last executing test programs: 12m26.606718413s ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fsopen(0x0, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(0x0, 0x442281, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000001180)='.#\x00', &(0x7f00000011c0)="15542b7940074f9221fa533669900ca65a35ea551a362e2075833529a6b51c927a54248affeab89e984e4acc455399e25359c4ed2f355fc67a261cd662798cb28d620bc4142e073c43afd85a39d3f5a15cf6c617a8c2c97d1335fa038c2867edc3389caa9e95972989a5b0b81a1e57ff668955f589cc66a763895d6b2a324bb9effc81c088f83ba6cd218d34cb593be7b36a0ce174fb5c39676df4462ec09ef150c719a197a5101c4792f6941cd0ca53f5f002f41f2f046e75f3ad6a0f97812ec631fcfb0ace86f9c3", 0xc9) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a", 0x4}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_virt_wifi\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 12m11.054975431s ago: executing program 32 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fsopen(0x0, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(0x0, 0x442281, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000001180)='.#\x00', &(0x7f00000011c0)="15542b7940074f9221fa533669900ca65a35ea551a362e2075833529a6b51c927a54248affeab89e984e4acc455399e25359c4ed2f355fc67a261cd662798cb28d620bc4142e073c43afd85a39d3f5a15cf6c617a8c2c97d1335fa038c2867edc3389caa9e95972989a5b0b81a1e57ff668955f589cc66a763895d6b2a324bb9effc81c088f83ba6cd218d34cb593be7b36a0ce174fb5c39676df4462ec09ef150c719a197a5101c4792f6941cd0ca53f5f002f41f2f046e75f3ad6a0f97812ec631fcfb0ace86f9c3", 0xc9) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000020a050000000000000000000a0000060800024000e2ff03ed00060089923948810529f644e19965efcd01a789db3b8fd9dccb1a74ed06c533e4ba1891df480c62de917a7df98ccb57b6f3ca6f7d329f5a8794be8972e6031d73d64c6cee5a0ec819c50850b671fa007e5a5cb94052ca2c697021aa87725bc5579b123c35c4d04feaf4e3a2ea6e86f6830108dd5903dff927717a6d9e09b23d9b64c006bb2997b9a79e8bbfa48d4a7f3c9cae344bd275e48e33cb2efa3a11046de1cb4189bd861a070e5eb2a836312fe08a8e2686680798f1c5070f88a7b4602b726d7286ff6aea77b574b83f4900ef8f744d1953d80ec851d139bbb4cf2fbd8245ac0f0000000900010073797a30000000000c0004400000000000000005080002400000000328000000060a050000000000000000000200000200000a40000000030900020073797a"], 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a", 0x4}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_virt_wifi\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 12m5.226094357s ago: executing program 0 (id=25): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, 0x0) clock_settime(0x0, &(0x7f0000000240)) mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r7, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) sendfile(r8, r8, 0x0, 0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r9}) 12m3.761126003s ago: executing program 0 (id=28): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000030000005637f880f14ee2dd0000f90e72cd0ea30cee982535"], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) accept(0xffffffffffffffff, &(0x7f0000002080)=@l2tp6, &(0x7f0000002100)=0x80) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r6 = epoll_create(0x6) r7 = dup3(r3, r6, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000114010025bd7000fedbdf25000000000000a000"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000002180)={0x2, 0x1, 0xefbf}) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c010}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 12m1.922439757s ago: executing program 0 (id=29): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r6}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970"]) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @multicast1, 0x1, 0x2, [@multicast1, @loopback]}, 0x18) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 11m59.702138646s ago: executing program 0 (id=32): syz_pidfd_open(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbdc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xffffffffffffffdd, 0x0, 0x0, 0x4, 0x5f, 0x0, 0xc000, 0x4, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x27, 0x0, 0xa81001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', r4, 0x0) syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0xfffffffffffffffe, 0xb700aab, {0x0, 0x3, 0xa, 0x800000000000, 0x2, 0x40bfc000, {0x3, 0xfffffffffffff73b, 0x11, 0x7a42f926, 0xf, 0x2, 0xffff, 0x0, 0x0, 0x1000, 0x9011, r4, r5, 0x2, 0x7f43}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x1}}, 0x1000, 0x203, 0xffff18b6, 0x4, 0x330, 0x7fffffff, 0xdb}, 0x9c) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x1000, 0xd703}, 0x90) sendmsg$inet_sctp(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0xffffffff, @loopback, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000100)="be", 0x1}], 0x1}, 0x8000) 11m57.583850584s ago: executing program 0 (id=36): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) shmdt(0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16, @ANYRES64=r0, @ANYRES32, @ANYBLOB="000010000100000000000000000000001600"/28, @ANYRES8=r0], 0x50) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x2) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x89cdf8af4da357c0}, 0x94) getpid() socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 11m53.653963802s ago: executing program 0 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r3, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x9}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x200, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "5fcf"}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x200, 0xfffd, 0x5, 0x6, 0xfffffffb}}}}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/zoneinfo\x00', 0x0, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x80000000000006) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800024000000101080001400000070c08000340000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 11m36.508059035s ago: executing program 33 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r3, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x9}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x200, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "5fcf"}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x200, 0xfffd, 0x5, 0x6, 0xfffffffb}}}}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/zoneinfo\x00', 0x0, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x80000000000006) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800024000000101080001400000070c08000340000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 9m47.808434409s ago: executing program 5 (id=19): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) io_setup(0x5, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) setregid(0xffffffffffffffff, r2) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) close(r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x2, 0x1c, 0x200, &(0x7f0000000040)="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"}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0xa431) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) 9m39.719445198s ago: executing program 5 (id=188): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="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", 0x17f}], 0x1}}], 0x2, 0x400c0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 9m32.11713385s ago: executing program 5 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b00000000020000000000"], 0x0, 0x34, 0x0, 0xa}, 0x28) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000c40)={0xf0006000}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close(r7) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 9m16.312444562s ago: executing program 34 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b00000000020000000000"], 0x0, 0x34, 0x0, 0xa}, 0x28) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000c40)={0xf0006000}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close(r7) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 8m34.246774174s ago: executing program 2 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@nfs_export_on}, {@redirect_dir_on}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040), 0x43) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r3, 0x8b21, &(0x7f0000000040)) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, r5, r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = syz_open_procfs(r6, &(0x7f0000000400)='ns\x00') readlinkat(r8, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0) sendmmsg$alg(r4, &(0x7f000001b280)=[{0x0, 0x0, &(0x7f0000019c00)=[{&(0x7f0000019880)="75ba2694c59270505d76e4d337d73d290bd499aa7ee6ec1db42c415e10f5cc71f1a49a5b09307cd55e0ffb729e63652702c125507dc66b3746bc1755ad256de5e814fa8f9075cae17bccad5749afe057f0fe7e6fc9ce2d9abd5e5881246a16ba325fbd3e643a7559657c743017f257b0e9023bd8765d85484710e3b027d016356c6ae266a5299e8f1f28", 0x8a}, {&(0x7f0000019940)="63aa7cf25a3e7a52a9d66d66bbf3c2469d514a5a8b20ed867dd3bb3b451b2187a2a0592f260c8c6fe2cd997c740f8aa20f95fce08e0cf37c4ab4e582f3e6c3dc5c8fe1036e39d5f66b55007cca015a79a4e4892166f6e81fff10e8f8eb2269d713c5445db0f79fc054b390a60405bb3a35c1", 0x72}, {&(0x7f00000003c0)="bd5e1d8d054d8ddec8578842ea5f205ddafa20a12b27", 0x16}, {&(0x7f00000199c0)="3562741bc9f97f145b08f9a68c3e302e3bc2d8a4d41be07938c36709f0baba882d7878f11a53fe754edcd21c87f97b2db1fa833b805f11a5d15831c17194492825582cc24a98b8134622db5db392de3f0f28c4c6f1b1fa70207a90eff237688f2aae31b59f0f38eb16774729f2fe4909af579adb5523b3f2f3d4dc73c703e7c50d6b74a1194e9e8e1ab7969693ac670ed70321ae098f4e14ae974eafc689b07412331bc034dc676b9428", 0xaa}, {&(0x7f0000019b00)="5748351fc27982b9b1e3cb5a43dd80f5db14c6add11a5661b2afde8b1c3e0db13b86a56b64c9811fe7791d5ffd9655ce1f3263922c0ff812dfd33c5004f436b8954c557a51f7664e0232db2d8d1358b860348869dce27e70ae169fb6d5c57fc3691d4282689fbeef93b1", 0x6a}, {&(0x7f0000019b80)="cc9218cc0d58e8e53053f205e8324219dce0694d8d79e90da81442fee08c048acca9361840e2f1ae5f8185f660e7c7f63e71f15bad65c9d21996abb54dd16ea756c8b118b680ad88bc83e13e", 0x4c}], 0x6, 0x0, 0x0, 0x400c0}, {0x0, 0x0, &(0x7f000001b1c0)=[{&(0x7f0000000600)="0a563d6626a658dc7e6ada447a8662862da1a889ed196012088b9f106faca4ca00c6fcf8d61a181e8fb1b9", 0x2b}, {&(0x7f0000019cc0)="079e2e0e1581c60c90f019a891ae7fd4185f4f4d338d6c8bd39c36420d0eff28a9c852990f8519e25be720088b6053a57f2eacb7d583653bf86a77ecdcc7993a1145dfd40fef9bb32a105338bbd7973b7f97644b2c1330334598c332311411f7080a8ddbd96d070ad800df7dd2298fbeba29dbe1222eb72a1ba05ecb8ea5b781a24c6124e44e82423d9a1d7e70c3b84510c1a4673f326d16431c69eaf016d12013d7e231cec59fe1c2436748e7e6429158a9d46557c0326d77db385617d35e73decbf2cd2226622c1f0c6bafbf1c", 0xce}, {&(0x7f0000019dc0)="6749e7d1ceb2161a1e2127d0e70bba412ab444d47350aa8d86d9f73247d942211c9e8402aa80829e5ad61c86814d8336d8157a31f647ebd1439428efbd88f5773d2f58dea6239cabde0d4ee0a5c5b4dd79460fb764d6a59c2bcbd30e4da139d214209ace2e479265149904d4e5a431267409c07d8354", 0x76}, {&(0x7f0000019e40)="1d27cb68e4d748c381667a7a54643549f7cc551bd42d914eb696aebe3f3f2b5777976f8118052dc19fda3154befe7027021259ffb7a316728a106a8b0a9aa88c4f746a457a7d0166b67e6766b622012c2dcebd7f800512a3d971", 0x5a}, {&(0x7f0000019ec0)="5346970e6ed32258eafcf4402fbf48aeac8ad786662973ebcc5d", 0x1a}, {&(0x7f0000019f00)="a53ab1e1cdf9612fb7ff9b55b24fbd4e7a88ef3445b5b720fd908aacbb3f18619d517b3ad39d005ff5ce4cd80d24e4cb4b6787cd8726f9ad06a7df4e3a1f08c98e59e8e7a845b2b29af05b92fdbc3b9ca8d39ed1d9eaa3a6317a5d986424e1f958a4a31c72c6f72bdd925fc172084124b7409430c7a66f1cd9b2a1fab7d9307081c3a2bd9c8ed24fa3da76a9cd6680a23361bd2be8759b972e3236eb7576d296e74087e4554ef2897bd5f0ed8ce19bea241a4a13dc629a85a66eaac2ce805aae5f4a3619e691308d72ada536d1c3296093cfc7030520782b3c047f8cc3e13ac56e031ae0335464e9a654bb00", 0xec}, {&(0x7f000001a000)="0684a4cb60eb0aca4083e41a61f58acf1a9dc75287ad6955588fb832a5f639e3021a5d64cc812bc4f0d46f813ea21474a19cfdca2ccf633328e4b5d69a6e60a658930b67bf573d88f075c7ef60afef56b390ea494a10ef6ee093483937f70e845f8ac1c660c3e19bca86f964395ef0895dc30affbddd449a63c236dfd300ae0bb2c80abbbd3a94edc712e84ca0eb264c159707ea22b7a19da164b3f4c216565d321a0245411773ab58d1f15dac82e3e1b1997b4d8f6e7c9d8a55b727ae28a4cfb03d0bdc32c3629dd22e4189cd66d3f0534efbc0e73ea736a9d348a87dd6ef1a28dda6dd9b2e7f96047317decbaa", 0xee}, {&(0x7f000001a100)="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", 0x1000}, {&(0x7f000001b100)="99df6bff6df214ffd649c1b6620f30abe7472de38c42743f815bc52705d7116e1dd1a1f6dffa5fbae41fced29731f2fa50894fed2006ffb984da66b9120760ff6a8e885f5ffef58b25d776cd914f7f5aa7e0e446b402518b7004a96df4df415af7de72692a38c33a88fb46242efbed7a250ca7774d4064f9a77844521051869bad", 0x81}], 0x9, 0x0, 0x0, 0x1}], 0x2, 0x80) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 8m28.626156268s ago: executing program 2 (id=258): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200a00090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, &(0x7f0000000140)=0x6e) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x6e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c27, 0x0, 0x1, 0x0, 0x0, 0x5}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = dup3(r0, r7, 0x0) read$FUSE(r8, &(0x7f0000006240)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) pipe2$9p(&(0x7f0000001900), 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) 8m26.711693451s ago: executing program 2 (id=261): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x800, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x0, &(0x7f0000000340)=0x80000000fff, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r4], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYRESHEX=r1], 0x34}, 0x1, 0x0, 0x0, 0x20048480}, 0x1e3cd60c7b17f881) socket$kcm(0x25, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031412e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r8, &(0x7f0000000580)="007386e8569dc9958d644eb37f286d27d4d3be4c573bbb1d3f4e78e3a3a70743796fb03b1ea5fad27c466b16658d47ecfd942d24c2382556d622a36aa5db3176573103c0364decbe2d64fa4d78cfe6f863ca057a0d77b436aae3820ba773d1660800000000000000", 0x68) creat(&(0x7f0000001380)='./file0\x00', 0x4) 8m20.323924761s ago: executing program 2 (id=264): r0 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0xd}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000001c0)=0xfffefffd, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$inet6(0xa, 0x2, 0x3a) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c00", @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="9bf20100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x7, 0xc080, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m19.006050271s ago: executing program 2 (id=265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x5, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000140000000000000000000000040000000000", @ANYRESDEC=r1, @ANYRES32], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x481, 0x42) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r6 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) keyctl$KEYCTL_WATCH_KEY(0x6, r6, 0xffffffffffffffff, 0xfffffffdfffffffc) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x9) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 8m18.643605021s ago: executing program 2 (id=266): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x87, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x79, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1f, 0x3, [{0x1, 0x2}, {0x1, 0x12, "2ed50de8474f1917bf157ac4b0020800"}, {0x1, 0x5, "4740c2"}]}]}}, {0x1, 0x4e20, 0x45, 0x0, @opaque="d44464bfacbc42fb46565baf9238ee1e70bdca7032f0c9bc50d6651b049308293ea2065e84580843c7cee9fae33a0bc99d8001ecbac79edb55f2c36b5f"}}}}}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x8001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = dup2(r3, r3) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) close_range(r6, r6, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x10000, 0x4) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, {0x8, 0x7f, 0x7ab8, 0x7aa}}) 8m3.541277102s ago: executing program 35 (id=266): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x87, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x79, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1f, 0x3, [{0x1, 0x2}, {0x1, 0x12, "2ed50de8474f1917bf157ac4b0020800"}, {0x1, 0x5, "4740c2"}]}]}}, {0x1, 0x4e20, 0x45, 0x0, @opaque="d44464bfacbc42fb46565baf9238ee1e70bdca7032f0c9bc50d6651b049308293ea2065e84580843c7cee9fae33a0bc99d8001ecbac79edb55f2c36b5f"}}}}}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x8001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = dup2(r3, r3) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) close_range(r6, r6, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x10000, 0x4) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, {0x8, 0x7f, 0x7ab8, 0x7aa}}) 1m12.998550185s ago: executing program 6 (id=763): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close(r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x83]}]}, 0x70}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 1m9.281617267s ago: executing program 6 (id=767): socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setxattr$security_ima(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000300), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f0000000080)}, 0x20) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"}) setfsuid(0xee01) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) 1m4.253712719s ago: executing program 6 (id=759): socket$inet6(0xa, 0xd, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000140)={0x0, 0x2}) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r5, 0x80047456, 0xffefff1f00000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x307, 0x0, 0x0, 0x4, 0x90, @broadcast}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="a1fc009907000001010000000002000000"], 0x0) 1m0.08913768s ago: executing program 6 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a050001300002802c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000210c0019800800020006000000135b688d68f784170334019b9180e960741cecb2586300395c8341b97c16245947ef"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) utimensat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') msgget$private(0x0, 0x101) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 54.670740467s ago: executing program 6 (id=773): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40}, {0x4, 0x0, 0x0, 0xfffdf038}, {0x6, 0x1}]}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket(0x25, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x80000001, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x81, 0x2, 0xffff, 0x5, 0x195, 0x101, 0xd}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x31) r9 = accept4(r7, 0x0, 0x0, 0x800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000980)=""/146, 0x92}], 0x1}, 0x18142) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0) 46.335458281s ago: executing program 6 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.870890188s ago: executing