T7113] FAT-fs (loop7): Directory bread(block 65) failed [ 304.093599][ T7113] FAT-fs (loop7): Directory bread(block 66) failed [ 304.095603][ T7113] FAT-fs (loop7): Directory bread(block 67) failed [ 304.097500][ T7113] FAT-fs (loop7): Directory bread(block 68) failed [ 304.099394][ T7113] FAT-fs (loop7): Directory bread(block 69) failed [ 304.101357][ T7113] FAT-fs (loop7): Directory bread(block 70) failed [ 304.103152][ T7113] FAT-fs (loop7): Directory bread(block 71) failed [ 304.105074][ T7113] FAT-fs (loop7): Directory bread(block 72) failed [ 304.106887][ T7113] FAT-fs (loop7): Directory bread(block 73) failed [ 308.825213][ T7138] udc-core: couldn't find an available UDC or it's busy [ 308.827215][ T7138] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 310.289836][ T7153] 9pnet: Could not find request transport: fd0x0000000000000004 [ 313.930180][ T7178] loop3: detected capacity change from 0 to 512 [ 314.025934][ T7178] EXT4-fs (loop3): failed to initialize system zone (-117) [ 314.028569][ T7178] EXT4-fs (loop3): mount failed [ 314.055352][ T7184] loop5: detected capacity change from 0 to 256 [ 314.767514][ T7184] FAT-fs (loop5): Directory bread(block 64) failed [ 314.769498][ T7184] FAT-fs (loop5): Directory bread(block 65) failed [ 314.771451][ T7184] FAT-fs (loop5): Directory bread(block 66) failed [ 314.773263][ T7184] FAT-fs (loop5): Directory bread(block 67) failed [ 314.818209][ T7184] FAT-fs (loop5): Directory bread(block 68) failed [ 314.884977][ T7184] FAT-fs (loop5): Directory bread(block 69) failed [ 314.887121][ T7184] FAT-fs (loop5): Directory bread(block 70) failed [ 314.888970][ T7184] FAT-fs (loop5): Directory bread(block 71) failed [ 314.891112][ T7184] FAT-fs (loop5): Directory bread(block 72) failed [ 314.893099][ T7184] FAT-fs (loop5): Directory bread(block 73) failed [ 314.921337][ T7200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 314.924447][ T7200] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 316.212153][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.214134][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.346542][ T7215] 9pnet: Could not find request transport: fd0x0000000000000004 [ 316.796269][ T7229] hub 9-0:1.0: USB hub found [ 316.798146][ T7229] hub 9-0:1.0: 8 ports detected [ 316.918732][ T4608] Bluetooth: hci0: command 0x0409 tx timeout [ 317.584977][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 317.584990][ T26] audit: type=1326 audit(317.480:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 317.593000][ T26] audit: type=1326 audit(317.520:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 317.626078][ T7192] chnl_net:caif_netlink_parms(): no params data found [ 317.848512][ T26] audit: type=1326 audit(317.520:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 318.728014][ T26] audit: type=1326 audit(317.520:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 318.734243][ T26] audit: type=1326 audit(317.530:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 318.801216][ T26] audit: type=1326 audit(317.530:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 318.807406][ T26] audit: type=1326 audit(317.530:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 318.813598][ T26] audit: type=1326 audit(317.530:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 318.819783][ T26] audit: type=1326 audit(317.530:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 318.829076][ T26] audit: type=1326 audit(317.570:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.748" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 319.114530][ T7259] loop5: detected capacity change from 0 to 256 [ 319.149311][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.169390][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.185114][ T7192] device bridge_slave_0 entered promiscuous mode [ 319.219788][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.225171][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.250441][ T7192] device bridge_slave_1 entered promiscuous mode [ 319.545535][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.806773][ T5066] Bluetooth: hci0: command 0x041b tx timeout [ 321.800545][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.865075][ T4155] Bluetooth: hci0: command 0x040f tx timeout [ 321.995986][ T7192] team0: Port device team_slave_0 added [ 322.007196][ T7192] team0: Port device team_slave_1 added [ 322.086856][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.089016][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.134785][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.164938][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.166966][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.210133][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.529103][ T7192] device hsr_slave_0 entered promiscuous mode [ 322.547342][ T7289] netlink: 104 bytes leftover after parsing attributes in process `syz.7.757'. [ 322.555901][ T7192] device hsr_slave_1 entered promiscuous mode [ 322.715400][ T7192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.718557][ T7192] Cannot create hsr debugfs directory [ 324.799733][ T4155] Bluetooth: hci0: command 0x0419 tx timeout [ 328.326765][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 329.163139][ T7341] loop3: detected capacity change from 0 to 256 [ 329.275232][ T7192] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.379608][ T7192] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.541591][ T7192] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.825676][ T7192] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.841941][ T7360] 9pnet: Insufficient options for proto=fd [ 332.814992][ T3321] Bluetooth: hci1: command 0x0406 tx timeout [ 334.362647][ T7379] udc-core: couldn't find an available UDC or it's busy [ 334.388185][ T7379] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 335.454157][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.629581][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.685638][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.688569][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.691664][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.696617][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.747772][ T1841] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.750041][ T1841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.752769][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.772878][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.788876][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.790914][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.793822][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.834089][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.861992][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.865510][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.884576][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.903035][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.917545][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.993535][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.002715][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.034095][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.066063][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.083874][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.950825][ T7192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.195702][ T7415] 9pnet: Insufficient options for proto=fd [ 337.346359][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.348729][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.374996][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.334882][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 338.334898][ T26] audit: type=1326 audit(337.820:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.342485][ T26] audit: type=1326 audit(337.830:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.445068][ T26] audit: type=1326 audit(338.000:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.576122][ T26] audit: type=1326 audit(338.000:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.582455][ T26] audit: type=1326 audit(338.010:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.625075][ T26] audit: type=1326 audit(338.090:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.652180][ T26] audit: type=1326 audit(338.090:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.683388][ T26] audit: type=1326 audit(338.090:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.703737][ T26] audit: type=1326 audit(338.220:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 338.723268][ T7442] device wg2 entered promiscuous mode [ 338.727883][ T26] audit: type=1326 audit(338.220:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.7.792" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 340.497204][ T7465] 9pnet: Insufficient options for proto=fd [ 341.253501][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.804'. [ 342.045435][ T7464] loop3: detected capacity change from 0 to 40427 [ 342.066798][ T7464] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 342.075515][ T7464] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 342.872470][ T7464] F2FS-fs (loop3): invalid crc value [ 342.988017][ T7464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 343.013342][ T7464] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 343.024479][ T7464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 344.148434][ T7499] loop5: detected capacity change from 0 to 4096 [ 344.177548][ T7436] device wg2 left promiscuous mode [ 344.517651][ T7499] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 347.098139][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.148021][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.679940][ T7516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.978458][ T7436] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.981827][ T7436] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.984309][ T7436] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.992665][ T7436] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.280232][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.819'. [ 348.336447][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.339771][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.520368][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.533372][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.543622][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.555231][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.562488][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.570108][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.588472][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.592819][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.598491][ T7192] device veth0_vlan entered promiscuous mode [ 349.519430][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.522325][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.630952][ T7192] device veth1_vlan entered promiscuous mode [ 350.046298][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.055371][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.065584][ T7562] hub 9-0:1.0: USB hub found [ 350.067399][ T7562] hub 9-0:1.0: 8 ports detected [ 350.214458][ T7192] device veth0_macvtap entered promiscuous mode [ 350.412456][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 350.425656][ T7192] device veth1_macvtap entered promiscuous mode [ 350.433007][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 