program 36 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.333208762s ago: executing program 4 (id=814): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x1f8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x35}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3ff825ec284a", @mac=@broadcast, @private=0xa010102, @rand_addr=0x64010101, 0x5, 0x11}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x10008, 0xc, 0x5514}, 0x50) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40201, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'veth0_macvtap\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r10 = creat(&(0x7f0000000240)='./file1\x00', 0xd) write$P9_RUNLINKAT(r10, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10d042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x50, r3, 0x0) 18.453379428s ago: executing program 1 (id=817): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0x57e, 0x10100, 0x4, 0x37d}, &(0x7f000001b100)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xa) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r10, 0x101, 0x1) getdents64(r10, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019040)=ANY=[@ANYBLOB="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"], 0x2090}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x1, 0x0, 0x0) 15.342813981s ago: executing program 1 (id=820): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x67, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x59, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, 0x4e20, 0x45, 0x0, @opaque="d44464bfacbc42fb46565baf9238ee1e70bdca7032f0c9bc50d6651b049308293ea2065e84580843c7cee9fae33a0bc99d8001ecbac79edb55f2c36b5f"}}}}}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setscheduler(r2, 0x0, &(0x7f0000000180)=0x8001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r5}, 0x10) r6 = dup2(r4, r4) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) close_range(r7, r7, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x10000, 0x4) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, {0x8, 0x7f, 0x7ab8, 0x7aa}}) 15.181239658s ago: executing program 7 (id=821): socket$can_j1939(0x1d, 0x2, 0x7) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000000b00)) fcntl$notify(r2, 0x402, 0x8000003d) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 14.143816432s ago: executing program 4 (id=822): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c000000000061134c0000000002bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13.481057515s ago: executing program 7 (id=823): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xa, &(0x7f0000000040)={0x4, 0x1d9}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) shutdown(r4, 0x1) ioprio_set$uid(0x0, 0x0, 0x4004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fec040b92800000008000300", @ANYRES32=r7, @ANYBLOB="10002f80"], 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x2000c0c0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffcfa) 13.465642935s ago: executing program 1 (id=824): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) signalfd(r0, &(0x7f00000000c0)={[0xe]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x100000020001100}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x800000e}]}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x31, 0x0, 0x1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r4, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x2b, 0xd, 0x800000, 0xa, 0x8, 0x3, 0x6, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50) umount2(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40) read$FUSE(0xffffffffffffffff, 0x0, 0x38) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(r2, 0x8b2c, &(0x7f0000000040)) 13.368254394s ago: executing program 8 (id=825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000004000085000000060000001853000006000000000000000000000018120000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x6, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x4000}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='btrfs_sync_fs\x00', r0, 0x0, 0x8000000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ftruncate(r4, 0x8001) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r5, 0x80044944, &(0x7f0000001040)) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) 11.226392913s ago: executing program 8 (id=826): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() r3 = io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x8000, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1) r4 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r4, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x9) mount(&(0x7f00000003c0)=@md0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000340)='nfsd\x00', 0x1a0c099, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)="3b52e010cfa8277d5e51027ea522343d090a9a3f0fc54bd6556e1e41a44890d0c945a313b328707c939f4eb2912ad1c9bb976cf26da04c27e4bd3ec7d559f4437d9b0e4f1b87070ddbba58d7ce9535dd1f430714c66b72e80376cbd91c0b27800176b96289429ea7c56e280e83abbda4921f076fdf59223bfc", 0x79}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x3ac}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="22d42f7add5228b885cd12f1f588edd92d51a4f52fe0dc037d0938b53c1586de5f20ab9f6bb6ae04be9919b48a9600feac28010f721d23b0ca6fc098643867b52a17481da2febba16d0e31fae15373a6dc66ae91fea9277f5a78b2a9030e38ac200dd7", 0x63, 0x40005, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, '\x00', {}, 0x7ff}) 11.22389895s ago: executing program 7 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040), 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x12540, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000d00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xffffffffffffffba) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffd76, &(0x7f0000000180)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 11.123793345s ago: executing program 4 (id=828): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) signalfd(r0, &(0x7f00000000c0)={[0xe]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x100000020001100}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x800000e}]}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x31, 0x0, 0x1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r4, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x2b, 0xd, 0x800000, 0xa, 0x8, 0x3, 0x6, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50) umount2(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r8) ioctl(r2, 0x8b2c, &(0x7f0000000040)) 11.012550873s ago: executing program 1 (id=829): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@loopback, 0x28, r3}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r7, 0x1, 0xfffffffd, 0x80000000) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, 0x140a, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000) rt_sigaction(0x1c, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000440)) socket$inet6(0xa, 0x2, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r11, 0x4020565a, &(0x7f0000000280)={0x5, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='filemap_set_wb_err\x00', r0, 0x0, 0xb}, 0x18) 8.311574796s ago: executing program 4 (id=830): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000400000000000930000000066ad911581d4"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x2, 0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r5) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) ioctl$TIOCSTI(r0, 0x5412, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) name_to_handle_at(r7, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) close(r6) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) 8.279560547s ago: executing program 7 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x34, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x0) 8.263866821s ago: executing program 8 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0xe}], 0x1, 0xa023, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000080}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018"], 0x4c}}, 0x4000804) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="66b8040000000f23d80f21f86635800000500f23f8ba410066ed0f00130f42011d1db9800000c0660f01df6635004000000f36fe424101c80f09ba430066edbaf80c66b8d7e2818466efbafc0cb0fbb80c008ee0660f3882a5e229", 0x5b}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.093679413s ago: executing program 4 (id=833): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x42, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) fcntl$setown(r2, 0x8, r4) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) gettid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac1414000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32], 0x254}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 5.126406444s ago: executing program 8 (id=834): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x67, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x59, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, 0x4e20, 0x45, 0x0, @opaque="d44464bfacbc42fb46565baf9238ee1e70bdca7032f0c9bc50d6651b049308293ea2065e84580843c7cee9fae33a0bc99d8001ecbac79edb55f2c36b5f"}}}}}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setscheduler(r2, 0x0, &(0x7f0000000180)=0x8001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r5}, 0x10) r6 = dup2(r4, r4) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) close_range(r7, r7, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x10000, 0x4) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, {0x8, 0x7f, 0x7ab8, 0x7aa}}) 4.995071048s ago: executing program 4 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250001000000000085100000faffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x7, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20040000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x0, 0x7, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x5, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x1, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffbfffb7, 0xfffffffffffffffa, 0x2, 0xd, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x0, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x9, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x20005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x35) 4.963640802s ago: executing program 7 (id=836): syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffffce"]) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_gettime(0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045503, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0xffffffffffffffdd, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x200488c0}, 0x2004c010) r9 = socket(0x400000000010, 0x3, 0x0) write(r9, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc0280200003001e030500e1000c04", 0x1d) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffc86) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x320}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$smack_xattr_label(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6f76617208000000ff"], 0x9, 0x3) r12 = geteuid() mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x210cae, &(0x7f00000005c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x31, 0x61, 0x36, 0x64, 0x37, 0x31], 0x2d, [0x34, 0x61, 0x30, 0x39], 0x2d, [0x64, 0x39, 0x38, 0x38], 0x2d, [0x35, 0x62, 0x38, 0x66], 0x2d, [0x32, 0x36, 0x33, 0x35, 0x7b, 0x64, 0x35, 0x32]}}}, {@euid_eq={'euid', 0x3d, r12}}]}) 4.836413467s ago: executing program 1 (id=837): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) socket(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x80}}], 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000640)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x808, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000132ae57f6001400"], 0x34}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 2.122919684s ago: executing program 8 (id=838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x1, 0x6, @link_local}, 0x14) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80082) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, 0x0) socket$kcm(0xa, 0x3, 0x87) 1.988467137s ago: executing program 7 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000001ec0)={0x0, &(0x7f0000001e80)}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioprio_set$pid(0x2, 0x0, 0x6000) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.551613971s ago: executing program 1 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r5, &(0x7f0000000b00)=@l2={{0x7, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x4080, 0x3a, 0xf54, 0x3a, 0x8, 0x3a, 0x38}, 0x2f, 0x10, 0x20, '(%\''}, 0xb1) socket$tipc(0x1e, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x0) munmap(&(0x7f0000331000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_dev$loop(0x0, 0x3, 0x80001) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f00000021c0)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x400100, 0x0, 0x0, 0x81}}, 0x50) 0s ago: executing program 8 (id=841): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) signalfd(r0, &(0x7f00000000c0)={[0xe]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x100000020001100}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x800000e}]}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x31, 0x0, 0x1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r4, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x2b, 0xd, 0x800000, 0xa, 0x8, 0x3, 0x6, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50) umount2(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40) read$FUSE(0xffffffffffffffff, 0x0, 0x38) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(r2, 0x8b2c, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 61351][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.175920][ T7194] team0: Port device team_slave_0 added [ 333.305015][ T7194] team0: Port device team_slave_1 added [ 333.367053][ T121] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 334.474656][ T121] usb 5-1: device descriptor read/64, error -71 [ 335.643752][ T7407] overlayfs: conflicting options: userxattr,redirect_dir=on [ 336.923653][ T7419] option changes via remount are deprecated (pid=7408 comm=syz.4.249) [ 337.782425][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.874802][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.911298][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.491130][ T7427] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.252'. [ 338.926896][ T12] hsr_slave_0: left promiscuous mode [ 338.962041][ T12] hsr_slave_1: left promiscuous mode [ 338.984741][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.993613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.031720][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.040136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.156969][ T12] veth1_macvtap: left promiscuous mode [ 339.162609][ T12] veth0_macvtap: left promiscuous mode [ 339.193049][ T12] veth1_vlan: left promiscuous mode [ 339.209217][ T12] veth0_vlan: left promiscuous mode [ 341.553789][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 345.790772][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 349.540928][ T7475] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.264'. [ 350.139938][ T7481] netlink: 'syz.6.273': attribute type 10 has an invalid length. [ 351.187992][ T12] team0 (unregistering): Port device team_slave_1 removed [ 351.262948][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.965339][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.972902][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.005916][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.245369][ T7481] team0: Port device wlan1 added [ 355.576312][ T7497] siw: device registration error -23 [ 358.628540][ T7527] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 358.748133][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 359.539722][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.551635][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.560377][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.574762][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.585841][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.368395][ T7540] lo speed is unknown, defaulting to 1000 [ 362.267804][ T5157] Bluetooth: hci0: command tx timeout [ 362.456784][ T13] bridge_slave_1: left allmulticast mode [ 362.462617][ T13] bridge_slave_1: left promiscuous mode [ 362.470782][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.515229][ T13] bridge_slave_0: left allmulticast mode [ 362.570947][ T13] bridge_slave_0: left promiscuous mode [ 362.622458][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.492968][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.587742][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.610057][ T13] bond0 (unregistering): Released all slaves [ 364.578663][ T5157] Bluetooth: hci0: command tx timeout [ 364.820618][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.946416][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.305624][ T7603] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 366.316794][ T7603] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 366.333689][ T7603] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 366.346868][ T7603] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 366.430633][ T7603] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 366.523825][ T7603] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 366.533938][ T7603] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 366.544693][ T7603] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 366.547649][ T13] team0 (unregistering): Port device team_slave_1 removed [ 366.566528][ T7603] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 366.577048][ T7603] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 366.586731][ T7603] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 366.718817][ T5157] Bluetooth: hci0: command tx timeout [ 367.220262][ T13] team0 (unregistering): Port device team_slave_0 removed [ 367.342923][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 367.895168][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.930577][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.945595][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.957633][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.977134][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.074781][ T7616] siw: device registration error -23 [ 368.807199][ T5157] Bluetooth: hci0: command tx timeout [ 368.954823][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.6.291'. [ 369.766197][ T7626] binder: 7621:7626 ioctl 4018620d 0 returned -22 [ 370.420881][ T5157] Bluetooth: hci4: command tx timeout [ 370.649000][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 371.028337][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.090992][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.589605][ T7635] fuseblk: Bad value for 'fd' [ 372.163525][ T7627] bond0: (slave batadv0): Releasing backup interface [ 372.275511][ T7612] lo speed is unknown, defaulting to 1000 [ 372.487806][ T5157] Bluetooth: hci4: command tx timeout [ 374.186918][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 374.556893][ T5157] Bluetooth: hci4: command tx timeout [ 374.581406][ T7658] qnx4: no qnx4 filesystem (no root dir). [ 374.961852][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 375.949424][ T7677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.302'. [ 375.958604][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 376.022248][ T7677] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 376.637279][ T5157] Bluetooth: hci4: command tx timeout [ 376.915016][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 377.845645][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.892647][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.933068][ T7540] bridge_slave_0: entered allmulticast mode [ 378.087590][ T7699] netlink: 36 bytes leftover after parsing attributes in process `syz.6.306'. [ 378.165114][ T7540] bridge_slave_0: entered promiscuous mode [ 378.467628][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.250172][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.283875][ T7540] bridge_slave_1: entered allmulticast mode [ 379.572261][ T7540] bridge_slave_1: entered promiscuous mode [ 379.801664][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.810809][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.837332][ T7612] bridge_slave_0: entered allmulticast mode [ 379.871164][ T7612] bridge_slave_0: entered promiscuous mode [ 380.080001][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.211829][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.263478][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.308'. [ 380.273247][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 380.413851][ T7715] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 380.679535][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.687333][ T7612] bridge_slave_1: entered allmulticast mode [ 381.077276][ T7612] bridge_slave_1: entered promiscuous mode [ 381.299476][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.313961][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.806994][ T7727] binder: 7720:7727 ioctl 4018620d 0 returned -22 [ 383.112529][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.142590][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.149358][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.183599][ T7540] team0: Port device team_slave_0 added [ 384.354962][ T7612] team0: Port device team_slave_0 added [ 384.372977][ T7540] team0: Port device team_slave_1 added [ 384.699478][ T7612] team0: Port device team_slave_1 added [ 385.648577][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.655699][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.764824][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.872398][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.883698][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.915759][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.163401][ T7756] kAFS: No cell specified [ 386.634918][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.643191][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.671816][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.683965][ T7756] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 386.822929][ T7760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.447320][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.455605][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.536477][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.669600][ T7770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.319'. [ 388.685343][ T7612] hsr_slave_0: entered promiscuous mode [ 388.699199][ T7612] hsr_slave_1: entered promiscuous mode [ 388.705937][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.720215][ T7612] Cannot create hsr debugfs directory [ 388.873396][ T7775] xt_CT: No such helper "pptp" [ 389.333508][ T7770] bridge_slave_1: left allmulticast mode [ 389.341103][ T7770] bridge_slave_1: left promiscuous mode [ 389.351519][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.365874][ T7770] bridge_slave_0: left allmulticast mode [ 389.374724][ T7770] bridge_slave_0: left promiscuous mode [ 389.382838][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.473872][ T7790] kvm: user requested TSC rate below hardware speed [ 389.561590][ T7540] hsr_slave_0: entered promiscuous mode [ 389.582834][ T7540] hsr_slave_1: entered promiscuous mode [ 389.590091][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.604055][ T7540] Cannot create hsr debugfs directory [ 390.075784][ T7800] netlink: 'syz.6.323': attribute type 4 has an invalid length. [ 390.083619][ T7800] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.323'. [ 393.734851][ T7816] delete_channel: no stack [ 393.807197][ T7824] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 394.281949][ T7827] siw: device registration error -23 [ 394.926367][ T7824] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.968587][ T7824] bond0: (slave team0): Enslaving as an active interface with an up link [ 395.274761][ T7612] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 395.520301][ T7612] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 395.928620][ T7612] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 397.066796][ T7612] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 398.167815][ T121] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 398.386803][ T121] usb 7-1: Using ep0 maxpacket: 8 [ 398.401166][ T121] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 398.421793][ T121] usb 7-1: config 0 has no interface number 0 [ 398.442599][ T121] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 398.489228][ T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.574261][ T121] usb 7-1: Product: syz [ 398.578842][ T7540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.584468][ T121] usb 7-1: Manufacturer: syz [ 398.596300][ T121] usb 7-1: SerialNumber: syz [ 398.621526][ T7540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.632394][ T7850] delete_channel: no stack [ 399.279151][ T121] usb 7-1: config 0 descriptor?? [ 399.568643][ T7540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.609331][ T121] usb 7-1: can't set config #0, error -71 [ 399.618096][ T121] usb 7-1: USB disconnect, device number 2 [ 400.477447][ T7540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.158367][ T7882] delete_channel: no stack [ 401.319207][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.396055][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.432953][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.472515][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.6.337'. [ 401.632653][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.639946][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.683168][ T7897] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 402.378883][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 402.663056][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.670375][ T7467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.004064][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.011182][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 403.146061][ T7895] orangefs_mount: mount request failed with -4 [ 403.276121][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.283351][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.369675][ T24] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 403.468024][ T24] usb 5-1: config 0 has no interface number 0 [ 403.491837][ T24] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 403.513348][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.533650][ T24] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 403.551520][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.582612][ T24] usb 5-1: Product: syz [ 403.605778][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.611212][ T24] usb 5-1: Manufacturer: syz [ 403.613064][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.627995][ T24] usb 5-1: SerialNumber: syz [ 403.990305][ T7914] netlink: 228 bytes leftover after parsing attributes in process `syz.6.342'. [ 404.614828][ T24] usb 5-1: config 0 descriptor?? [ 405.020494][ T5949] lo speed is unknown, defaulting to 1000 [ 405.147842][ T24] usb 5-1: can't set config #0, error -71 [ 405.197512][ T24] usb 5-1: USB disconnect, device number 5 [ 405.207788][ T7612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.732937][ T7540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.746779][ T7540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.104417][ T7926] delete_channel: no stack [ 409.661319][ T5157] Bluetooth: hci6: unexpected event for opcode 0x1004 [ 411.084895][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.748417][ T5157] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 413.759458][ T5157] Bluetooth: hci6: Injecting HCI hardware error event [ 413.779915][ T5157] Bluetooth: hci6: hardware error 0x00 [ 415.310187][ T7978] binder: 7972:7978 ioctl 4018620d 0 returned -22 [ 415.325336][ T7978] binder: 7972:7978 ioctl c0306201 0 returned -14 [ 416.389611][ T7984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.556895][ T5157] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 417.656777][ T978] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 417.862895][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 417.917556][ T978] usb 5-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 417.932874][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.943669][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.954419][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.967479][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.979260][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.983853][ T978] usb 5-1: Product: syz [ 418.057552][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.147745][ T978] usb 5-1: Manufacturer: syz [ 418.169904][ T978] usb 5-1: SerialNumber: syz [ 418.189944][ T978] usb 5-1: config 0 descriptor?? [ 418.638336][ T978] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 418.937272][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 419.474880][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 419.529060][ T978] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 419.571470][ T978] usb 5-1: media controller created [ 419.605524][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.645880][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 419.670484][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 419.811282][ T978] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 419.894429][ T8005] delete_channel: no stack [ 419.928297][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 419.993598][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 420.001648][ T978] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 420.157076][ T5157] Bluetooth: hci0: command tx timeout [ 420.161808][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 420.232407][ T978] dvb-usb: error while querying for an remote control event. [ 420.239449][ T7994] lo speed is unknown, defaulting to 1000 [ 420.241847][ T7612] veth0_vlan: entered promiscuous mode [ 420.467659][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 420.488664][ T978] dvb-usb: error while querying for an remote control event. [ 420.523565][ T7612] veth1_vlan: entered promiscuous mode [ 420.677051][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 420.695446][ T5949] dvb-usb: error while querying for an remote control event. [ 420.896892][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 420.905695][ T5949] dvb-usb: error while querying for an remote control event. [ 420.992404][ T5894] usb 5-1: USB disconnect, device number 6 [ 421.056476][ T7612] veth0_macvtap: entered promiscuous mode [ 422.173528][ T8027] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 422.187910][ T5157] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 423.069804][ T5157] Bluetooth: hci0: command tx timeout [ 423.214345][ T5894] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 423.244376][ T7612] veth1_macvtap: entered promiscuous mode [ 423.715231][ T8039] Bluetooth: MGMT ver 1.23 [ 423.728605][ T8039] ieee802154 phy0 wpan0: encryption failed: -90 [ 424.004514][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.493485][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.557657][ T12] bridge_slave_1: left allmulticast mode [ 424.565594][ T12] bridge_slave_1: left promiscuous mode [ 424.652123][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.095937][ T12] bridge_slave_0: left allmulticast mode [ 425.109363][ T12] bridge_slave_0: left promiscuous mode [ 425.117435][ T5157] Bluetooth: hci0: command tx timeout [ 425.123370][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.987122][ T8057] xt_TPROXY: Can be used only with -p tcp or -p udp [ 426.274040][ T5157] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 426.283396][ T5157] Bluetooth: hci3: Injecting HCI hardware error event [ 426.385571][ T5157] Bluetooth: hci3: hardware error 0x00 [ 427.236764][ T51] Bluetooth: hci0: command tx timeout [ 427.712526][ T5955] IPVS: starting estimator thread 0... [ 427.828803][ T8069] IPVS: using max 24 ests per chain, 57600 per kthread [ 428.486825][ T5157] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 429.032859][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.057939][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.076890][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.096975][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.114030][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.285042][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.327738][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.340074][ T12] bond0 (unregistering): Released all slaves [ 429.741927][ T8084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 430.055230][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.369'. [ 430.064265][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.369'. [ 430.422557][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 430.848124][ T12] hsr_slave_0: left promiscuous mode [ 430.900431][ T12] hsr_slave_1: left promiscuous mode [ 430.924271][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.961542][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.196799][ T5157] Bluetooth: hci2: command tx timeout [ 431.816476][ T8107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.278789][ T5157] Bluetooth: hci2: command tx timeout [ 433.446009][ T8111] delete_channel: no stack [ 433.787720][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.956007][ T12] team0 (unregistering): Port device team_slave_0 removed [ 434.654590][ T8124] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:0 [ 435.457900][ T5157] Bluetooth: hci2: command tx timeout [ 436.020602][ T8077] lo speed is unknown, defaulting to 1000 [ 436.280375][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.287664][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.295142][ T7994] bridge_slave_0: entered allmulticast mode [ 436.303249][ T7994] bridge_slave_0: entered promiscuous mode [ 436.312017][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.434420][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.441999][ T7994] bridge_slave_1: entered allmulticast mode [ 437.237226][ T7994] bridge_slave_1: entered promiscuous mode [ 437.682050][ T5157] Bluetooth: hci2: command tx timeout [ 437.972595][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.097051][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.371959][ T7994] team0: Port device team_slave_0 added [ 439.713340][ T7994] team0: Port device team_slave_1 added [ 440.467176][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.386'. [ 440.671770][ T8175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.931595][ T8168] TCP: TCP_TX_DELAY enabled [ 441.066430][ T8175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.918291][ T8184] delete_channel: no stack [ 441.924535][ T8174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 441.931535][ T8174] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 441.941492][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.954707][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.980966][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.994873][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.003423][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.030008][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.044440][ T8174] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 442.064149][ T8174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.084977][ T8174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 442.153299][ T8174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 442.936447][ T7994] hsr_slave_0: entered promiscuous mode [ 442.977886][ T7994] hsr_slave_1: entered promiscuous mode [ 442.994565][ T7994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.002352][ T7994] Cannot create hsr debugfs directory [ 443.239027][ T5157] Bluetooth: hci0: command 0x0c1a tx timeout [ 443.296776][ T8204] netlink: 'syz.6.391': attribute type 4 has an invalid length. [ 443.304853][ T8204] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.391'. [ 444.096479][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 444.265497][ T5157] Bluetooth: hci2: command 0x0c1a tx timeout [ 445.133427][ T8214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.558600][ T5157] Bluetooth: hci0: command 0x0c1a tx timeout [ 446.606486][ T5157] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.119124][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.127474][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.483976][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.072275][ T5157] Bluetooth: hci0: command 0x0c1a tx timeout [ 449.292379][ T8225] : entered promiscuous mode [ 449.310642][ T5157] Bluetooth: hci2: command 0x0c1a tx timeout [ 449.862551][ T8249] binder: 8242:8249 ioctl 4018620d 0 returned -22 [ 451.462358][ T3474] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 451.602741][ T3474] Bluetooth: hci4: Frame reassembly failed (-84) [ 451.633925][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.720968][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.758555][ T8077] bridge_slave_0: entered allmulticast mode [ 451.807362][ T8077] bridge_slave_0: entered promiscuous mode [ 451.865440][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.905624][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.918052][ T8077] bridge_slave_1: entered allmulticast mode [ 451.941327][ T8077] bridge_slave_1: entered promiscuous mode [ 453.258103][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.535685][ T8271] siw: device registration error -23 [ 453.696183][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 453.703561][ T5157] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 453.984173][ T8266] delete_channel: no stack [ 454.088234][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.203810][ T12] bridge_slave_1: left allmulticast mode [ 455.011413][ T12] bridge_slave_1: left promiscuous mode [ 455.021539][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.245737][ T8279] unsupported nlmsg_type 40 [ 455.609000][ T12] bridge_slave_0: left allmulticast mode [ 455.660761][ T12] bridge_slave_0: left promiscuous mode [ 455.676254][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.468874][ T8280] delete_channel: no stack [ 456.559309][ T8290] binder: 8286:8290 ioctl 4018620d 0 returned -22 [ 457.865810][ T5952] IPVS: starting estimator thread 0... [ 457.990489][ T8295] IPVS: using max 23 ests per chain, 55200 per kthread [ 458.706072][ T8298] kvm: user requested TSC rate below hardware speed [ 458.731415][ T8297] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 458.975385][ T8301] siw: device registration error -23 [ 459.698104][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.719947][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.752377][ T12] bond0 (unregistering): Released all slaves [ 459.900225][ T8077] team0: Port device team_slave_0 added [ 460.341725][ T12] hsr_slave_0: left promiscuous mode [ 460.358814][ T8303] delete_channel: no stack [ 460.383881][ T12] hsr_slave_1: left promiscuous mode [ 460.415442][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.423600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.520269][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.533383][ T8310] siw: device registration error -23 [ 460.545840][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.550369][ T12] veth1_macvtap: left promiscuous mode [ 461.738158][ T12] veth0_macvtap: left promiscuous mode [ 461.810885][ T12] veth1_vlan: left promiscuous mode [ 461.827124][ T12] veth0_vlan: left promiscuous mode [ 463.407274][ T30] audit: type=1326 audit(1755700220.012:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 463.863377][ T8328] binder: 8323:8328 ioctl c0306201 0 returned -14 [ 464.418896][ T30] audit: type=1326 audit(1755700220.031:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.444541][ T30] audit: type=1326 audit(1755700220.050:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.466076][ T30] audit: type=1326 audit(1755700220.