351.371623][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.374653][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.448219][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.451260][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.502935][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.533279][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.540317][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.558094][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.608000][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.613464][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.617264][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.620617][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.623507][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.626889][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.629820][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.633887][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.637038][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.640187][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.646535][ T7192] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.649020][ T7192] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.651580][ T7192] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.653916][ T7192] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.417066][ T7595] udc-core: couldn't find an available UDC or it's busy [ 353.429492][ T7595] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 355.483924][ T7604] udc-core: couldn't find an available UDC or it's busy [ 355.485323][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.488363][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.490191][ T7604] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 355.542564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.545122][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.547572][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.552333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 355.581089][ T4938] tipc: Left network mode [ 358.008644][ T7643] hub 9-0:1.0: USB hub found [ 358.010454][ T7643] hub 9-0:1.0: 8 ports detected [ 362.735548][ T7673] netlink: 'syz.6.855': attribute type 9 has an invalid length. [ 362.737796][ T7673] netlink: 'syz.6.855': attribute type 7 has an invalid length. [ 362.740170][ T7673] netlink: 'syz.6.855': attribute type 8 has an invalid length. [ 365.696030][ T7719] loop5: detected capacity change from 0 to 128 [ 365.944827][ T7719] EXT4-fs (loop5): Invalid want_extra_isize 1 [ 366.510528][ T7729] udc-core: couldn't find an available UDC or it's busy [ 366.520441][ T7729] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 367.335325][ T4938] device hsr_slave_0 left promiscuous mode [ 367.385700][ T4938] device hsr_slave_1 left promiscuous mode [ 367.475261][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.482461][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.485746][ T4938] device bridge_slave_1 left promiscuous mode [ 367.487638][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.542610][ T4938] device bridge_slave_0 left promiscuous mode [ 367.544507][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.668348][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 368.709735][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 368.728832][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.778646][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.112292][ T4938] bond0 (unregistering): Released all slaves [ 370.220245][ T7754] netlink: 'syz.3.869': attribute type 9 has an invalid length. [ 370.222527][ T7754] netlink: 'syz.3.869': attribute type 7 has an invalid length. [ 370.224677][ T7754] netlink: 'syz.3.869': attribute type 8 has an invalid length. [ 374.271556][ T7785] hub 9-0:1.0: USB hub found [ 374.273257][ T7785] hub 9-0:1.0: 8 ports detected [ 374.839668][ T7793] device bridge_slave_1 left promiscuous mode [ 374.841580][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.908717][ T7793] device bridge_slave_0 left promiscuous mode [ 374.911425][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.095841][ T7813] loop8: detected capacity change from 0 to 512 [ 376.203101][ T7813] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 376.701400][ T7820] netlink: 'syz.8.881': attribute type 9 has an invalid length. [ 376.703990][ T7820] netlink: 'syz.8.881': attribute type 7 has an invalid length. [ 376.706395][ T7820] netlink: 'syz.8.881': attribute type 8 has an invalid length. [ 377.671965][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.673879][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.564651][ T7855] udc-core: couldn't find an available UDC or it's busy [ 381.583143][ T7855] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 383.037558][ T7861] netlink: 'syz.8.892': attribute type 4 has an invalid length. [ 385.666530][ T7898] netlink: 'syz.3.896': attribute type 9 has an invalid length. [ 385.669021][ T7898] netlink: 'syz.3.896': attribute type 7 has an invalid length. [ 385.671274][ T7898] netlink: 'syz.3.896': attribute type 8 has an invalid length. [ 385.795153][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 385.795168][ T26] audit: type=1326 audit(385.720:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 385.844942][ T26] audit: type=1326 audit(385.810:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 385.890715][ T4157] Bluetooth: hci4: command 0x0409 tx timeout [ 385.897349][ T26] audit: type=1326 audit(385.810:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 385.903540][ T26] audit: type=1326 audit(385.830:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 385.959127][ T7907] loop8: detected capacity change from 0 to 512 [ 386.083137][ T26] audit: type=1326 audit(385.830:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 386.120855][ T7907] EXT4-fs (loop8): 1 orphan inode deleted [ 386.124948][ T7907] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 387.398579][ T26] audit: type=1326 audit(385.830:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 387.420547][ T7922] udc-core: couldn't find an available UDC or it's busy [ 387.422790][ T7922] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 387.446991][ T26] audit: type=1326 audit(385.830:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 387.453004][ T26] audit: type=1326 audit(385.830:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 387.510895][ T7865] chnl_net:caif_netlink_parms(): no params data found [ 387.578618][ T26] audit: type=1326 audit(385.830:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 387.615679][ T26] audit: type=1326 audit(385.830:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89ee69a8 code=0x7ffc0000 [ 387.935370][ T4157] Bluetooth: hci4: command 0x041b tx timeout [ 388.701812][ T7932] device syzkaller0 entered promiscuous mode [ 388.747349][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.749354][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.752137][ T7865] device bridge_slave_0 entered promiscuous mode [ 388.775598][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.794993][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.825902][ T7865] device bridge_slave_1 entered promiscuous mode [ 390.127209][ T4157] Bluetooth: hci4: command 0x040f tx timeout [ 391.361501][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.430383][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.590530][ T7865] team0: Port device team_slave_0 added [ 391.609946][ T7865] team0: Port device team_slave_1 added [ 392.398872][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 392.840999][ T7973] binder: 7966:7973 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 393.852505][ T7970] netlink: 'syz.6.912': attribute type 9 has an invalid length. [ 393.854900][ T7970] netlink: 'syz.6.912': attribute type 7 has an invalid length. [ 393.856900][ T7970] netlink: 'syz.6.912': attribute type 8 has an invalid length. [ 394.156585][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.158575][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.216126][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.272519][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.274431][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.373802][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.841649][ T7865] device hsr_slave_0 entered promiscuous mode [ 394.875882][ T7865] device hsr_slave_1 entered promiscuous mode [ 395.146563][ T7865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.149763][ T7865] Cannot create hsr debugfs directory [ 396.189470][ T8004] device syzkaller0 entered promiscuous mode [ 396.753396][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 396.753413][ T26] audit: type=1326 audit(396.720:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 396.794593][ T26] audit: type=1326 audit(396.760:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 396.825333][ T26] audit: type=1326 audit(396.780:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 396.831357][ T26] audit: type=1326 audit(396.780:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 396.967213][ T7865] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 397.075309][ T26] audit: type=1326 audit(396.780:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 397.595288][ T26] audit: type=1326 audit(396.780:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 397.601543][ T26] audit: type=1326 audit(396.780:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 397.675032][ T26] audit: type=1326 audit(396.780:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 397.742252][ T26] audit: type=1326 audit(396.780:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 397.772017][ T7865] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 397.814542][ T26] audit: type=1326 audit(396.780:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.8.923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 397.848638][ T8027] netlink: 'syz.3.924': attribute type 9 has an invalid length. [ 397.851052][ T8027] netlink: 'syz.3.924': attribute type 7 has an invalid length. [ 397.853231][ T8027] netlink: 'syz.3.924': attribute type 8 has an invalid length. [ 397.855986][ T7865] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 398.080321][ T7865] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 398.892319][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.020027][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.023024][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.057526][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.116383][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 399.119680][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.122538][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.124495][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.250008][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.252918][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.266978][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.290570][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.292590][ T639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.326215][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.395812][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.399214][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.453714][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.470416][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.515829][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.544124][ T7865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.577919][ T7865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.615678][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.620071][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.623180][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.667600][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.677193][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.714430][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 400.466496][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.488140][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.490502][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.278862][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.282061][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.328894][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.349427][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.367216][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.375730][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.413389][ T7865] device veth0_vlan entered promiscuous mode [ 401.426460][ T7865] device veth1_vlan entered promiscuous mode [ 401.545445][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 401.548624][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 401.556460][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.575874][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.582460][ T7865] device veth0_macvtap entered promiscuous mode [ 401.594386][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 401.615739][ T7865] device veth1_macvtap entered promiscuous mode [ 401.696961][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.700033][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.702763][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.737457][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.740707][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.743656][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.764929][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.767885][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.806487][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.808862][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.811929][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.874614][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.878140][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.880942][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.883738][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.912439][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.935009][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.942721][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.950336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.953482][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.999024][ T7865] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.001576][ T7865] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.004117][ T7865] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.022559][ T7865] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.264978][ T639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.267500][ T639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.295540][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 402.300973][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.303454][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.329441][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 404.099089][ T8126] loop9: detected capacity change from 0 to 256 [ 404.151758][ T8127] hub 9-0:1.0: USB hub found [ 404.154580][ T8127] hub 9-0:1.0: 8 ports detected [ 404.314905][ T8126] exfat: Deprecated parameter 'utf8' [ 404.441801][ T8126] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 405.453056][ T8135] loop8: detected capacity change from 0 to 512 [ 405.536526][ T8135] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 406.194515][ T8142] netlink: 'syz.8.936': attribute type 9 has an invalid length. [ 406.197069][ T8142] netlink: 'syz.8.936': attribute type 7 has an invalid length. [ 406.199307][ T8142] netlink: 'syz.8.936': attribute type 8 has an invalid length. [ 406.917717][ T8144] udc-core: couldn't find an available UDC or it's busy [ 406.928034][ T8144] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 409.336933][ T8162] loop8: detected capacity change from 0 to 256 [ 409.710057][ T8180] device syzkaller0 entered promiscuous mode [ 410.818015][ T8192] udc-core: couldn't find an available UDC or it's busy [ 410.819979][ T8192] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 415.498035][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 416.092651][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.102858][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.112357][ T8204] device bridge_slave_0 entered promiscuous mode [ 416.141895][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.144058][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.155936][ T8204] device bridge_slave_1 entered promiscuous mode [ 416.254218][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.277267][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.424287][ T8204] team0: Port device team_slave_0 added [ 416.460404][ T8204] team0: Port device team_slave_1 added [ 416.575040][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.586092][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.621951][ T8204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.652434][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.662308][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.694975][ T8204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.812838][ T4608] Bluetooth: hci5: command 0x0409 tx timeout [ 417.067759][ T8204] device hsr_slave_0 entered promiscuous mode [ 417.166702][ T8204] device hsr_slave_1 entered promiscuous mode [ 417.354934][ T8204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.357215][ T8204] Cannot create hsr debugfs directory [ 417.470805][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 417.470820][ T26] audit: type=1326 audit(417.440:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.507576][ T26] audit: type=1326 audit(417.480:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.551053][ T26] audit: type=1326 audit(417.490:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.584879][ T26] audit: type=1326 audit(417.490:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.631621][ T26] audit: type=1326 audit(417.490:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.665506][ T26] audit: type=1326 audit(417.490:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.718837][ T26] audit: type=1326 audit(417.490:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.764134][ T26] audit: type=1326 audit(417.490:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 417.811576][ T26] audit: type=1326 audit(417.490:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa28009dc code=0x7ffc0000 [ 417.843838][ T26] audit: type=1326 audit(417.510:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.6.966" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa27ff070 code=0x7ffc0000 [ 420.168034][ T5064] Bluetooth: hci5: command 0x041b tx timeout [ 420.425122][ T8285] loop8: detected capacity change from 0 to 256 [ 422.702670][ T5066] Bluetooth: hci5: command 0x040f tx timeout [ 423.185062][ T8329] netlink: 32 bytes leftover after parsing attributes in process `syz.9.983'. [ 423.187733][ T8329] netlink: 32 bytes leftover after parsing attributes in process `syz.9.983'. [ 423.223224][ T8329] loop9: detected capacity change from 0 to 512 [ 423.336981][ T8329] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 423.341042][ T8329] EXT4-fs (loop9): inline encryption not supported [ 423.709811][ T8329] EXT4-fs (loop9): Test dummy encryption mode enabled [ 423.711828][ T8329] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 423.713833][ T8329] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 423.785386][ T8329] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 423.845201][ T8329] EXT4-fs (loop9): 1 truncate cleaned up [ 423.846900][ T8329] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 424.737174][ T4608] Bluetooth: hci5: command 0x0419 tx timeout [ 424.799579][ T4938] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.932910][ T4938] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.148811][ T4938] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.242640][ T4938] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.511744][ T8204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.547538][ T8204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.597099][ T8204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.602286][ T8391] xt_bpf: check failed: parse error [ 425.691108][ T8204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.886565][ T8204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.771867][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.774630][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.781477][ T8204] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.829832][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 427.829846][ T26] audit: type=1326 audit(427.800:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 427.839200][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.842117][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.845452][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.847483][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.865521][ T26] audit: type=1326 audit(427.820:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 427.871862][ T26] audit: type=1326 audit(427.830:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 427.904595][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.915876][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.936107][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.955369][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.957549][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.969537][ T26] audit: type=1326 audit(427.830:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 427.991339][ T26] audit: type=1326 audit(427.870:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 428.004486][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.008798][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.014147][ T26] audit: type=1326 audit(427.870:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 428.017140][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.035092][ T26] audit: type=1326 audit(427.870:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 428.048413][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.059035][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.072217][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.075161][ T26] audit: type=1326 audit(427.870:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 428.081276][ T26] audit: type=1326 audit(427.870:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 428.092407][ T8204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.105144][ T8204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.113352][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.127304][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.136142][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.141065][ T26] audit: type=1326 audit(427.870:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.9.996" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 428.142092][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.174725][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.193930][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.720366][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.722717][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.760704][ T8204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.840013][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.843292][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.963734][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.967237][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.970765][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.995974][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.001003][ T8204] device veth0_vlan entered promiscuous mode [ 429.070738][ T8204] device veth1_vlan entered promiscuous mode [ 429.139075][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.142200][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.145672][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.175384][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.184083][ T8204] device veth0_macvtap entered promiscuous mode [ 429.267154][ T8204] device veth1_macvtap entered promiscuous mode [ 429.351286][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.374975][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.377967][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.380874][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.383698][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.421492][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.424321][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.451932][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.462098][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.472237][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.502951][ T8204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.532956][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.536429][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 429.539212][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 429.542126][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.565878][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.568805][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.571548][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.574661][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.644262][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.655267][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.658065][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.661098][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.684485][ T8204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.699825][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.703020][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.721073][ T8204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.732568][ T8204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.737003][ T8204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.739561][ T8204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.948483][ T8468] hub 9-0:1.0: USB hub found [ 429.950074][ T8468] hub 9-0:1.0: 8 ports detected [ 430.069871][ T8299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.073636][ T8299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.180995][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.205215][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.209198][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.297239][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 430.398470][ T8481] raw_sendmsg: syz.6.1001 forgot to set AF_INET. Fix it! [ 430.494697][ T8486] loop8: detected capacity change from 0 to 512 [ 431.528158][ T8486] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 433.237952][ T4938] device hsr_slave_0 left promiscuous mode [ 433.841950][ T4938] device hsr_slave_1 left promiscuous mode [ 434.898308][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.900871][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.911828][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.037295][ T8517] loop8: detected capacity change from 0 to 4096 [ 435.156229][ T8517] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 435.180522][ T4938] device veth1_macvtap left promiscuous mode [ 435.183138][ T4938] device veth0_macvtap left promiscuous mode [ 435.530832][ T4938] device veth1_vlan left promiscuous mode [ 435.776126][ T4938] device veth0_vlan left promiscuous mode [ 437.752531][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 437.798963][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 437.826401][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.898249][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.173046][ T4938] bond0 (unregistering): Released all slaves [ 438.282646][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.284590][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.584564][ T4608] Bluetooth: hci1: command 0x1003 tx timeout [ 439.588215][ T4031] Bluetooth: hci1: sending frame failed (-49) [ 441.727836][ T4608] Bluetooth: hci0: command 0x0406 tx timeout [ 441.739479][ T5064] Bluetooth: hci1: command 0x1001 tx timeout [ 441.741490][ T4031] Bluetooth: hci1: sending frame failed (-49) [ 443.405586][ T8602] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1024'. [ 443.818398][ T4608] Bluetooth: hci1: command 0x1009 tx timeout [ 444.004586][ T8602] device gretap0 entered promiscuous mode [ 449.668064][ T8650] hub 9-0:1.0: USB hub found [ 449.670072][ T8650] hub 9-0:1.0: 8 ports detected [ 452.474304][ T8686] af_packet: tpacket_rcv: packet too big, clamped from 662 to 4294967286. macoff=82 [ 452.486431][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 452.486443][ T26] audit: type=1326 audit(452.410:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.494307][ T26] audit: type=1326 audit(452.410:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.556962][ T26] audit: type=1326 audit(452.530:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.633984][ T26] audit: type=1326 audit(452.560:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.641151][ T26] audit: type=1326 audit(452.560:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.745880][ T26] audit: type=1326 audit(452.560:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.825016][ T26] audit: type=1326 audit(452.560:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.831172][ T26] audit: type=1326 audit(452.560:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 452.920379][ T26] audit: type=1326 audit(452.560:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 453.146035][ T26] audit: type=1326 audit(452.560:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.8.1042" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 456.632063][ T8751] device syzkaller0 entered promiscuous mode [ 457.615152][ T8783] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 458.859830][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 458.859845][ T26] audit: type=1326 audit(458.830:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 458.872792][ T26] audit: type=1326 audit(458.840:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.191309][ T26] audit: type=1326 audit(461.160:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.229237][ T26] audit: type=1326 audit(461.160:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.276628][ T26] audit: type=1326 audit(461.180:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=54 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.282753][ T26] audit: type=1326 audit(461.180:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.294314][ T26] audit: type=1326 audit(461.180:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.303883][ T26] audit: type=1326 audit(461.180:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=122 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.335038][ T26] audit: type=1326 audit(461.230:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 461.341674][ T26] audit: type=1326 audit(461.230:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.8.1071" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa50b29a8 code=0x7ffc0000 [ 464.337406][ T8850] hub 9-0:1.0: USB hub found [ 464.339114][ T8850] hub 9-0:1.0: 8 ports detected [ 464.381286][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 464.403272][ T4938] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.449553][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 464.449565][ T26] audit: type=1326 audit(464.420:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 464.538646][ T26] audit: type=1326 audit(464.510:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 464.585200][ T4938] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.606875][ T26] audit: type=1326 audit(464.520:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 464.643205][ T26] audit: type=1326 audit(464.520:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 464.649750][ T26] audit: type=1326 audit(464.520:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 464.656460][ T26] audit: type=1326 audit(464.520:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 464.662560][ T26] audit: type=1326 audit(464.520:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff82b64ed4 code=0x7ffc0000 [ 464.672489][ T26] audit: type=1326 audit(464.520:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff82b64ed4 code=0x7ffc0000 [ 464.678863][ T26] audit: type=1326 audit(464.520:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 464.685114][ T26] audit: type=1326 audit(464.540:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffff82b669a8 code=0x7ffc0000 [ 465.527016][ T4938] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.687323][ T8898] device syzkaller0 entered promiscuous mode [ 465.695452][ T8908] udc-core: couldn't find an available UDC or it's busy [ 465.708098][ T8908] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 465.802124][ T4938] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.909930][ T8918] loop8: detected capacity change from 0 to 512 [ 466.997781][ T8918] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 468.758894][ T8954] vhci_hcd: invalid port number 96 [ 468.770464][ T8954] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 469.610160][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 469.610174][ T26] audit: type=1326 audit(469.580:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.629761][ T26] audit: type=1326 audit(469.600:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.663804][ T26] audit: type=1326 audit(469.600:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.702280][ T26] audit: type=1326 audit(469.600:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.746586][ T26] audit: type=1326 audit(469.600:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.786218][ T26] audit: type=1326 audit(469.600:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.812077][ T26] audit: type=1326 audit(469.600:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.849287][ T26] audit: type=1326 audit(469.600:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.934916][ T26] audit: type=1326 audit(469.600:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 469.982643][ T26] audit: type=1326 audit(469.600:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.9.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb271a9a8 code=0x7ffc0000 [ 470.087289][ T9001] tipc: Started in network mode [ 470.088758][ T9001] tipc: Node identity 2, cluster identity 4711 [ 470.090528][ T9001] tipc: Node number set to 2 [ 472.178745][ T9025] hub 9-0:1.0: USB hub found [ 472.180476][ T9025] hub 9-0:1.0: 8 ports detected [ 475.327916][ T9064] loop8: detected capacity change from 0 to 1024 [ 482.430791][ T9143] loop8: detected capacity change from 0 to 1024 [ 482.640454][ T9143] EXT4-fs (loop8): barriers disabled [ 482.642497][ T9143] JBD2: no valid journal superblock found [ 482.644271][ T9143] EXT4-fs (loop8): error loading journal [ 484.714604][ T9166] hub 9-0:1.0: USB hub found [ 484.720130][ T9166] hub 9-0:1.0: 8 ports detected [ 486.394659][ T4938] device hsr_slave_0 left promiscuous mode [ 486.559565][ T4938] device hsr_slave_1 left promiscuous mode [ 486.918484][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.957317][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.475409][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.477671][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.527857][ T9204] loop8: detected capacity change from 0 to 256 [ 487.586202][ T9204] FAT-fs (loop8): Unrecognized mount option "shortname»Þ7er" or missing value [ 487.665922][ T4938] device veth1_macvtap left promiscuous mode [ 487.669525][ T4938] device veth0_macvtap left promiscuous mode [ 487.671352][ T4938] device veth1_vlan left promiscuous mode [ 487.673022][ T4938] device veth0_vlan left promiscuous mode [ 489.175215][ T9214] loop8: detected capacity change from 0 to 512 [ 489.946799][ T9214] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 492.283080][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 492.294541][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 492.325110][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.385086][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.671261][ T9245] hub 9-0:1.0: USB hub found [ 492.673873][ T9245] hub 9-0:1.0: 8 ports detected [ 493.753295][ T4938] bond0 (unregistering): Released all slaves [ 494.132548][ T9257] loop8: detected capacity change from 0 to 128 [ 494.330037][ T4072] Bluetooth: hci1: command 0x0409 tx timeout [ 494.593912][ T9257] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 496.800604][ T4209] Bluetooth: hci1: command 0x041b tx timeout [ 496.925420][ T9234] chnl_net:caif_netlink_parms(): no params data found [ 497.231370][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.239918][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.242977][ T9234] device bridge_slave_0 entered promiscuous mode [ 497.300291][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.305965][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.308949][ T9234] device bridge_slave_1 entered promiscuous mode [ 498.258408][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.287171][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.920259][ T4093] Bluetooth: hci1: command 0x040f tx timeout [ 498.936114][ T9234] team0: Port device team_slave_0 added [ 499.126707][ T9234] team0: Port device team_slave_1 added [ 499.752585][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.754456][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.832381][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.835254][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.844141][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.862656][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.868566][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.061495][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.239949][ T9234] device hsr_slave_0 entered promiscuous mode [ 500.275381][ T9234] device hsr_slave_1 entered promiscuous mode [ 500.325727][ T9234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.331288][ T9234] Cannot create hsr debugfs directory [ 501.334861][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 502.554478][ T9329] tipc: Started in network mode [ 502.556076][ T9329] tipc: Node identity ac14140f, cluster identity 4711 [ 502.558239][ T9329] tipc: New replicast peer: 172.30.1.9 [ 502.560255][ T9329] tipc: Enabled bearer , priority 10 [ 503.562853][ T5064] tipc: Node number set to 2886997007 [ 503.934509][ T9362] hub 9-0:1.0: USB hub found [ 503.937365][ T9362] hub 9-0:1.0: 8 ports detected [ 504.672219][ T9380] loop8: detected capacity change from 0 to 256 [ 506.187604][ T9234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.287259][ T9234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.333281][ T9234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.407177][ T9234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.815034][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.855387][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 506.858430][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.879615][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.895066][ T4086] Bluetooth: hci4: command 0x0406 tx timeout [ 506.910624][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.913712][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.926446][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.928655][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.944551][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.965008][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.975867][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.999954][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.002093][ T4697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.049776][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.098591][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.121274][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.150665][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.163912][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.189994][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.200424][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.230451][ T9234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.247726][ T9234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.416675][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.420117][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.435480][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.438646][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.441607][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 508.703345][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.707382][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.737646][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.967531][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.970771][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.227707][ T9234] device veth0_vlan entered promiscuous mode [ 511.355904][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 511.358834][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.361980][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 511.364554][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 511.767181][ T9234] device veth1_vlan entered promiscuous mode [ 511.869651][ T9234] device veth0_macvtap entered promiscuous mode [ 511.879841][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 511.894590][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.932890][ T9234] device veth1_macvtap entered promiscuous mode [ 511.941634][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 511.960968][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 512.037120][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.062451][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.090819][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.110790][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.132905][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.154078][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.183946][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.205081][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.209534][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.215655][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 512.220663][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 512.229308][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.233923][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.243801][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.250203][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.258217][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.261851][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.264705][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.276244][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.297558][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.311090][ T9234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.316673][ T9234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.319353][ T9234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.322054][ T9234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.352519][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 512.360406][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.316609][ T1841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.319073][ T1841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.323936][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 516.200314][ T1841] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.247480][ T639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.250188][ T639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.255703][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 516.417745][ T1841] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.590804][ T1841] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.726860][ T1841] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.931315][ T9500] hub 9-0:1.0: USB hub found [ 516.933208][ T9500] hub 9-0:1.0: 8 ports detected [ 518.564322][ T9514] loop8: detected capacity change from 0 to 256 [ 518.638780][ T1841] tipc: Left network mode [ 520.398445][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 520.398460][ T26] audit: type=1326 audit(520.370:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.296781][ T26] audit: type=1326 audit(520.370:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.339576][ T26] audit: type=1326 audit(521.290:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.389434][ T26] audit: type=1326 audit(521.290:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.466243][ T26] audit: type=1326 audit(521.290:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.481556][ T26] audit: type=1326 audit(521.290:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.495328][ T26] audit: type=1326 audit(521.290:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.512630][ T26] audit: type=1326 audit(521.290:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.532971][ T26] audit: type=1326 audit(521.290:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.551665][ T26] audit: type=1326 audit(521.290:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.6.1227" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 521.767491][ T9562] hub 9-0:1.0: USB hub found [ 521.769124][ T9562] hub 9-0:1.0: 8 ports detected [ 524.454513][ T9616] Cannot find add_set index 0 as target [ 526.316574][ T9647] netlink: 'syz.1.1249': attribute type 3 has an invalid length. [ 526.495383][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 528.155102][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.355777][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.543347][ T25] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 528.647600][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.980482][ T25] usb 1-1: config 0 descriptor?? [ 528.985205][ T9680] capability: warning: `syz.6.1254' uses 32-bit capabilities (legacy support in use) [ 529.262599][ T1841] device hsr_slave_0 left promiscuous mode [ 529.386187][ T1841] device hsr_slave_1 left promiscuous mode [ 529.464964][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 