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.488451][ T30] audit: type=1326 audit(1755700220.050:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.509778][ T30] audit: type=1326 audit(1755700220.050:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.532573][ T30] audit: type=1326 audit(1755700220.059:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.554000][ T30] audit: type=1326 audit(1755700220.059:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.575342][ T30] audit: type=1326 audit(1755700220.667:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.608395][ T30] audit: type=1326 audit(1755700220.667:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eec38ebe9 code=0x7ffc0000 [ 464.967975][ T12] team0 (unregistering): Port device team_slave_1 removed [ 465.019340][ T12] team0 (unregistering): Port device team_slave_0 removed [ 465.514566][ T8077] team0: Port device team_slave_1 added [ 465.708679][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.715776][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.772325][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.786243][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.794966][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.821665][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.118342][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'. [ 467.677568][ T8344] delete_channel: no stack [ 467.979066][ T8077] hsr_slave_0: entered promiscuous mode [ 467.996672][ T8077] hsr_slave_1: entered promiscuous mode [ 468.046289][ T8077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.091514][ T8077] Cannot create hsr debugfs directory [ 468.133846][ T7994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 469.217663][ T7994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 469.451240][ T7994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 469.516228][ T7994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.529336][ T8362] siw: device registration error -23 [ 471.120484][ T8366] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 472.123230][ T8380] netlink: 'syz.6.426': attribute type 4 has an invalid length. [ 472.131247][ T8380] netlink: 152 bytes leftover after parsing attributes in process `syz.6.426'. [ 472.878928][ T8380] : renamed from bond0 (while UP) [ 473.653474][ T8391] program syz.6.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.739924][ T8392] program syz.6.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.751638][ T8392] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 474.197166][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 474.197188][ T30] audit: type=1804 audit(1755700230.107:20): pid=8395 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.429" name="/newroot/117/file0" dev="tmpfs" ino=716 res=1 errno=0 [ 474.571179][ T8383] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.428' sets config #8 [ 474.583196][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.430'. [ 474.621420][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.708495][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.798692][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.806005][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.860883][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.868100][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.991121][ T8399] netlink: 14 bytes leftover after parsing attributes in process `syz.6.432'. [ 476.230587][ T8399]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.259546][ T8399]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.004968][ T8399]  (unregistering): Released all slaves [ 477.049840][ T8398] ALSA: mixer_oss: invalid OSS volume '' [ 477.633333][ T8415] dlm: no local IP address has been set [ 477.639468][ T8415] dlm: cannot start dlm midcomms -107 [ 477.770439][ T8077] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.804340][ T8077] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.835511][ T8408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.849187][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 477.858410][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 477.902624][ T8077] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 477.985644][ T8077] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.864069][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.470182][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.734742][ T8433] usb usb1: check_ctrlrecip: process 8433 (syz.6.437) requesting ep 01 but needs 81 [ 479.863712][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.871038][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.900483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.907705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.048264][ T30] audit: type=1804 audit(1755700235.701:21): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.436" name="/newroot/120/file0" dev="tmpfs" ino=734 res=1 errno=0 [ 481.580165][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.592246][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.601008][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.610819][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.620289][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.960636][ T8437] lo speed is unknown, defaulting to 1000 [ 482.301201][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.701282][ T13] bridge_slave_1: left allmulticast mode [ 482.719528][ T13] bridge_slave_1: left promiscuous mode [ 482.730673][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.744404][ T13] bridge_slave_0: left allmulticast mode [ 482.752171][ T13] bridge_slave_0: left promiscuous mode [ 482.770249][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.594525][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.607963][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.618317][ T13] bond0 (unregistering): Released all slaves [ 483.758837][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 483.800893][ T13] hsr_slave_0: left promiscuous mode [ 483.808747][ T13] hsr_slave_1: left promiscuous mode [ 483.815035][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.824300][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.868998][ T5157] Bluetooth: hci0: command tx timeout [ 484.179742][ T8460] netlink: 'syz.6.447': attribute type 1 has an invalid length. [ 484.225147][ T8460] netlink: 224 bytes leftover after parsing attributes in process `syz.6.447'. [ 484.596080][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 485.718233][ T8463] xt_CT: No such helper "snmp" [ 486.102883][ T5157] Bluetooth: hci0: command tx timeout [ 486.383275][ T8473] netlink: 384 bytes leftover after parsing attributes in process `syz.4.441'. [ 486.396427][ T8473] netlink: 'syz.4.441': attribute type 2 has an invalid length. [ 486.473951][ T13] team0 (unregistering): Port device team_slave_1 removed [ 488.096514][ T13] team0 (unregistering): Port device team_slave_0 removed [ 488.308526][ T5157] Bluetooth: hci0: command tx timeout [ 488.975538][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.985758][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.993767][ T8437] bridge_slave_0: entered allmulticast mode [ 489.430266][ T8437] bridge_slave_0: entered promiscuous mode [ 489.453269][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.461477][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.469559][ T8437] bridge_slave_1: entered allmulticast mode [ 490.087815][ T8437] bridge_slave_1: entered promiscuous mode [ 490.473061][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.560180][ T5157] Bluetooth: hci0: command tx timeout [ 490.670740][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.867705][ T8437] team0: Port device team_slave_0 added [ 491.964193][ T8437] team0: Port device team_slave_1 added [ 492.089430][ T5955] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 492.518105][ T5955] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 492.657162][ T5955] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 492.681164][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 492.713718][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 492.734261][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 492.750552][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 492.757596][ T5955] usb 5-1: SerialNumber: syz [ 492.768502][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.773339][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 492.786084][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 492.797608][ T5955] usb 5-1: bad CDC descriptors [ 492.804534][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.813020][ T8509] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 492.821613][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.847609][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.868418][ T5955] usb-storage 5-1:1.0: USB Mass Storage device detected [ 492.883814][ T8509] netlink: 152 bytes leftover after parsing attributes in process `syz.1.449'. [ 492.897131][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.919513][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.931747][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.957714][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.969020][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.972953][ T5955] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 493.032491][ T5955] scsi host1: usb-storage 5-1:1.0 [ 493.270494][ T8509] : renamed from bond0 (while UP) [ 494.435228][ T8523] netlink: 76 bytes leftover after parsing attributes in process `syz.6.450'. [ 495.156846][ T51] Bluetooth: hci4: command tx timeout [ 495.834517][ T9] usb 5-1: USB disconnect, device number 7 [ 495.978694][ T8437] hsr_slave_0: entered promiscuous mode [ 495.993365][ T8437] hsr_slave_1: entered promiscuous mode [ 496.000617][ T8437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.034706][ T8437] Cannot create hsr debugfs directory [ 496.320101][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 497.324915][ T8506] lo speed is unknown, defaulting to 1000 [ 497.380278][ T51] Bluetooth: hci4: command tx timeout [ 497.400669][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 498.406820][ T8547] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 498.435003][ T8547] CIFS: Unable to determine destination address [ 499.550547][ T8552] Bluetooth: MGMT ver 1.23 [ 499.784195][ T51] Bluetooth: hci4: command tx timeout [ 500.392640][ T1093] bridge_slave_1: left allmulticast mode [ 500.398860][ T1093] bridge_slave_1: left promiscuous mode [ 500.405318][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.416912][ T1093] bridge_slave_0: left allmulticast mode [ 500.422624][ T1093] bridge_slave_0: left promiscuous mode [ 500.428783][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.694707][ T8561] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 502.017728][ T51] Bluetooth: hci4: command tx timeout [ 503.905297][ T8573] xt_hashlimit: max too large, truncated to 1048576 [ 505.758062][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 507.314533][ T8598] Invalid source name [ 507.318605][ T8598] UBIFS error (pid: 8598): cannot open "./file0", error -22 [ 507.372023][ T8598] binder: 8587:8598 ioctl 40046210 0 returned -14 [ 507.388195][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.465'. [ 508.656163][ T8602] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 508.882937][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.916488][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.927908][ T1093] bond0 (unregistering): Released all slaves [ 509.145765][ T8598] team0: Port device team_slave_1 removed [ 509.351252][ T8601] orangefs_mount: mount request failed with -4 [ 509.381258][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 510.546192][ T1093] hsr_slave_0: left promiscuous mode [ 510.579695][ T1093] hsr_slave_1: left promiscuous mode [ 510.752370][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.850977][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.918304][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.993118][ T8627] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 514.467597][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 514.537845][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 514.883017][ T8642] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 518.131106][ T8656] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 518.165783][ T8656] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 518.178872][ T8656] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 518.197143][ T8656] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 518.209322][ T8654] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 520.232588][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.258640][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.300724][ T8665] random: crng reseeded on system resumption [ 520.393591][ T8506] bridge_slave_0: entered allmulticast mode [ 520.411281][ T8506] bridge_slave_0: entered promiscuous mode [ 520.422400][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.429978][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.437608][ T8506] bridge_slave_1: entered allmulticast mode [ 520.445024][ T8506] bridge_slave_1: entered promiscuous mode [ 523.423212][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.465784][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.765677][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 523.844242][ T8697] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 523.852415][ T8697] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 523.860280][ T8697] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 523.868119][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 525.287981][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.485'. [ 526.067975][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.092852][ T8703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.842425][ T8506] team0: Port device team_slave_0 added [ 526.908038][ T8506] team0: Port device team_slave_1 added [ 527.193215][ T8437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 527.425364][ T8727] overlayfs: failed to resolve './file1': -2 [ 527.919241][ T8725] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 528.009225][ T8437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 528.137962][ T8437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 528.703039][ T8437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 529.305164][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.348230][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.450968][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.537078][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.546345][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.577531][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.017214][ T8506] hsr_slave_0: entered promiscuous mode [ 531.024000][ T8506] hsr_slave_1: entered promiscuous mode [ 531.031755][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.046963][ T8506] Cannot create hsr debugfs directory [ 531.383534][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.560500][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.978038][ T8769] netlink: 76 bytes leftover after parsing attributes in process `syz.4.494'. [ 534.103554][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.110934][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.838461][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.845743][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.569124][ T8794] siw: device registration error -23 [ 539.901293][ T8437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.915532][ T8792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.943282][ T8792] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 540.045017][ T8792] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 540.152089][ T8792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 540.174158][ T8792] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 540.227458][ T8792] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 541.980161][ T8506] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 542.021962][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.055620][ T8506] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 542.094185][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.134778][ T8506] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 542.189091][ T8506] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 542.236570][ T8826] all: renamed from bridge_slave_0 (while UP) [ 542.350335][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 542.515424][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.568647][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.633968][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.641189][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.678100][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.685396][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.542460][ T8847] siw: device registration error -23 [ 544.584023][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 545.636926][ T8864] syz.4.509: attempt to access beyond end of device [ 545.636926][ T8864] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 545.650750][ T8864] EXT4-fs (nbd4): unable to read superblock [ 545.750825][ T8865] No control pipe specified [ 546.796853][ T5157] Bluetooth: hci4: command 0x0c1a tx timeout [ 548.293420][ T8879] binder: 8867:8879 ioctl c0306201 0 returned -14 [ 548.668689][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 548.678877][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 548.688798][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 548.696676][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 548.705518][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 548.773174][ T8878] lo speed is unknown, defaulting to 1000 [ 550.903011][ T5157] Bluetooth: hci0: command tx timeout [ 551.110299][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.865807][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.894559][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.963843][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.516'. [ 552.066727][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 552.126046][ T13] bridge_slave_1: left allmulticast mode [ 552.675553][ T13] bridge_slave_1: left promiscuous mode [ 552.681459][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.776890][ T13] bridge_slave_0: left allmulticast mode [ 552.807630][ T9] usb 7-1: config 0 has no interfaces? [ 552.821335][ T13] bridge_slave_0: left promiscuous mode [ 552.842790][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.873100][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 552.891821][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.902979][ T9] usb 7-1: Product: syz [ 552.913613][ T9] usb 7-1: Manufacturer: syz [ 552.930433][ T9] usb 7-1: SerialNumber: syz [ 552.961524][ T9] usb 7-1: config 0 descriptor?? [ 553.124431][ T5157] Bluetooth: hci0: command tx timeout [ 553.238602][ T8929] siw: device registration error -23 [ 554.431947][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.459170][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.483876][ T13] bond0 (unregistering): Released all slaves [ 555.358662][ T5157] Bluetooth: hci0: command tx timeout [ 556.030273][ T8931] kthread_run failed with err -4 [ 556.784320][ T8961] binder: 8956:8961 ioctl 4018620d 0 returned -22 [ 556.792765][ T8961] binder: 8956:8961 ioctl c0306201 0 returned -14 [ 557.788823][ T5157] Bluetooth: hci0: command tx timeout [ 557.854377][ T13] hsr_slave_0: left promiscuous mode [ 558.181158][ T13] hsr_slave_1: left promiscuous mode [ 558.189363][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.226810][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.586506][ T30] audit: type=1400 audit(1755700310.393:22): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="w" object="_" requested=w pid=8978 comm="syz.1.526" name="file1" dev="tmpfs" ino=1072 [ 560.653845][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.746825][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.773595][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.783845][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.801604][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.477529][ T13] team0 (unregistering): Port device team_slave_1 removed [ 562.553574][ T8999] siw: device registration error -23 [ 562.680809][ T13] team0 (unregistering): Port device team_slave_0 removed [ 563.047009][ T51] Bluetooth: hci2: command tx timeout [ 563.756057][ T9000] delete_channel: no stack [ 564.064698][ T8992] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 564.074070][ T8992] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 564.085601][ T8992] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 564.095949][ T8992] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 564.108094][ T8992] geneve2: entered allmulticast mode [ 564.137256][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 564.950993][ T8986] lo speed is unknown, defaulting to 1000 [ 564.971973][ T9005] delete_channel: no stack [ 565.139293][ T5952] usb 7-1: USB disconnect, device number 3 [ 565.278313][ T51] Bluetooth: hci2: command tx timeout [ 565.674067][ T9030] hugetlbfs: syz.4.532 (9030): Using mlock ulimits for SHM_HUGETLB is obsolete [ 567.728413][ T5157] Bluetooth: hci2: command tx timeout [ 567.751994][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.761514][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.769320][ T8878] bridge_slave_0: entered allmulticast mode [ 567.842721][ T8878] bridge_slave_0: entered promiscuous mode [ 568.706162][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.719462][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 568.741545][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 568.747858][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.763834][ T9038] ceph: No mds server is up or the cluster is laggy [ 569.297394][ T8878] bridge_slave_1: entered allmulticast mode [ 569.374612][ T8878] bridge_slave_1: entered promiscuous mode [ 569.714354][ T9053] siw: device registration error -23 [ 570.192835][ T51] Bluetooth: hci2: command tx timeout [ 570.224809][ T9052] binder: BINDER_SET_CONTEXT_MGR already set [ 570.237318][ T9052] binder: 9051:9052 ioctl 4018620d 200000000040 returned -16 [ 570.320762][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.084323][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.773682][ T9065] delete_channel: no stack [ 573.440155][ T8878] team0: Port device team_slave_0 added [ 575.195786][ T8878] team0: Port device team_slave_1 added [ 575.919945][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.939152][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.986732][ T8878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.333706][ T9105] netlink: 'syz.1.547': attribute type 10 has an invalid length. [ 576.342682][ T9105] netlink: 156 bytes leftover after parsing attributes in process `syz.1.547'. [ 576.801517][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.827831][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.016947][ T8878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.385974][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 578.154260][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.659446][ T8878] hsr_slave_0: entered promiscuous mode [ 578.681080][ T9127] Cannot find del_set index 0 as target [ 578.695965][ T8878] hsr_slave_1: entered promiscuous mode [ 578.715344][ T8878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.758033][ T8878] Cannot create hsr debugfs directory [ 578.847869][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'. [ 580.582749][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.602527][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.725172][ T8986] bridge_slave_0: entered allmulticast mode [ 580.733173][ T8986] bridge_slave_0: entered promiscuous mode [ 580.757557][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.764798][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.793115][ T8986] bridge_slave_1: entered allmulticast mode [ 580.874512][ T9146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.553'. [ 581.151782][ T978] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 581.462316][ T8986] bridge_slave_1: entered promiscuous mode [ 581.758789][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 581.771781][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 581.796425][ T978] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 581.821000][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.833217][ T978] usb 5-1: Product: syz [ 581.838334][ T978] usb 5-1: Manufacturer: syz [ 581.842988][ T978] usb 5-1: SerialNumber: syz [ 581.877944][ T978] usb 5-1: config 0 descriptor?? [ 582.040820][ T9156] netlink: 16 bytes leftover after parsing attributes in process `syz.6.554'. [ 583.074680][ T5952] Process accounting resumed [ 583.111170][ T9157] Process accounting resumed [ 584.886096][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.907868][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.010467][ T978] ath6kl: Failed to submit usb control message: -71 [ 585.024071][ T978] ath6kl: unable to send the bmi data to the device: -71 [ 585.031839][ T978] ath6kl: Unable to send get target info: -71 [ 585.049801][ T978] ath6kl: Failed to init ath6kl core: -71 [ 585.078257][ T978] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 585.142505][ T978] usb 5-1: USB disconnect, device number 8 [ 586.478536][ T9173] delete_channel: no stack [ 586.654045][ T9185] random: crng reseeded on system resumption [ 586.820495][ T8986] team0: Port device team_slave_0 added [ 586.841241][ T36] bridge_slave_1: left allmulticast mode [ 586.860456][ T36] bridge_slave_1: left promiscuous mode [ 586.903053][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.222558][ T9193] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 587.767478][ T36] bridge_slave_0: left allmulticast mode [ 587.773287][ T36] bridge_slave_0: left promiscuous mode [ 587.789777][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.815737][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.829656][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.840509][ T36] bond0 (unregistering): Released all slaves [ 589.865347][ T8986] team0: Port device team_slave_1 added [ 590.752115][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.786377][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.837090][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.256037][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.565'. [ 591.883655][ T36] hsr_slave_0: left promiscuous mode [ 591.965626][ T36] hsr_slave_1: left promiscuous mode [ 591.977525][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.002431][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.215638][ T36] team0 (unregistering): Port device team_slave_1 removed [ 597.402752][ T36] team0 (unregistering): Port device team_slave_0 removed [ 597.448287][ T9247] delete_channel: no stack [ 597.958723][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.965904][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.994585][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.510278][ T9260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.034564][ T8986] hsr_slave_0: entered promiscuous mode [ 600.086171][ T8986] hsr_slave_1: entered promiscuous mode [ 600.092716][ T8986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.265989][ T8986] Cannot create hsr debugfs directory [ 602.760156][ T9288] siw: device registration error -23 [ 603.060498][ T9294] 9pnet_virtio: no channels available for device 127.0.0.1 [ 607.030881][ T8878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 607.254605][ T9304] delete_channel: no stack [ 610.983805][ T9320] syz.6.582 (9320): drop_caches: 2 [ 613.090075][ T9349] siw: device registration error -23 [ 613.828407][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.839776][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.854642][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.863750][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.874216][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.706761][ T9355] lo speed is unknown, defaulting to 1000 [ 614.889519][ T9366] usb usb1: check_ctrlrecip: process 9366 (syz.1.589) requesting ep 01 but needs 81 [ 614.899987][ T9366] usb usb1: usbfs: process 9366 (syz.1.589) did not claim interface 0 before use [ 616.231929][ T5157] Bluetooth: hci0: command tx timeout [ 616.483725][ T9378] netlink: 304 bytes leftover after parsing attributes in process `syz.4.591'. [ 617.597379][ T9384] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 618.054071][ T8986] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 618.466653][ T5157] Bluetooth: hci0: command tx timeout [ 618.479634][ T8986] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 618.576434][ T8986] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 619.303752][ T9419] delete_channel: no stack [ 619.610065][ T36] bridge_slave_1: left allmulticast mode [ 619.658333][ T36] bridge_slave_1: left promiscuous mode [ 619.675826][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.768914][ T36] bridge_slave_0: left allmulticast mode [ 619.778683][ T36] bridge_slave_0: left promiscuous mode [ 619.892922][ T9434] Bluetooth: MGMT ver 1.23 [ 619.934614][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.561521][ T9434] hub 1-0:1.0: USB hub found [ 620.571091][ T9434] hub 1-0:1.0: 1 port detected [ 620.680646][ T5157] Bluetooth: hci0: command tx timeout [ 622.903993][ T5157] Bluetooth: hci0: command tx timeout [ 623.246623][ T9440] xt_hashlimit: size too large, truncated to 1048576 [ 624.675610][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.802228][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 624.866401][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 624.933373][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 624.956918][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 625.196591][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.587559][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.801841][ T36] bond0 (unregistering): Released all slaves [ 626.079480][ T9355] chnl_net:caif_netlink_parms(): no params data found [ 626.142784][ T36] hsr_slave_0: left promiscuous mode [ 626.209311][ T36] hsr_slave_1: left promiscuous mode [ 626.216509][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.250334][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.304669][ T5157] Bluetooth: hci2: command tx timeout [ 628.054343][ T36] team0 (unregistering): Port device team_slave_1 removed [ 628.088473][ T36] team0 (unregistering): Port device team_slave_0 removed [ 628.573149][ T9450] lo speed is unknown, defaulting to 1000 [ 628.584487][ T9468] pim6reg: entered allmulticast mode [ 628.596751][ T9468] pim6reg: left allmulticast mode [ 628.847282][ T9482] 9pnet_fd: Insufficient options for proto=fd [ 628.898831][ T9482] openvswitch: netlink: IP tunnel dst address not specified [ 629.374526][ T9478] syz.6.603: attempt to access beyond end of device [ 629.374526][ T9478] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 629.389941][ T9478] syz.6.603: attempt to access beyond end of device [ 629.389941][ T9478] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 629.403670][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 629.417174][ T9478] syz.6.603: attempt to access beyond end of device [ 629.417174][ T9478] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 629.432334][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 629.450816][ T9478] syz.6.603: attempt to access beyond end of device [ 629.450816][ T9478] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 629.466653][ T9478] syz.6.603: attempt to access beyond end of device [ 629.466653][ T9478] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 629.479946][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 629.489643][ T5157] Bluetooth: hci2: command tx timeout [ 629.497720][ T9478] syz.6.603: attempt to access beyond end of device [ 629.497720][ T9478] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 629.512826][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 629.529287][ T9478] syz.6.603: attempt to access beyond end of device [ 629.529287][ T9478] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 629.577171][ T9478] syz.6.603: attempt to access beyond end of device [ 629.577171][ T9478] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 629.619091][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 629.644503][ T9478] syz.6.603: attempt to access beyond end of device [ 629.644503][ T9478] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 629.696032][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 629.733158][ T9478] syz.6.603: attempt to access beyond end of device [ 629.733158][ T9478] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 629.772811][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 629.809315][ T9478] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 629.820272][ T9478] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 630.495831][ T9484] delete_channel: no stack [ 630.886310][ T9495] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.607'. [ 631.680183][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.687410][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.712084][ T5157] Bluetooth: hci2: command tx timeout [ 631.767430][ T9355] bridge_slave_0: entered allmulticast mode [ 631.775444][ T9355] bridge_slave_0: entered promiscuous mode [ 631.804385][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.811865][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.819313][ T9355] bridge_slave_1: entered allmulticast mode [ 631.828625][ T9355] bridge_slave_1: entered promiscuous mode [ 633.389185][ T9355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.475041][ T9355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.598327][ T9511] siw: device registration error -23 [ 633.939269][ T5157] Bluetooth: hci2: command tx timeout [ 637.415679][ T9450] chnl_net:caif_netlink_parms(): no params data found [ 637.519756][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.612'. [ 637.529037][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.612'. [ 638.769570][ T9355] team0: Port device team_slave_0 added [ 638.801341][ T9355] team0: Port device team_slave_1 added [ 640.200079][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.207199][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.243051][ T9355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.298626][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.305799][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.341050][ T9355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.948571][ T9552] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 642.187434][ T9540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.785502][ T9541] delete_channel: no stack [ 643.267388][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.863131][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.881529][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.937916][ T9450] bridge_slave_0: entered allmulticast mode [ 644.522373][ T9450] bridge_slave_0: entered promiscuous mode [ 644.735260][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 644.764894][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.775626][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.847196][ T9450] bridge_slave_1: entered allmulticast mode [ 645.478907][ T9450] bridge_slave_1: entered promiscuous mode [ 645.683341][ T9355] hsr_slave_0: entered promiscuous mode [ 645.690214][ T9355] hsr_slave_1: entered promiscuous mode [ 645.710584][ T9355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.728101][ T9355] Cannot create hsr debugfs directory [ 645.922709][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.937879][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.230919][ T9583] siw: device registration error -23 [ 646.352049][ T9585] netlink: 240 bytes leftover after parsing attributes in process `syz.1.624'. [ 646.793888][ T9582] tipc: Started in network mode [ 646.799129][ T9582] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 646.806686][ T9582] tipc: Enabled bearer , priority 10 [ 646.833439][ T9586] netlink: 116 bytes leftover after parsing attributes in process `syz.6.625'. [ 646.863926][ T9450] team0: Port device team_slave_0 added [ 646.944646][ T9450] team0: Port device team_slave_1 added [ 648.054545][ T24] tipc: Node number set to 10005162 [ 648.988383][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.055022][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.069533][ T9603] netlink: 'syz.6.628': attribute type 10 has an invalid length. [ 649.205760][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.979162][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.011100][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.049937][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.230060][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 654.328284][ T9627] netlink: 'syz.4.632': attribute type 2 has an invalid length. [ 654.336354][ T9627] netlink: 'syz.4.632': attribute type 2 has an invalid length. [ 654.344294][ T9627] netlink: 'syz.4.632': attribute type 2 has an invalid length. [ 654.352110][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 655.311502][ T5955] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 655.592205][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 655.617608][ T5955] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 655.630196][ T5955] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 655.672323][ T5955] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 655.701801][ T5955] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 655.737117][ T5955] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 655.785039][ T5955] usb 7-1: config 0 has no interface number 0 [ 655.808311][ T5955] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 655.853208][ T5955] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 655.927196][ T5955] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 655.963207][ T5955] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.025879][ T5955] usb 7-1: config 0 interface 125 has no altsetting 0 [ 656.055823][ T5955] usb 7-1: config 0 interface 125 has no altsetting 2 [ 656.102577][ T5955] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 656.121810][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.150264][ T5955] usb 7-1: Product: syz [ 656.214693][ T9450] hsr_slave_0: entered promiscuous mode [ 656.221576][ T9450] hsr_slave_1: entered promiscuous mode [ 656.226555][ T5955] usb 7-1: Manufacturer: syz [ 656.244675][ T9450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.253184][ T9450] Cannot create hsr debugfs directory [ 656.259027][ T5955] usb 7-1: SerialNumber: syz [ 656.303467][ T5955] usb 7-1: config 0 descriptor?? [ 656.363533][ T5955] usb 7-1: selecting invalid altsetting 2 [ 658.068501][ C1] usb 7-1: async_complete: urb error -71 [ 658.074521][ C1] usb 7-1: async_complete: urb error -71 [ 658.080346][ C1] usb 7-1: async_complete: urb error -71 [ 658.086259][ C1] usb 7-1: async_complete: urb error -71 [ 658.319406][ T5955] get_1284_register: usb error -71 [ 658.324864][ T5955] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 658.914599][ T9645] bio_check_eod: 2 callbacks suppressed [ 658.914623][ T9645] syz.1.636: attempt to access beyond end of device [ 658.914623][ T9645] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 658.935809][ T9645] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 659.431409][ T5955] usb 7-1: USB disconnect, device number 4 [ 661.486867][ T36] bridge_slave_1: left allmulticast mode [ 661.580401][ T9646] delete_channel: no stack [ 661.602023][ T36] bridge_slave_1: left promiscuous mode [ 661.667266][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.686948][ T36] bridge_slave_0: left allmulticast mode [ 661.692669][ T36] bridge_slave_0: left promiscuous mode [ 661.725763][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.622834][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.758688][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.770703][ T36] bond0 (unregistering): Released all slaves [ 665.849708][ T36] hsr_slave_0: left promiscuous mode [ 665.873610][ T36] hsr_slave_1: left promiscuous mode [ 665.886197][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.913399][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.545393][ T36] team0 (unregistering): Port device team_slave_1 removed [ 668.004240][ T36] team0 (unregistering): Port device team_slave_0 removed [ 671.352347][ T9355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 671.392965][ T9355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 672.502886][ T9355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 672.739265][ T9731] overlayfs: failed to resolve './file1': -2 [ 673.323847][ T9735] siw: device registration error -23 [ 673.593183][ T9355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 675.500218][ T9450] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 675.530906][ T9450] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 675.546238][ T9450] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 675.561326][ T9450] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 675.753736][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.779363][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.844486][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.851850][ T7389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.671244][ T9765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 676.680328][ T9765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 677.846613][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.853948][ T7469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.526968][ T9450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.730974][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.661'. [ 680.958982][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 680.974331][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 680.983643][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 680.994685][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 681.002713][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.244642][ T9798] overlayfs: failed to resolve './file1': -2 [ 682.446445][ T9802] netlink: 76 bytes leftover after parsing attributes in process `syz.6.666'. [ 683.287773][ T51] Bluetooth: hci0: command tx timeout [ 683.762994][ T9788] lo speed is unknown, defaulting to 1000 [ 685.535158][ T51] Bluetooth: hci0: command tx timeout [ 685.830664][ T9826] binder: 9824:9826 ioctl 4018620d 0 returned -22 [ 685.839253][ T9826] binder: 9824:9826 ioctl c0306201 0 returned -14 [ 687.876975][ T51] Bluetooth: hci0: command tx timeout [ 688.564390][ T36] bridge_slave_1: left allmulticast mode [ 688.593805][ T36] bridge_slave_1: left promiscuous mode [ 688.624000][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.790810][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.673'. [ 689.274004][ T36] bridge_slave_0: left allmulticast mode [ 689.299037][ T36] bridge_slave_0: left promiscuous mode [ 689.328524][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.991600][ T5836] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 690.033456][ T51] Bluetooth: hci0: command tx timeout [ 690.273181][ T9841] delete_channel: no stack [ 690.301857][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 690.316226][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.316912][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.325979][ T5836] usb 7-1: config 162 has an invalid interface number: 245 but max is 0 [ 690.341551][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.351106][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.358228][ T5836] usb 7-1: config 162 has no interface number 0 [ 690.358284][ T5836] usb 7-1: config 162 interface 245 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 690.379134][ T5836] usb 7-1: config 162 interface 245 has no altsetting 0 [ 690.379154][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.389967][ T5836] usb 7-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 690.405683][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.409526][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.418658][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.421540][ T5836] usb 7-1: Product: syz [ 690.440071][ T5836] usb 7-1: Manufacturer: syz [ 690.444763][ T5836] usb 7-1: SerialNumber: syz [ 690.453044][ T36] bond0 (unregistering): Released all slaves [ 690.600935][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.673'. [ 690.634934][ T36] hsr_slave_0: left promiscuous mode [ 690.667088][ T36] hsr_slave_1: left promiscuous mode [ 690.673434][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.728561][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.746399][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.674'. [ 690.801211][ T5836] usb 7-1: USB disconnect, device number 5 [ 691.119621][ T9852] overlayfs: failed to resolve './file1': -2 [ 692.803876][ T5157] Bluetooth: hci2: command tx timeout [ 697.100611][ T5157] Bluetooth: hci2: command tx timeout [ 697.637835][ T9870] netlink: 76 bytes leftover after parsing attributes in process `syz.6.679'. [ 698.830667][ T978] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 698.877330][ T36] team0 (unregistering): Port device team_slave_1 removed [ 698.934927][ T36] team0 (unregistering): Port device team_slave_0 removed [ 699.033997][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 699.072845][ T978] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 699.102280][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.117900][ T978] usb 5-1: config 0 descriptor?? [ 699.144393][ T978] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 699.268577][ T5157] Bluetooth: hci2: command tx timeout [ 699.420347][ T9844] lo speed is unknown, defaulting to 1000 [ 699.755333][ T9788] chnl_net:caif_netlink_parms(): no params data found [ 700.444076][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 700.704442][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 700.731789][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.758004][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.833407][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 700.890250][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.051540][ T5894] usb 2-1: config 0 descriptor?? [ 701.491560][ T5157] Bluetooth: hci2: command tx timeout [ 703.374489][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 703.380918][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 703.920708][ T5894] usb 2-1: USB disconnect, device number 5 [ 704.245310][ T30] audit: type=1326 audit(1755700445.313:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9897 comm="syz.1.684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x0 [ 705.177192][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.188454][ T9902] delete_channel: no stack [ 705.211671][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.219951][ T9788] bridge_slave_0: entered allmulticast mode [ 705.236285][ T5894] usb 5-1: USB disconnect, device number 9 [ 705.278015][ T9788] bridge_slave_0: entered promiscuous mode [ 705.302183][ T9844] chnl_net:caif_netlink_parms(): no params data found [ 705.332344][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.355309][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.521512][ T9788] bridge_slave_1: entered allmulticast mode [ 705.529808][ T9788] bridge_slave_1: entered promiscuous mode [ 708.138702][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.687'. [ 708.216973][ T9929] CIFS mount error: No usable UNC path provided in device string! [ 708.216973][ T9929] [ 708.228043][ T9929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 708.695785][ T9788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.301588][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 709.552188][ T9788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.779275][ T9943] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 711.224993][ T9949] netlink: 292 bytes leftover after parsing attributes in process `syz.6.693'. [ 713.208309][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.216443][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.225937][ T9844] bridge_slave_0: entered allmulticast mode [ 713.244760][ T9844] bridge_slave_0: entered promiscuous mode [ 715.151769][ T9788] team0: Port device team_slave_0 added [ 715.397918][ T978] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 715.889618][ T978] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 715.897324][ T978] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 715.918975][ T978] hid-generic 0000:0004:0034.0001: hidraw0: HID v0.0e Device [syz0] on syz1 [ 716.252121][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.259877][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.281560][ T9844] bridge_slave_1: entered allmulticast mode [ 716.292791][ T9844] bridge_slave_1: entered promiscuous mode [ 716.314267][ T9788] team0: Port device team_slave_1 added [ 716.541529][ T9952] fido_id[9952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 716.774766][ T9963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.743256][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 717.749427][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 718.039110][ T9960] ceph: No mds server is up or the cluster is laggy [ 718.039516][ T24] libceph: connect (1)[c::]:6789 error -101 [ 718.110033][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 719.839155][ T9977] geneve2: entered allmulticast mode [ 719.863360][ T9972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.699'. [ 719.874210][ T9972] netlink: 3 bytes leftover after parsing attributes in process `syz.1.699'. [ 720.002097][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.021868][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.135807][ T9788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.289126][ T9986] rtc_cmos 00:00: Alarms can be up to one day in the future [ 721.742644][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.847519][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.322869][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.346402][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.431884][ T9788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.122170][ T9844] team0: Port device team_slave_0 added [ 723.164317][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.6.707'. [ 723.183228][ T9998] tipc: Started in network mode [ 723.189735][ T9998] tipc: Node identity 7, cluster identity 5 [ 723.213110][ T9998] tipc: Node number set to 7 [ 723.226528][ T9844] team0: Port device team_slave_1 added [ 723.427931][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 724.214764][T10002] netlink: 36 bytes leftover after parsing attributes in process `syz.6.707'. [ 724.264678][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 724.280384][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 725.004403][T10018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 725.010888][T10018] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 725.529779][ T9788] hsr_slave_0: entered promiscuous mode [ 725.710191][ T9788] hsr_slave_1: entered promiscuous mode [ 726.034082][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 726.043434][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 726.299483][ T9788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.888328][ T9788] Cannot create hsr debugfs directory [ 726.914079][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.921298][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.949583][ T9844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.246985][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.297334][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.376939][ T9844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.889410][T10028] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 727.915545][T10028] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 727.924395][T10028] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.049294][T10041] overlay: Unknown parameter '/' [ 728.700197][T10028] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.734268][T10028] geneve2: entered allmulticast mode [ 730.751155][T10062] binder: 10054:10062 ioctl 4018620d 0 returned -22 [ 730.759587][T10062] binder: 10054:10062 ioctl c0306201 0 returned -14 [ 731.279616][ T9844] hsr_slave_0: entered promiscuous mode [ 731.290534][ T9844] hsr_slave_1: entered promiscuous mode [ 731.297548][ T9844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 731.305247][ T9844] Cannot create hsr debugfs directory [ 731.685069][T10071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.718'. [ 731.720824][ T1161] bridge_slave_1: left allmulticast mode [ 731.726569][ T1161] bridge_slave_1: left promiscuous mode [ 731.914623][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.998320][T10073] Unsupported ieee802154 address type: 0 [ 732.641958][T10065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.704011][ T1161] bridge_slave_0: left allmulticast mode [ 732.722506][ T1161] bridge_slave_0: left promiscuous mode [ 732.729002][T10060] "syz.4.717" (10060) uses obsolete ecb(arc4) skcipher [ 732.746091][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.338468][ T30] audit: type=1326 audit(1755700472.546:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10077 comm="syz.6.