529.467046][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 529.680673][ T1841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.692397][ T1841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.250427][ T25] usb 1-1: USB disconnect, device number 2 [ 530.319965][ T1841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.322318][ T1841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.371587][ T1841] device bridge_slave_1 left promiscuous mode [ 530.373546][ T1841] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.407745][ T1841] device bridge_slave_0 left promiscuous mode [ 530.409651][ T1841] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.615697][ T1841] device veth1_macvtap left promiscuous mode [ 530.617536][ T1841] device veth0_macvtap left promiscuous mode [ 530.620970][ T1841] device veth1_vlan left promiscuous mode [ 530.622842][ T1841] device veth0_vlan left promiscuous mode [ 536.663045][ T1841] team0 (unregistering): Port device team_slave_1 removed [ 536.682732][ T1841] team0 (unregistering): Port device team_slave_0 removed [ 536.694082][ T1841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.729026][ T9737] udc-core: couldn't find an available UDC or it's busy [ 536.731204][ T9737] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 536.773041][ T1841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.963358][ T1841] bond0 (unregistering): Released all slaves [ 537.901192][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1266'. [ 537.916570][ T9747] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 537.919615][ T9747] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 538.037953][ T4209] Bluetooth: hci5: command 0x0406 tx timeout [ 538.380010][ T9753] device ip6gre1 entered promiscuous mode [ 538.474301][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 538.474314][ T26] audit: type=1326 audit(767.437:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.6.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 538.492786][ T9767] hub 9-0:1.0: USB hub found [ 538.494476][ T9767] hub 9-0:1.0: 8 ports detected [ 538.523325][ T26] audit: type=1326 audit(767.487:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.6.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 538.546031][ T26] audit: type=1326 audit(767.487:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.6.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 538.590461][ T26] audit: type=1326 audit(767.487:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.6.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 538.599831][ T26] audit: type=1326 audit(767.487:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.6.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 538.611929][ T26] audit: type=1326 audit(767.487:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.6.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa28009a8 code=0x7ffc0000 [ 541.416663][ T9792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1278'. [ 541.419275][ T9792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1278'. [ 541.437943][ T9794] loop8: detected capacity change from 0 to 256 [ 544.706909][ T9824] xt_bpf: check failed: parse error [ 545.025615][ T9843] device wg2 entered promiscuous mode [ 547.219273][ T9871] device syzkaller0 entered promiscuous mode [ 550.143568][ T9905] hub 9-0:1.0: USB hub found [ 550.145281][ T9905] hub 9-0:1.0: 8 ports detected [ 550.461713][ T9913] loop8: detected capacity change from 0 to 256 [ 551.390053][ T9913] FAT-fs (loop8): Directory bread(block 64) failed [ 551.391918][ T9913] FAT-fs (loop8): Directory bread(block 65) failed [ 551.393965][ T9913] FAT-fs (loop8): Directory bread(block 66) failed [ 551.395949][ T9913] FAT-fs (loop8): Directory bread(block 67) failed [ 551.397932][ T9913] FAT-fs (loop8): Directory bread(block 68) failed [ 551.399713][ T9913] FAT-fs (loop8): Directory bread(block 69) failed [ 551.401665][ T9913] FAT-fs (loop8): Directory bread(block 70) failed [ 551.403590][ T9913] FAT-fs (loop8): Directory bread(block 71) failed [ 551.405538][ T9913] FAT-fs (loop8): Directory bread(block 72) failed [ 551.407429][ T9913] FAT-fs (loop8): Directory bread(block 73) failed [ 551.824469][ T9935] device syzkaller0 entered promiscuous mode [ 556.275411][ T9980] device pim6reg1 entered promiscuous mode [ 556.347828][ T9984] hub 9-0:1.0: USB hub found [ 556.349557][ T9984] hub 9-0:1.0: 8 ports detected [ 556.609511][ T9988] loop8: detected capacity change from 0 to 764 [ 560.450820][T10028] loop8: detected capacity change from 0 to 764 [ 560.949953][T10036] device pim6reg1 entered promiscuous mode [ 561.152790][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.155006][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.690976][T10097] loop8: detected capacity change from 0 to 256 [ 568.653251][T10293] netlink: 'syz.8.1424': attribute type 4 has an invalid length. [ 568.676910][T10293] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1424'. [ 568.735531][T10293] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 568.980062][T10300] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1427'. [ 568.996243][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.999535][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.002431][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.047273][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.055994][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.059134][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.104994][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.108145][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.115785][T10300] device batadv_slave_1 entered promiscuous mode [ 569.139494][T10300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.363129][T10314] loop8: detected capacity change from 0 to 256 [ 569.675202][T10323] device pim6reg1 entered promiscuous mode [ 572.897522][T10376] netlink: 'syz.0.1447': attribute type 21 has an invalid length. [ 572.899918][T10376] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1447'. [ 572.902497][T10376] netlink: 'syz.0.1447': attribute type 5 has an invalid length. [ 572.904572][T10376] netlink: 'syz.0.1447': attribute type 6 has an invalid length. [ 572.947671][T10376] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1447'. [ 573.002956][T10376] netlink: 'syz.0.1447': attribute type 21 has an invalid length. [ 573.023172][T10376] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1447'. [ 573.032682][T10376] netlink: 'syz.0.1447': attribute type 4 has an invalid length. [ 573.051347][T10376] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1447'. [ 574.691670][T10408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 574.711683][T10408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 574.714559][T10404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 574.925318][T10410] hub 9-0:1.0: USB hub found [ 574.927116][T10410] hub 9-0:1.0: 8 ports detected [ 575.068803][T10426] team0: Device gtp0 is of different type [ 576.774243][T10459] device team_slave_0 entered promiscuous mode [ 576.776337][T10459] device team_slave_1 entered promiscuous mode [ 576.784457][T10459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 576.826466][T10459] device team_slave_0 left promiscuous mode [ 576.828202][T10459] device team_slave_1 left promiscuous mode [ 577.415934][T10472] hub 9-0:1.0: USB hub found [ 577.417925][T10472] hub 9-0:1.0: 8 ports detected [ 578.111583][T10476] IPv4: Oversized IP packet from 127.202.26.0 [ 578.570241][T10493] netlink: 'syz.1.1474': attribute type 83 has an invalid length. [ 580.824968][T10526] hub 9-0:1.0: USB hub found [ 580.826820][T10526] hub 9-0:1.0: 8 ports detected [ 582.078563][T10535] device syzkaller0 entered promiscuous mode [ 584.239682][T10578] hub 9-0:1.0: USB hub found [ 584.241412][T10578] hub 9-0:1.0: 8 ports detected [ 585.387404][T10597] syz.6.1502 uses obsolete (PF_INET,SOCK_PACKET) [ 585.543094][T10604] loop8: detected capacity change from 0 to 764 [ 586.795151][T10618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.967622][T10627] loop8: detected capacity change from 0 to 256 [ 591.867859][T10750] loop8: detected capacity change from 0 to 256 [ 593.907097][T10815] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1562'. [ 595.248392][T10832] hub 9-0:1.0: USB hub found [ 595.250106][T10832] hub 9-0:1.0: 8 ports detected [ 595.491089][T10840] loop8: detected capacity change from 0 to 256 [ 595.540865][T10838] device syzkaller0 entered promiscuous mode [ 599.040390][T10878] device wlan0 entered promiscuous mode [ 599.048601][T10878] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 600.046351][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1583'. [ 600.387927][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1585'. [ 600.687614][T10923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.033522][T10951] loop8: detected capacity change from 0 to 256 [ 605.622421][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1606'. [ 606.799176][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'. [ 607.011627][T11016] loop8: detected capacity change from 0 to 256 [ 607.084122][T11016] FAT-fs (loop8): Directory bread(block 64) failed [ 607.086206][T11016] FAT-fs (loop8): Directory bread(block 65) failed [ 607.088090][T11016] FAT-fs (loop8): Directory bread(block 66) failed [ 607.090018][T11016] FAT-fs (loop8): Directory bread(block 67) failed [ 607.091851][T11016] FAT-fs (loop8): Directory bread(block 68) failed [ 607.093795][T11016] FAT-fs (loop8): Directory bread(block 69) failed [ 607.095682][T11016] FAT-fs (loop8): Directory bread(block 70) failed [ 607.097544][T11016] FAT-fs (loop8): Directory bread(block 71) failed [ 607.099479][T11016] FAT-fs (loop8): Directory bread(block 72) failed [ 607.101349][T11016] FAT-fs (loop8): Directory bread(block 73) failed [ 609.494719][T11055] chnl_net:caif_netlink_parms(): no params data found [ 609.844274][T11055] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.850112][T11055] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.872760][T11055] device bridge_slave_0 entered promiscuous mode [ 609.910893][T11055] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.923090][T11055] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.926737][T11055] device bridge_slave_1 entered promiscuous mode [ 610.844445][T11055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.945989][T11055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.985189][ T1534] Bluetooth: hci4: command 0x0409 tx timeout [ 611.133500][T11055] team0: Port device team_slave_0 added [ 611.181529][T11055] team0: Port device team_slave_1 added [ 612.236427][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 612.242292][T11055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.244419][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.294809][T11055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.310725][T11055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.312907][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.354872][T11055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.390466][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 612.567161][T11055] device hsr_slave_0 entered promiscuous mode [ 612.636114][T11055] device hsr_slave_1 entered promiscuous mode [ 612.805029][T11055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.807314][T11055] Cannot create hsr debugfs directory [ 613.654114][ T5064] Bluetooth: hci4: command 0x041b tx timeout [ 613.828177][T11150] loop8: detected capacity change from 0 to 256 [ 614.424892][ T5064] Bluetooth: hci1: command 0x0406 tx timeout [ 615.815257][ T1534] Bluetooth: hci4: command 