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6839d8ebe9 code=0x7ffc0000 [ 733.424082][ T30] audit: type=1326 audit(1755700472.546:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10077 comm="syz.6.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6839d8ebe9 code=0x7ffc0000 [ 734.701489][ T121] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 734.895777][ T121] usb 5-1: Using ep0 maxpacket: 8 [ 734.990712][ T121] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 735.009667][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.226040][ T121] usb 5-1: config 0 descriptor?? [ 735.535534][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.913349][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.011210][ T1161] bond0 (unregistering): Released all slaves [ 736.173014][ T121] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 736.183303][ T121] asix 5-1:0.0: probe with driver asix failed with error -32 [ 736.714192][T10108] vxfs: WRONG superblock magic 00000000 at 1 [ 736.722492][T10108] vxfs: WRONG superblock magic 00000000 at 8 [ 736.728653][T10108] vxfs: can't find superblock. [ 736.938971][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 736.951032][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 737.141005][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 737.350151][ T44] libceph: connect (1)[c::]:6789 error -101 [ 737.350494][ T5952] usb 5-1: USB disconnect, device number 10 [ 737.358413][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 737.721382][ T5894] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 737.772426][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.961827][ T121] libceph: connect (1)[c::]:6789 error -101 [ 738.180900][ T121] libceph: mon0 (1)[c::]:6789 connect error [ 738.281066][ T5894] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 738.427111][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.439604][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.447956][ T5894] usb 2-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 738.464373][ T5894] usb 2-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 738.483866][ T5894] usb 2-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ᄋ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 738.756008][ T1161] hsr_slave_0: left promiscuous mode [ 738.808217][ T1161] hsr_slave_1: left promiscuous mode [ 738.841828][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.895113][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.334332][T10158] ubi31: attaching mtd0 [ 739.365868][T10158] ubi31: scanning is finished [ 739.370921][T10158] ubi31: empty MTD device detected [ 739.727022][ C1] hrtimer: interrupt took 30240 ns [ 739.782087][T10158] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 739.789826][T10158] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 739.797340][T10158] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 739.804558][T10158] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 739.812107][T10158] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 739.821011][T10158] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 739.830018][T10158] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 373440006 [ 739.840183][T10158] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 739.861067][T10160] ubi31: background thread "ubi_bgt31d" started, PID 10160 [ 739.872423][T10105] ceph: No mds server is up or the cluster is laggy [ 740.102292][ T5894] usb 2-1: USB disconnect, device number 6 [ 740.389122][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 740.458885][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 740.960917][T10164] netlink: 'syz.1.726': attribute type 10 has an invalid length. [ 741.446887][T10166] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 741.460670][T10166] qnx6: wrong signature (magic) in superblock #1. [ 741.469439][T10166] qnx6: unable to read the first superblock [ 741.868324][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.875918][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.932867][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.940168][T10164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.949307][T10164] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.956639][T10164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.239885][T10164] : (slave bridge0): Enslaving as an active interface with an up link [ 742.261257][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.274180][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.287290][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.349769][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 742.631806][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 742.999047][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 743.012647][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 743.023412][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 743.041404][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 743.053385][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.133301][T10170] lo speed is unknown, defaulting to 1000 [ 745.277841][ T5157] Bluetooth: hci4: command tx timeout [ 746.382616][T10200] delete_channel: no stack [ 746.847732][T10205] program syz.1.732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 747.508963][ T5157] Bluetooth: hci4: command tx timeout [ 749.721632][ T5157] Bluetooth: hci4: command tx timeout [ 751.615134][T10225] /dev/nullb0: Can't open blockdev [ 751.945053][ T5157] Bluetooth: hci4: command tx timeout [ 752.626884][T10239] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 752.639791][T10239] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 753.764056][T10238] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 753.882545][T10235] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 756.725999][T10170] chnl_net:caif_netlink_parms(): no params data found [ 757.726711][ T7469] bridge_slave_1: left allmulticast mode [ 757.734910][ T7469] bridge_slave_1: left promiscuous mode [ 757.742042][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.751004][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.764403][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.765500][ T7469] bridge_slave_0: left allmulticast mode [ 757.777560][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.788162][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.798830][ T7469] bridge_slave_0: left promiscuous mode [ 757.806709][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.844200][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.811861][ T7469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.985253][ T51] Bluetooth: hci0: command tx timeout [ 760.135829][ T7469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.233087][ T7469] bond0 (unregistering): Released all slaves [ 760.887030][T10299] ubi: mtd0 is already attached to ubi31 [ 762.207434][ T51] Bluetooth: hci0: command tx timeout [ 762.337417][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 762.445243][ T7469] hsr_slave_0: left promiscuous mode [ 762.488668][T10316] 9pnet_fd: Insufficient options for proto=fd [ 762.784532][ T7469] hsr_slave_1: left promiscuous mode [ 762.836940][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.872391][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.270650][ T7469] team0 (unregistering): Port device team_slave_1 removed [ 763.345454][ T7469] team0 (unregistering): Port device team_slave_0 removed [ 763.923405][T10332] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 764.433495][ T51] Bluetooth: hci0: command tx timeout [ 764.539359][T10307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.546899][T10307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.592316][T10307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.607047][T10307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.739455][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.772235][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.779572][T10170] bridge_slave_0: entered allmulticast mode [ 764.819441][T10170] bridge_slave_0: entered promiscuous mode [ 764.848839][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.856058][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.902700][T10170] bridge_slave_1: entered allmulticast mode [ 764.925146][T10170] bridge_slave_1: entered promiscuous mode [ 764.944154][T10263] lo speed is unknown, defaulting to 1000 [ 767.244090][T10356] siw: device registration error -23 [ 767.526868][ T51] Bluetooth: hci0: command tx timeout [ 767.909468][T10354] tipc: Enabled bearer , priority 10 [ 767.980747][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.190440][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.440937][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 771.860653][T10170] team0: Port device team_slave_0 added [ 771.876563][T10170] team0: Port device team_slave_1 added [ 771.972746][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.983791][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.019906][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.054086][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.061721][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.089798][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.113553][ T7469] bridge_slave_1: left allmulticast mode [ 772.119510][ T7469] bridge_slave_1: left promiscuous mode [ 772.125378][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.150570][ T7469] bridge_slave_0: left allmulticast mode [ 772.156398][ T7469] bridge_slave_0: left promiscuous mode [ 772.164673][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.331231][ T7469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.348924][ T7469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.363812][ T7469] bond0 (unregistering): Released all slaves [ 772.576983][T10170] hsr_slave_0: entered promiscuous mode [ 772.583926][T10170] hsr_slave_1: entered promiscuous mode [ 772.591047][T10170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.599798][T10170] Cannot create hsr debugfs directory [ 772.635093][ T7469] hsr_slave_0: left promiscuous mode [ 772.663616][ T7469] hsr_slave_1: left promiscuous mode [ 772.686044][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.702495][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.915503][ T7469] team0 (unregistering): Port device team_slave_1 removed [ 772.956755][ T7469] team0 (unregistering): Port device team_slave_0 removed [ 773.198079][T10263] chnl_net:caif_netlink_parms(): no params data found [ 773.458923][T10263] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.471358][T10263] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.478907][T10263] bridge_slave_0: entered allmulticast mode [ 773.487934][T10263] bridge_slave_0: entered promiscuous mode [ 773.511056][T10263] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.518547][T10263] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.525790][T10263] bridge_slave_1: entered allmulticast mode [ 773.533514][T10263] bridge_slave_1: entered promiscuous mode [ 773.603666][T10263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.626911][T10263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.679097][T10263] team0: Port device team_slave_0 added [ 773.711613][T10263] team0: Port device team_slave_1 added [ 773.803595][T10170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 773.819655][T10263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.831734][T10263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.860854][T10263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.872721][T10170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 773.889152][T10263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.897312][T10263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.925654][T10263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.937434][T10170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 773.963923][T10170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 774.056615][T10263] hsr_slave_0: entered promiscuous mode [ 774.068848][T10263] hsr_slave_1: entered promiscuous mode [ 774.079580][T10263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.087906][T10263] Cannot create hsr debugfs directory [ 774.345225][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.401531][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.429955][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.437221][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.490142][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.497354][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.615223][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 774.619472][T10263] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 774.644544][T10263] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 774.674396][T10263] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 774.696415][T10263] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 774.893765][T10263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.946955][T10263] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.985956][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.993291][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.030283][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.037552][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.169057][T10170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.583880][T10263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.841537][T10170] veth0_vlan: entered promiscuous mode [ 775.874483][T10170] veth1_vlan: entered promiscuous mode [ 775.926093][T10170] veth0_macvtap: entered promiscuous mode [ 775.938033][T10170] veth1_macvtap: entered promiscuous mode [ 775.972297][T10170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.010394][T10170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.043843][T10170] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.060603][T10170] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.069390][T10170] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.088704][T10170] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.207449][T10263] veth0_vlan: entered promiscuous mode [ 776.266975][T10263] veth1_vlan: entered promiscuous mode [ 776.341097][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.364009][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.430413][T10263] veth0_macvtap: entered promiscuous mode [ 776.442728][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.461127][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.474659][T10263] veth1_macvtap: entered promiscuous mode [ 776.514036][T10263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.534163][T10263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.559227][T10263] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.575764][T10263] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.586482][T10263] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.595345][T10263] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.646156][T10507] netlink: 'syz.7.210': attribute type 10 has an invalid length. [ 778.654367][T10507] netlink: 40 bytes leftover after parsing attributes in process `syz.7.210'. [ 779.909865][T10507] batman_adv: batadv0: Adding interface: virt_wifi0 [ 779.916587][T10507] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.946826][T10507] batman_adv: batadv0: Interface activated: virt_wifi0 [ 780.280438][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.298408][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.635140][ T7389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.643066][ T7389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.908300][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'. [ 791.197756][T10567] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 792.788913][ T121] IPVS: starting estimator thread 0... [ 792.906491][T10572] IPVS: using max 32 ests per chain, 76800 per kthread [ 794.939414][T10576] delete_channel: no stack [ 795.487921][T10604] ubi: mtd0 is already attached to ubi31 [ 796.113531][ T30] audit: type=1326 audit(1755700531.231:26): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.251465][ T30] audit: type=1326 audit(1755700531.240:27): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.332471][ T30] audit: type=1326 audit(1755700531.306:28): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.356461][ T30] audit: type=1326 audit(1755700531.315:29): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.394118][ T30] audit: type=1326 audit(1755700531.315:30): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.503755][ T30] audit: type=1326 audit(1755700531.315:31): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.526726][ T30] audit: type=1326 audit(1755700531.315:32): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.948373][ T30] audit: type=1326 audit(1755700531.315:33): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 796.958419][ T5984] Bluetooth: hci2: Frame reassembly failed (-84) [ 797.096186][ T30] audit: type=1326 audit(1755700531.315:34): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 797.119363][ T30] audit: type=1326 audit(1755700531.315:35): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=10591 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b818ebe9 code=0x7ffc0000 [ 797.145909][T10601] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 799.129968][ T5157] Bluetooth: hci2: command 0x1003 tx timeout [ 799.131285][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 803.668773][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 803.677980][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 804.007218][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.781'. [ 808.168405][T10681] serio: Serial port ptm0 [ 813.488035][T10702] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 815.142456][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 815.579078][ T9357] Bluetooth: hci0: command 0x0405 tx timeout [ 815.826176][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 815.856528][ T5157] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 818.391159][T10727] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 818.411637][T10727] cramfs: wrong magic [ 819.576478][T10730] delete_channel: no stack [ 821.022080][T10749] tty tty34: ldisc open failed (-12), clearing slot 33 [ 821.385355][T10745] delete_channel: no stack [ 821.808185][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 821.818170][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 