0x040f tx timeout [ 616.071564][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1656'. [ 617.810406][T11216] tipc: Enabled bearer , priority 0 [ 617.854872][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 617.875794][T11216] tipc: Resetting bearer [ 617.930371][T11214] tipc: Disabling bearer [ 618.004859][T11055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 618.048155][T11055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 618.117648][T11055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 618.170882][T11055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 618.545811][T11055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.596062][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.599144][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.621672][T11055] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.648775][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.652123][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.674662][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.676821][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.737603][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.760284][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.799360][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.824113][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.826329][ T639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.890408][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.913929][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.963959][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.992408][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 619.025504][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.056004][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.107908][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.118074][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.152811][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.168568][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.194325][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.314046][T11055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.321770][T11263] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 619.723123][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.725880][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.766758][T11055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.846505][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 619.849882][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 619.882596][T11292] loop8: detected capacity change from 0 to 764 [ 619.936967][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 619.940014][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.943314][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.945567][ T4086] Bluetooth: hci4: command 0x0405 tx timeout [ 619.957190][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.979020][T11055] device veth0_vlan entered promiscuous mode [ 620.022615][T11055] device veth1_vlan entered promiscuous mode [ 620.118763][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 620.122101][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 620.144138][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.152219][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 620.175602][T11055] device veth0_macvtap entered promiscuous mode [ 620.206447][T11055] device veth1_macvtap entered promiscuous mode [ 620.267917][T11307] netlink: 'syz.8.1684': attribute type 8 has an invalid length. [ 620.282557][T11307] netlink: 'syz.8.1684': attribute type 8 has an invalid length. [ 620.307343][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.310471][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.313218][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.337420][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.347382][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.357660][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.367449][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.377404][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.469117][T11055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.478036][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.492839][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.522695][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.538729][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.554468][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.570510][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.584624][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.599618][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.614252][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.632958][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.656306][T11055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.685407][T11055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.697548][T11055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.710670][T11055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.723507][T11055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.945063][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.948006][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.950821][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.953620][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.979707][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.982954][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.061469][ T8510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.063909][ T8510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.070871][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 621.145589][ T8510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.148070][ T8510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.153377][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 621.727385][ T8510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.813075][ T8510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.884051][ T8510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.951002][ T8510] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.340639][T11358] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1699'. [ 622.388325][T11358] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 622.698341][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.238327][T11412] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 624.242191][T11412] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 624.259596][T11412] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 624.923341][ T8510] device hsr_slave_0 left promiscuous mode [ 625.075351][ T8510] device hsr_slave_1 left promiscuous mode [ 625.205105][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.207456][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.210636][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.212865][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.217183][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1720'. [ 625.245040][ T8510] device bridge_slave_1 left promiscuous mode [ 625.247132][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.292295][ T8510] device bridge_slave_0 left promiscuous mode [ 625.294233][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.445478][ T8510] device veth0_macvtap left promiscuous mode [ 625.447355][ T8510] device veth1_vlan left promiscuous mode [ 625.449120][ T8510] device veth0_vlan left promiscuous mode [ 625.486592][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1723'. [ 626.232969][ T8510] team0 (unregistering): Port device team_slave_1 removed [ 626.278911][ T8510] team0 (unregistering): Port device team_slave_0 removed [ 626.313320][ T8510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.373893][ T8510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.362478][ T8510] bond0 (unregistering): Released all slaves [ 627.753553][T11495] sch_fq: defrate 9 ignored. [ 627.759606][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 627.825902][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1731'. [ 627.983824][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1731'. [ 627.989786][T11508] [ 627.990442][T11508] ====================================================== [ 627.992379][T11508] WARNING: possible circular locking dependency detected [ 627.994355][T11508] 5.15.186-syzkaller #0 Not tainted [ 627.995771][T11508] ------------------------------------------------------ [ 627.997794][T11508] syz.2.1734/11508 is trying to acquire lock: [ 627.999484][T11508] ffff0000d1e32120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x20c/0x590 [ 628.002273][T11508] [ 628.002273][T11508] but task is already holding lock: [ 628.004373][T11508] ffff80001628a428 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 628.006630][T11508] [ 628.006630][T11508] which lock already depends on the new lock. [ 628.006630][T11508] [ 628.009569][T11508] [ 628.009569][T11508] the existing dependency chain (in reverse order) is: [ 628.012402][T11508] [ 628.012402][T11508] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 628.014718][T11508] __mutex_lock_common+0x194/0x1edc [ 628.016342][T11508] mutex_lock_nested+0xac/0x11c [ 628.017941][T11508] rtnl_lock+0x20/0x2c [ 628.019301][T11508] ax25_setsockopt+0x870/0xa5c [ 628.020791][T11508] __sys_setsockopt+0x2f8/0x4b0 [ 628.022337][T11508] __arm64_sys_setsockopt+0xb8/0xd4 [ 628.024005][T11508] invoke_syscall+0x98/0x2b8 [ 628.025486][T11508] el0_svc_common+0x138/0x258 [ 628.026966][T11508] do_el0_svc+0x58/0x14c [ 628.028336][T11508] el0_svc+0x78/0x1e0 [ 628.029656][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.031258][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.032665][T11508] [ 628.032665][T11508] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 628.034879][T11508] __lock_acquire+0x2928/0x651c [ 628.036437][T11508] lock_acquire+0x1f4/0x620 [ 628.037870][T11508] lock_sock_nested+0xd8/0x1d4 [ 628.039397][T11508] ax25_device_event+0x20c/0x590 [ 628.040964][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.042659][T11508] __dev_notify_flags+0x250/0x46c [ 628.044264][T11508] dev_change_flags+0xc8/0x154 [ 628.045822][T11508] dev_ifsioc+0x504/0xef4 [ 628.047225][T11508] dev_ioctl+0x4d0/0xc94 [ 628.048693][T11508] sock_do_ioctl+0x18c/0x240 [ 628.050167][T11508] sock_ioctl+0x5c8/0x87c [ 628.051559][T11508] __arm64_sys_ioctl+0x14c/0x1c8 [ 628.053157][T11508] invoke_syscall+0x98/0x2b8 [ 628.054610][T11508] el0_svc_common+0x138/0x258 [ 628.056119][T11508] do_el0_svc+0x58/0x14c [ 628.057492][T11508] el0_svc+0x78/0x1e0 [ 628.058853][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.060464][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.061961][T11508] [ 628.061961][T11508] other info that might help us debug this: [ 628.061961][T11508] [ 628.065014][T11508] Possible unsafe locking scenario: [ 628.065014][T11508] [ 628.067266][T11508] CPU0 CPU1 [ 628.068784][T11508] ---- ---- [ 628.070330][T11508] lock(rtnl_mutex); [ 628.071460][T11508] lock(sk_lock-AF_AX25); [ 628.073563][T11508] lock(rtnl_mutex); [ 628.075401][T11508] lock(sk_lock-AF_AX25); [ 628.076593][T11508] [ 628.076593][T11508] *** DEADLOCK *** [ 628.076593][T11508] [ 628.078949][T11508] 1 lock held by syz.2.1734/11508: [ 628.080347][T11508] #0: ffff80001628a428 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 628.082785][T11508] [ 628.082785][T11508] stack backtrace: [ 628.084476][T11508] CPU: 0 PID: 11508 Comm: syz.2.1734 Not tainted 5.15.186-syzkaller #0 [ 628.086859][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.089886][T11508] Call trace: [ 628.090802][T11508] dump_backtrace+0x0/0x43c [ 628.092275][T11508] show_stack+0x2c/0x3c [ 628.093533][T11508] __dump_stack+0x30/0x40 [ 628.094766][T11508] dump_stack_lvl+0xf8/0x160 [ 628.096085][T11508] dump_stack+0x1c/0x5c [ 628.097361][T11508] print_circular_bug+0x148/0x1b0 [ 628.098791][T11508] check_noncircular+0x240/0x2d4 [ 628.100229][T11508] __lock_acquire+0x2928/0x651c [ 628.101638][T11508] lock_acquire+0x1f4/0x620 [ 628.102987][T11508] lock_sock_nested+0xd8/0x1d4 [ 628.104389][T11508] ax25_device_event+0x20c/0x590 [ 628.106061][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.107700][T11508] __dev_notify_flags+0x250/0x46c [ 628.109169][T11508] dev_change_flags+0xc8/0x154 [ 628.110559][T11508] dev_ifsioc+0x504/0xef4 [ 628.111844][T11508] dev_ioctl+0x4d0/0xc94 [ 628.113038][T11508] sock_do_ioctl+0x18c/0x240 [ 628.114431][T11508] sock_ioctl+0x5c8/0x87c [ 628.115749][T11508] __arm64_sys_ioctl+0x14c/0x1c8 [ 628.117185][T11508] invoke_syscall+0x98/0x2b8 [ 628.118537][T11508] el0_svc_common+0x138/0x258 [ 628.119946][T11508] do_el0_svc+0x58/0x14c [ 628.121235][T11508] el0_svc+0x78/0x1e0 [ 628.122375][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.123912][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.295154][T11508] ================================================================== [ 628.297629][T11508] BUG: KASAN: use-after-free in ax25_dev_device_down+0x354/0x67c [ 628.299828][T11508] Write of size 4 at addr ffff0000c1a928b8 by task syz.2.1734/11508 [ 628.302065][T11508] [ 628.302722][T11508] CPU: 1 PID: 11508 Comm: syz.2.1734 Not tainted 5.15.186-syzkaller #0 [ 628.305090][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.307938][T11508] Call trace: [ 628.308849][T11508] dump_backtrace+0x0/0x43c [ 628.310131][T11508] show_stack+0x2c/0x3c [ 628.311332][T11508] __dump_stack+0x30/0x40 [ 628.312550][T11508] dump_stack_lvl+0xf8/0x160 [ 628.313796][T11508] print_address_description+0x78/0x30c [ 628.315355][T11508] kasan_report+0xec/0x15c [ 628.316632][T11508] kasan_check_range+0x270/0x2b0 [ 628.317991][T11508] __kasan_check_write+0x44/0x54 [ 628.319389][T11508] ax25_dev_device_down+0x354/0x67c [ 628.320885][T11508] ax25_device_event+0x538/0x590 [ 628.322246][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.323710][T11508] __dev_notify_flags+0x250/0x46c [ 628.325084][T11508] dev_change_flags+0xc8/0x154 [ 628.326411][T11508] dev_ifsioc+0x504/0xef4 [ 628.327623][T11508] dev_ioctl+0x4d0/0xc94 [ 628.328808][T11508] sock_do_ioctl+0x18c/0x240 [ 628.330055][T11508] sock_ioctl+0x5c8/0x87c [ 628.331296][T11508] __arm64_sys_ioctl+0x14c/0x1c8 [ 628.332680][T11508] invoke_syscall+0x98/0x2b8 [ 628.333901][T11508] el0_svc_common+0x138/0x258 [ 628.335246][T11508] do_el0_svc+0x58/0x14c [ 628.336429][T11508] el0_svc+0x78/0x1e0 [ 628.337551][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.338989][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.340271][T11508] [ 628.340916][T11508] Allocated by task 11358: [ 628.342167][T11508] __kasan_kmalloc+0xb0/0xf0 [ 628.343468][T11508] kmem_cache_alloc_trace+0x274/0x3fc [ 628.345028][T11508] ax25_dev_device_up+0x5c/0x540 [ 628.346420][T11508] ax25_device_event+0x504/0x590 [ 628.347816][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.349333][T11508] __dev_notify_flags+0x250/0x46c [ 628.350725][T11508] dev_change_flags+0xc8/0x154 [ 628.352038][T11508] dev_ifsioc+0x504/0xef4 [ 628.353329][T11508] dev_ioctl+0x4d0/0xc94 [ 628.354564][T11508] sock_do_ioctl+0x18c/0x240 [ 628.355774][T11508] sock_ioctl+0x5c8/0x87c [ 628.356978][T11508] __arm64_sys_ioctl+0x14c/0x1c8 [ 628.358382][T11508] invoke_syscall+0x98/0x2b8 [ 628.359717][T11508] el0_svc_common+0x138/0x258 [ 628.361036][T11508] do_el0_svc+0x58/0x14c [ 628.362248][T11508] el0_svc+0x78/0x1e0 [ 628.363399][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.364821][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.366066][T11508] [ 628.366717][T11508] Freed by task 11508: [ 628.367868][T11508] kasan_set_track+0x4c/0x84 [ 628.369149][T11508] kasan_set_free_info+0x28/0x4c [ 628.370505][T11508] ____kasan_slab_free+0x118/0x164 [ 628.371922][T11508] __kasan_slab_free+0x18/0x28 [ 628.373354][T11508] slab_free_freelist_hook+0x128/0x1e8 [ 628.374832][T11508] kfree+0x170/0x40c [ 628.375929][T11508] ax25_dev_device_down+0x1ac/0x67c [ 628.377368][T11508] ax25_device_event+0x538/0x590 [ 628.378833][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.380383][T11508] __dev_notify_flags+0x250/0x46c [ 628.381861][T11508] dev_change_flags+0xc8/0x154 [ 628.383228][T11508] dev_ifsioc+0x504/0xef4 [ 628.384426][T11508] dev_ioctl+0x4d0/0xc94 [ 628.385677][T11508] sock_do_ioctl+0x18c/0x240 [ 628.386920][T11508] sock_ioctl+0x5c8/0x87c [ 628.388171][T11508] __arm64_sys_ioctl+0x14c/0x1c8 [ 628.389573][T11508] invoke_syscall+0x98/0x2b8 [ 628.390945][T11508] el0_svc_common+0x138/0x258 [ 628.392291][T11508] do_el0_svc+0x58/0x14c [ 628.393484][T11508] el0_svc+0x78/0x1e0 [ 628.394660][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.396054][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.397348][T11508] [ 628.398014][T11508] Last potentially related work creation: [ 628.399617][T11508] kasan_save_stack+0x38/0x68 [ 628.400979][T11508] kasan_record_aux_stack+0xcc/0x114 [ 628.402552][T11508] insert_work+0x64/0x388 [ 628.403754][T11508] __queue_work+0xb30/0x1054 [ 628.405125][T11508] queue_work_on+0xc4/0x17c [ 628.406349][T11508] netdevice_event+0x6ac/0x79c [ 628.407805][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.409340][T11508] call_netdevice_notifiers+0x10c/0x18c [ 628.410943][T11508] register_netdevice+0xf04/0x1304 [ 628.412319][T11508] ip6gre_newlink_common+0x310/0x4a0 [ 628.413865][T11508] ip6gre_newlink+0x19c/0x448 [ 628.415348][T11508] rtnl_newlink+0xeac/0x1404 [ 628.416627][T11508] rtnetlink_rcv_msg+0x9d4/0xd04 [ 628.418055][T11508] netlink_rcv_skb+0x208/0x3c4 [ 628.419409][T11508] rtnetlink_rcv+0x28/0x38 [ 628.420670][T11508] netlink_unicast+0x60c/0x89c [ 628.421978][T11508] netlink_sendmsg+0x6e8/0x9cc [ 628.423342][T11508] __sys_sendto+0x2e8/0x3d8 [ 628.424701][T11508] __arm64_sys_sendto+0xd8/0xf8 [ 628.426111][T11508] invoke_syscall+0x98/0x2b8 [ 628.427494][T11508] el0_svc_common+0x138/0x258 [ 628.428870][T11508] do_el0_svc+0x58/0x14c [ 628.430149][T11508] el0_svc+0x78/0x1e0 [ 628.431250][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.432686][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.434050][T11508] [ 628.434754][T11508] Second to last potentially related work creation: [ 628.436739][T11508] kasan_save_stack+0x38/0x68 [ 628.438071][T11508] kasan_record_aux_stack+0xcc/0x114 [ 628.439622][T11508] call_rcu+0x110/0x8f0 [ 628.440950][T11508] neigh_parms_release+0x1ac/0x224 [ 628.442382][T11508] inetdev_event+0x5e0/0x127c [ 628.443718][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.445242][T11508] unregister_netdevice_many+0xe10/0x17d0 [ 628.446817][T11508] sit_exit_batch_net+0x440/0x490 [ 628.448225][T11508] cleanup_net+0x644/0xa98 [ 628.449438][T11508] process_one_work+0x79c/0x1140 [ 628.450828][T11508] worker_thread+0x8f4/0x101c [ 628.452205][T11508] kthread+0x374/0x454 [ 628.453369][T11508] ret_from_fork+0x10/0x20 [ 628.454571][T11508] [ 628.455208][T11508] The buggy address belongs to the object at ffff0000c1a92800 [ 628.455208][T11508] which belongs to the cache kmalloc-256 of size 256 [ 628.459268][T11508] The buggy address is located 184 bytes inside of [ 628.459268][T11508] 256-byte region [ffff0000c1a92800, ffff0000c1a92900) [ 628.463238][T11508] The buggy address belongs to the page: [ 628.464843][T11508] page:0000000040d12b51 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x101a92 [ 628.467938][T11508] head:0000000040d12b51 order:1 compound_mapcount:0 [ 628.469816][T11508] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 628.472175][T11508] raw: 05ffc00000010200 fffffc00033e4c80 0000000700000007 ffff0000c0002480 [ 628.474662][T11508] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 628.477169][T11508] page dumped because: kasan: bad access detected [ 628.479061][T11508] [ 628.479709][T11508] Memory state around the buggy address: [ 628.481364][T11508] ffff0000c1a92780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 628.483606][T11508] ffff0000c1a92800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 628.485958][T11508] >ffff0000c1a92880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 628.488265][T11508] ^ [ 628.489906][T11508] ffff0000c1a92900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 628.492195][T11508] ffff0000c1a92980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 628.494514][T11508] ================================================================== [ 628.529239][T11508] ------------[ cut here ]------------ [ 628.537566][T11508] refcount_t: underflow; use-after-free. [ 628.546459][T11508] WARNING: CPU: 1 PID: 11508 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 628.549240][T11508] Modules linked in: [ 628.550326][T11508] CPU: 1 PID: 11508 Comm: syz.2.1734 Tainted: G B 5.15.186-syzkaller #0 [ 628.553044][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.555796][T11508] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 628.557948][T11508] pc : refcount_warn_saturate+0x154/0x1f8 [ 628.559525][T11508] lr : refcount_warn_saturate+0x154/0x1f8 [ 628.561106][T11508] sp : ffff80001f437690 [ 628.562325][T11508] x29: ffff80001f437690 x28: ffff8000163c2e20 x27: 1fffe00018352502 [ 628.564559][T11508] x26: ffff80001b1d2000 x25: 1fffe0001a97906d x24: dfff800000000000 [ 628.566846][T11508] x23: 0000000000000001 x22: ffff0000c1a928b8 x21: 0000000000000007 [ 628.569054][T11508] x20: ffff0000c1a928b8 x19: ffff8000165a0000 x18: 0000000000000002 [ 628.571343][T11508] x17: 0000000040000000 x16: ffff8000111b2714 x15: 0000000000000002 [ 628.573590][T11508] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000080000 [ 628.575817][T11508] x11: 000000000005a7cf x10: ffff80002aba6000 x9 : e20e6e3c4aad7300 [ 628.578124][T11508] x8 : e20e6e3c4aad7300 x7 : 0000000000000000 x6 : ffff80000824599c [ 628.580419][T11508] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80000a7343e4 [ 628.582693][T11508] x2 : ffff0001a110ad50 x1 : 0000000100000000 x0 : 0000000000000026 [ 628.585053][T11508] Call trace: [ 628.586013][T11508] refcount_warn_saturate+0x154/0x1f8 [ 628.587580][T11508] ax25_dev_device_down+0x528/0x67c [ 628.589058][T11508] ax25_device_event+0x538/0x590 [ 628.590423][T11508] raw_notifier_call_chain+0xd4/0x164 [ 628.591960][T11508] __dev_notify_flags+0x250/0x46c [ 628.593378][T11508] dev_change_flags+0xc8/0x154 [ 628.594718][T11508] dev_ifsioc+0x504/0xef4 [ 628.595915][T11508] dev_ioctl+0x4d0/0xc94 [ 628.597118][T11508] sock_do_ioctl+0x18c/0x240 [ 628.598378][T11508] sock_ioctl+0x5c8/0x87c [ 628.599639][T11508] __arm64_sys_ioctl+0x14c/0x1c8 [ 628.601020][T11508] invoke_syscall+0x98/0x2b8 [ 628.602295][T11508] el0_svc_common+0x138/0x258 [ 628.603680][T11508] do_el0_svc+0x58/0x14c [ 628.604838][T11508] el0_svc+0x78/0x1e0 [ 628.605928][T11508] el0t_64_sync_handler+0xcc/0xe4 [ 628.607323][T11508] el0t_64_sync+0x1a0/0x1a4 [ 628.608529][T11508] irq event stamp: 513 [ 628.609715][T11508] hardirqs last enabled at (513): [] __local_bh_enable_ip+0x1f8/0x380 [ 628.612478][T11508] hardirqs last disabled at (511): [] __local_bh_enable_ip+0x178/0x380 [ 628.615175][T11508] softirqs last enabled at (512): [] ax25_device_event+0x200/0x590 [ 628.617917][T11508] softirqs last disabled at (510): [] ax25_device_event+0x100/0x590 [ 628.620662][T11508] ---[ end trace e4be8730384255da ]--- [ 628.785085][T11504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 628.787722][T11504] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db