821.827335][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 821.836888][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 821.844896][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 823.449358][T10771] No control pipe specified [ 823.932318][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.039702][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.418258][ T5157] Bluetooth: hci2: command tx timeout [ 826.225997][T10758] lo speed is unknown, defaulting to 1000 [ 826.407315][ T5952] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 826.544407][T10773] syz.1.806 (10773): drop_caches: 2 [ 826.602597][ T5157] Bluetooth: hci2: command tx timeout [ 826.630399][ T5952] usb 9-1: Using ep0 maxpacket: 8 [ 826.730240][ T5952] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 826.782598][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.806974][ T5952] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 826.806991][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.300231][ T5952] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.525285][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.560046][ T5952] usb 9-1: config 0 descriptor?? [ 827.602317][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.876914][T10808] netlink: 96 bytes leftover after parsing attributes in process `syz.1.813'. [ 828.412314][T10805] x_tables: duplicate underflow at hook 2 [ 828.477260][ T5952] corsair 0003:1B1C:1B09.0002: unbalanced delimiter at end of report description [ 828.498196][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.524835][ T5952] corsair 0003:1B1C:1B09.0002: parse failed [ 828.542468][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 828.553060][ T5952] corsair 0003:1B1C:1B09.0002: probe with driver corsair failed with error -22 [ 828.707147][T10810] delete_channel: no stack [ 828.827494][ T5157] Bluetooth: hci2: command tx timeout [ 831.051449][ T5157] Bluetooth: hci2: command tx timeout [ 834.287719][ T121] usb 9-1: USB disconnect, device number 2 [ 835.094526][T10758] chnl_net:caif_netlink_parms(): no params data found [ 840.369746][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.265861][ T13] bridge_slave_1: left allmulticast mode [ 841.303076][ T13] bridge_slave_1: left promiscuous mode [ 841.318718][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.370117][ T13] bridge_slave_0: left allmulticast mode [ 841.425259][ T13] bridge_slave_0: left promiscuous mode [ 841.431138][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.666015][T10924] netlink: 300 bytes leftover after parsing attributes in process `syz.4.833'. [ 843.936130][T10924] ntfs3(nullb0): Primary boot signature is not NTFS. [ 843.990803][T10924] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 844.305755][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.321846][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.329675][T10758] bridge_slave_0: entered allmulticast mode [ 844.340690][T10758] bridge_slave_0: entered promiscuous mode [ 844.384161][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.8.832'. [ 844.521372][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.569974][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.577328][T10758] bridge_slave_1: entered allmulticast mode [ 844.630750][T10758] bridge_slave_1: entered promiscuous mode [ 844.650069][ T13] : left promiscuous mode [ 845.412813][ T13] tipc: Left network mode [ 845.806007][T10945] netlink: 780 bytes leftover after parsing attributes in process `syz.7.836'. [ 846.961979][T10939] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 846.970138][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.835'. [ 847.660909][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.693274][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.082208][T10939] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 850.038649][T10758] team0: Port device team_slave_0 added [ 850.418915][ T13] [ 850.421310][ T13] ====================================================== [ 850.428336][ T13] WARNING: possible circular locking dependency detected [ 850.435390][ T13] 6.16.0-syzkaller #0 Not tainted [ 850.440421][ T13] ------------------------------------------------------ [ 850.447443][ T13] kworker/u8:1/13 is trying to acquire lock: [ 850.453440][ T13] ffff8880574b4e00 (team->team_lock_key#9){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 850.463079][ T13] [ 850.463079][ T13] but task is already holding lock: [ 850.470453][ T13] ffff8880795c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 850.480840][ T13] [ 850.480840][ T13] which lock already depends on the new lock. [ 850.480840][ T13] [ 850.491273][ T13] [ 850.491273][ T13] the existing dependency chain (in reverse order) is: [ 850.500320][ T13] [ 850.500320][ T13] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 850.508103][ T13] lock_acquire+0x120/0x360 [ 850.513170][ T13] __mutex_lock+0x182/0xe80 [ 850.518221][ T13] ieee80211_open+0xed/0x1f0 [ 850.523375][ T13] __dev_open+0x470/0x880 [ 850.528247][ T13] netif_open+0xaa/0x170 [ 850.533024][ T13] dev_open+0x125/0x260 [ 850.537725][ T13] team_add_slave+0xb36/0x2840 [ 850.543047][ T13] do_set_master+0x530/0x6d0 [ 850.548187][ T13] do_setlink+0xcf0/0x41c0 [ 850.553146][ T13] rtnl_newlink+0x160b/0x1c70 [ 850.558365][ T13] rtnetlink_rcv_msg+0x7cc/0xb70 [ 850.563842][ T13] netlink_rcv_skb+0x205/0x470 [ 850.569149][ T13] netlink_unicast+0x75c/0x8e0 [ 850.574467][ T13] netlink_sendmsg+0x805/0xb30 [ 850.579781][ T13] __sock_sendmsg+0x21c/0x270 [ 850.584998][ T13] ____sys_sendmsg+0x505/0x830 [ 850.590314][ T13] ___sys_sendmsg+0x21f/0x2a0 [ 850.595829][ T13] __x64_sys_sendmsg+0x19b/0x260 [ 850.601344][ T13] do_syscall_64+0xfa/0x3b0 [ 850.606496][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.612934][ T13] [ 850.612934][ T13] -> #0 (team->team_lock_key#9){+.+.}-{4:4}: [ 850.621129][ T13] validate_chain+0xb9b/0x2140 [ 850.626433][ T13] __lock_acquire+0xab9/0xd20 [ 850.631643][ T13] lock_acquire+0x120/0x360 [ 850.636698][ T13] __mutex_lock+0x182/0xe80 [ 850.641737][ T13] team_del_slave+0x32/0x1c0 [ 850.646894][ T13] team_device_event+0x285/0xa20 [ 850.652386][ T13] notifier_call_chain+0x1b3/0x3e0 [ 850.658036][ T13] unregister_netdevice_many_notify+0x15d8/0x2320 [ 850.665010][ T13] unregister_netdevice_queue+0x33c/0x380 [ 850.671269][ T13] _cfg80211_unregister_wdev+0x165/0x590 [ 850.677469][ T13] ieee80211_remove_interfaces+0x49a/0x6d0 [ 850.683820][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 850.689745][ T13] mac80211_hwsim_del_radio+0x275/0x460 [ 850.695831][ T13] hwsim_exit_net+0x584/0x640 [ 850.701045][ T13] ops_undo_list+0x497/0x990 [ 850.706178][ T13] cleanup_net+0x4c5/0x800 [ 850.711138][ T13] process_scheduled_works+0xade/0x17b0 [ 850.717244][ T13] worker_thread+0x8a0/0xda0 [ 850.722375][ T13] kthread+0x70e/0x8a0 [ 850.726980][ T13] ret_from_fork+0x3fc/0x770 [ 850.732119][ T13] ret_from_fork_asm+0x1a/0x30 [ 850.737421][ T13] [ 850.737421][ T13] other info that might help us debug this: [ 850.737421][ T13] [ 850.747665][ T13] Possible unsafe locking scenario: [ 850.747665][ T13] [ 850.755124][ T13] CPU0 CPU1 [ 850.760503][ T13] ---- ---- [ 850.765883][ T13] lock(&rdev->wiphy.mtx); [ 850.770403][ T13] lock(team->team_lock_key#9); [ 850.777888][ T13] lock(&rdev->wiphy.mtx); [ 850.784932][ T13] lock(team->team_lock_key#9); [ 850.789897][ T13] [ 850.789897][ T13] *** DEADLOCK *** [ 850.789897][ T13] [ 850.798062][ T13] 5 locks held by kworker/u8:1/13: [ 850.803186][ T13] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 850.814089][ T13] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 850.824653][ T13] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 850.834011][ T13] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 850.843873][ T13] #4: ffff8880795c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 850.854684][ T13] [ 850.854684][ T13] stack backtrace: [ 850.860598][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 850.860618][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 850.860629][ T13] Workqueue: netns cleanup_net [ 850.860657][ T13] Call Trace: [ 850.860667][ T13] [ 850.860675][ T13] dump_stack_lvl+0x189/0x250 [ 850.860696][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.860712][ T13] ? __pfx__printk+0x10/0x10 [ 850.860733][ T13] ? print_lock_name+0xde/0x100 [ 850.860753][ T13] print_circular_bug+0x2ee/0x310 [ 850.860774][ T13] check_noncircular+0x134/0x160 [ 850.860794][ T13] validate_chain+0xb9b/0x2140 [ 850.860813][ T13] ? finish_task_switch+0x266/0x950 [ 850.860836][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.860858][ T13] __lock_acquire+0xab9/0xd20 [ 850.860875][ T13] ? team_del_slave+0x32/0x1c0 [ 850.860896][ T13] lock_acquire+0x120/0x360 [ 850.860908][ T13] ? team_del_slave+0x32/0x1c0 [ 850.860934][ T13] __mutex_lock+0x182/0xe80 [ 850.860950][ T13] ? team_del_slave+0x32/0x1c0 [ 850.860970][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.860988][ T13] ? team_del_slave+0x32/0x1c0 [ 850.861007][ T13] ? rcu_is_watching+0x15/0xb0 [ 850.861024][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 850.861040][ T13] ? preempt_schedule_irq+0xde/0x150 [ 850.861060][ T13] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 850.861075][ T13] ? bond_netdev_event+0xd9/0xe80 [ 850.861101][ T13] ? irqentry_exit+0x74/0x90 [ 850.861116][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.861134][ T13] team_del_slave+0x32/0x1c0 [ 850.861165][ T13] team_device_event+0x285/0xa20 [ 850.861189][ T13] notifier_call_chain+0x1b3/0x3e0 [ 850.861218][ T13] unregister_netdevice_many_notify+0x15d8/0x2320 [ 850.861243][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 850.861261][ T13] ? call_rcu+0x73e/0x9c0 [ 850.861278][ T13] ? preempt_schedule+0xae/0xc0 [ 850.861294][ T13] ? preempt_schedule+0xae/0xc0 [ 850.861314][ T13] unregister_netdevice_queue+0x33c/0x380 [ 850.861331][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 850.861351][ T13] _cfg80211_unregister_wdev+0x165/0x590 [ 850.861382][ T13] ieee80211_remove_interfaces+0x49a/0x6d0 [ 850.861401][ T13] ? __pfx_synchronize_rcu+0x10/0x10 [ 850.861420][ T13] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 850.861438][ T13] ? rcu_is_watching+0x15/0xb0 [ 850.861457][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 850.861483][ T13] mac80211_hwsim_del_radio+0x275/0x460 [ 850.861508][ T13] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 850.861535][ T13] hwsim_exit_net+0x584/0x640 [ 850.861561][ T13] ? __pfx_hwsim_exit_net+0x10/0x10 [ 850.861588][ T13] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 850.861613][ T13] ops_undo_list+0x497/0x990 [ 850.861637][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 850.861662][ T13] cleanup_net+0x4c5/0x800 [ 850.861683][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 850.861705][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 850.861718][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 850.861734][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 850.861751][ T13] process_scheduled_works+0xade/0x17b0 [ 850.861778][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 850.861801][ T13] worker_thread+0x8a0/0xda0 [ 850.861828][ T13] kthread+0x70e/0x8a0 [ 850.861848][ T13] ? __pfx_worker_thread+0x10/0x10 [ 850.861864][ T13] ? __pfx_kthread+0x10/0x10 [ 850.861884][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 850.861897][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.861911][ T13] ? __pfx_kthread+0x10/0x10 [ 850.861931][ T13] ret_from_fork+0x3fc/0x770 [ 850.861947][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 850.861964][ T13] ? __switch_to_asm+0x39/0x70 [ 850.861982][ T13] ? __switch_to_asm+0x33/0x70 [ 850.862000][ T13] ? __pfx_kthread+0x10/0x10 [ 850.862020][ T13] ret_from_fork_asm+0x1a/0x30 [ 850.862046][ T13] [ 851.527399][ T13] team0: Port device wlan1 removed [ 851.821998][T10758] team0: Port device team_slave_1 added [ 851.923342][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.930360][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.956786][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.973257][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.984682][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.011835][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.044692][ T13] hsr_slave_0: left promiscuous mode [ 852.056425][ T13] hsr_slave_1: left promiscuous mode [ 852.066584][ T13] veth0_macvtap: left allmulticast mode [ 852.073429][ T13] veth1_macvtap: left promiscuous mode [ 852.078996][ T13] veth0_macvtap: left promiscuous mode [ 852.228593][ T13] team0 (unregistering): Port device team_slave_0 removed [ 852.440046][ T5952] lo speed is unknown, defaulting to 1000 [ 852.449130][ T5952] infiniband syz0: ib_query_port failed (-19) [ 852.493790][T10758] hsr_slave_0: entered promiscuous mode [ 852.501131][T10758] hsr_slave_1: entered promiscuous mode [ 852.507565][T10758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.517039][T10758] Cannot create hsr debugfs directory [ 852.759737][ T13] IPVS: stop unused estimator thread 0... [ 852.784213][ T13] ------------[ cut here ]------------ [ 852.790118][ T13] WARNING: CPU: 0 PID: 13 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 [ 852.800095][ T13] Modules linked in: [ 852.804111][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 852.814116][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 852.824595][ T13] Workqueue: netns cleanup_net [ 852.829453][ T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 852.831137][T10758] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 852.835371][ T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 852.862140][ T13] RSP: 0018:ffffc90000127898 EFLAGS: 00010293 [ 852.868557][ T13] RAX: ffffffff8a0f293f RBX: ffff888027748000 RCX: ffff88801ce98000 [ 852.876653][ T13] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88801ce98000 [ 852.884730][ T13] RBP: ffffc900001279b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 852.892785][ T13] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 852.900886][ T13] R13: 1ffff92000024f40 R14: ffff8880277494c0 R15: dffffc0000000000 [ 852.908959][ T13] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 852.917995][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.924653][ T13] CR2: 00007fff75606f40 CR3: 000000007b924000 CR4: 00000000003526f0 [ 852.932753][ T13] Call Trace: [ 852.936067][ T13] [ 852.939086][ T13] xfrm_net_exit+0x2d/0x70 [ 852.943545][ T13] ops_undo_list+0x497/0x990 [ 852.948534][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 852.953724][ T13] cleanup_net+0x4c5/0x800 [ 852.958187][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 852.963528][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 852.968787][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 852.974594][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 852.980419][ T13] process_scheduled_works+0xade/0x17b0 [ 852.986036][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 852.992144][ T13] worker_thread+0x8a0/0xda0 [ 852.996789][ T13] kthread+0x70e/0x8a0 [ 853.000890][ T13] ? __pfx_worker_thread+0x10/0x10 [ 853.006110][ T13] ? __pfx_kthread+0x10/0x10 [ 853.010771][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 853.016064][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 853.021396][ T13] ? __pfx_kthread+0x10/0x10 [ 853.026085][ T13] ret_from_fork+0x3fc/0x770 [ 853.030724][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 853.035934][ T13] ? __switch_to_asm+0x39/0x70 [ 853.040747][ T13] ? __switch_to_asm+0x33/0x70 [ 853.045597][ T13] ? __pfx_kthread+0x10/0x10 [ 853.050236][ T13] ret_from_fork_asm+0x1a/0x30 [ 853.055041][ T13] [ 853.058493][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 853.065817][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 853.075757][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.085834][ T13] Workqueue: netns cleanup_net [ 853.090665][ T13] Call Trace: [ 853.093983][ T13] [ 853.096937][ T13] dump_stack_lvl+0x99/0x250 [ 853.101556][ T13] ? __asan_memcpy+0x40/0x70 [ 853.106170][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.111401][ T13] ? __pfx__printk+0x10/0x10 [ 853.116027][ T13] panic+0x2db/0x790 [ 853.119940][ T13] ? __pfx_panic+0x10/0x10 [ 853.124403][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 853.129369][ T13] __warn+0x31b/0x4b0 [ 853.133372][ T13] ? xfrm_state_fini+0x270/0x2f0 [ 853.138346][ T13] ? xfrm_state_fini+0x270/0x2f0 [ 853.143331][ T13] report_bug+0x2be/0x4f0 [ 853.147683][ T13] ? xfrm_state_fini+0x270/0x2f0 [ 853.152643][ T13] ? xfrm_state_fini+0x270/0x2f0 [ 853.157610][ T13] ? xfrm_state_fini+0x272/0x2f0 [ 853.162580][ T13] handle_bug+0x84/0x160 [ 853.166855][ T13] exc_invalid_op+0x1a/0x50 [ 853.171397][ T13] asm_exc_invalid_op+0x1a/0x20 [ 853.176294][ T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 853.181862][ T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 853.201491][ T13] RSP: 0018:ffffc90000127898 EFLAGS: 00010293 [ 853.207579][ T13] RAX: ffffffff8a0f293f RBX: ffff888027748000 RCX: ffff88801ce98000 [ 853.215566][ T13] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88801ce98000 [ 853.223588][ T13] RBP: ffffc900001279b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 853.231576][ T13] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 853.239584][ T13] R13: 1ffff92000024f40 R14: ffff8880277494c0 R15: dffffc0000000000 [ 853.247579][ T13] ? xfrm_state_fini+0x26f/0x2f0 [ 853.252549][ T13] ? xfrm_state_fini+0x26f/0x2f0 [ 853.257509][ T13] xfrm_net_exit+0x2d/0x70 [ 853.261939][ T13] ops_undo_list+0x497/0x990 [ 853.266554][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 853.271697][ T13] cleanup_net+0x4c5/0x800 [ 853.276141][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 853.281120][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 853.286337][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 853.292074][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 853.297817][ T13] process_scheduled_works+0xade/0x17b0 [ 853.303389][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.309395][ T13] worker_thread+0x8a0/0xda0 [ 853.314017][ T13] kthread+0x70e/0x8a0 [ 853.318106][ T13] ? __pfx_worker_thread+0x10/0x10 [ 853.323234][ T13] ? __pfx_kthread+0x10/0x10 [ 853.327841][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 853.333050][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 853.338265][ T13] ? __pfx_kthread+0x10/0x10 [ 853.342871][ T13] ret_from_fork+0x3fc/0x770 [ 853.347477][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 853.352693][ T13] ? __switch_to_asm+0x39/0x70 [ 853.357474][ T13] ? __switch_to_asm+0x33/0x70 [ 853.362265][ T13] ? __pfx_kthread+0x10/0x10 [ 853.366891][ T13] ret_from_fork_asm+0x1a/0x30 [ 853.371678][ T13] [ 853.375071][ T13] Kernel Offset: disabled [ 853.379415][ T13] Rebooting in 86400 seconds..