last executing test programs: 16m14.756318428s ago: executing program 4 (id=138): rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') execve(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f000000e280)='./file0/../file0/file0\x00', &(0x7f000000e2c0)={0x880, 0x0, 0x10}, 0x18) 16m14.499915819s ago: executing program 32 (id=139): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0xbe00, 0x4) timer_create(0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) 16m14.385174198s ago: executing program 4 (id=142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000dc0)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@journal_ioprio}, {@grpquota}, {@nobh}, {@user_xattr}, {@jqfmt_vfsv1}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 16m11.802359757s ago: executing program 4 (id=148): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000a000000050000000900"/27], 0x1c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) ioctl(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 16m8.692273s ago: executing program 4 (id=154): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000340)="a00064bced2a4a68", 0x8, 0x24000010, &(0x7f0000000140)={0x3f, 0x4e20, 0x4, @local, 0x2}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 16m8.152557283s ago: executing program 33 (id=154): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000340)="a00064bced2a4a68", 0x8, 0x24000010, &(0x7f0000000140)={0x3f, 0x4e20, 0x4, @local, 0x2}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 14m12.928330284s ago: executing program 6 (id=469): socket(0x11, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x4208000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 14m10.470046113s ago: executing program 6 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ec, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x348) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r6, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 14m7.589250126s ago: executing program 6 (id=480): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 14m7.340309937s ago: executing program 6 (id=483): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r8) syz_genetlink_get_family_id$nl802154(&(0x7f0000008a80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000008b00)={'wpan1\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x800448d4, &(0x7f00000002c0)={0x0, 0x2, '\x00', 0x0, 0x59}) r10 = syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r10, 0xe81, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x804c090) 14m5.626236066s ago: executing program 6 (id=486): socket(0x11, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x4208000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 13m59.937946576s ago: executing program 6 (id=497): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000340)="a00064bced2a4a68", 0x8, 0x24000010, &(0x7f0000000140)={0x3f, 0x4e20, 0x4, @local, 0x2}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 13m44.344715609s ago: executing program 34 (id=497): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000340)="a00064bced2a4a68", 0x8, 0x24000010, &(0x7f0000000140)={0x3f, 0x4e20, 0x4, @local, 0x2}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 12m48.15214764s ago: executing program 1 (id=642): syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/44, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 12m44.347513187s ago: executing program 1 (id=647): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r5, 0x0, 0x0) 12m42.623423487s ago: executing program 1 (id=649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)) 12m41.593379331s ago: executing program 1 (id=653): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004ad80bfdc09d9979000000000000c77600"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="4b97a4c480f2595209562d48ef71", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) times(&(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) prlimit64(r1, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 12m35.944190168s ago: executing program 1 (id=667): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) mmap(&(0x7f000026f000/0x1000)=nil, 0x1000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 12m23.806488901s ago: executing program 1 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 12m7.357238213s ago: executing program 35 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 11m27.698479805s ago: executing program 7 (id=803): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x708}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 11m26.518204521s ago: executing program 7 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f, 0x8}}, 0x20) 11m25.533081991s ago: executing program 7 (id=809): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004ad80bfdc09d9979000000000000c77600"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="4b97a4c480f2595209562d48ef71", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) times(&(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) prlimit64(r1, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 11m20.808124933s ago: executing program 7 (id=821): chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed000a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@prjquota}, {@discard}, {@nodelalloc}]}, 0xfe, 0x473, &(0x7f00000004c0)="$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") 11m13.770309953s ago: executing program 7 (id=835): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000000)) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240020005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) 11m9.823976162s ago: executing program 7 (id=845): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) mmap(&(0x7f000026f000/0x1000)=nil, 0x1000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 10m54.313220429s ago: executing program 36 (id=845): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) mmap(&(0x7f000026f000/0x1000)=nil, 0x1000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 4m59.556371711s ago: executing program 8 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) shutdown(r7, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3b11, 0x240b, 0xfffffffd, 0x34f, 0x0, r8}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$mice(0xffffff9c, &(0x7f0000000080), 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) 4m56.116264442s ago: executing program 8 (id=1575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100050000000000040004000000000010000200000000002000000000000080eb2da6f8b6ca7f184ae4512c643e7017c2c8ddd3fedc2fbbb4c263ad703bf957ef6e23e2d484"], 0x24, 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="e05acff62a41134e0f28a6ba227995b05776c837ab3a066a329e33b775d4586b7a0c48f3471ede96c5e03e1f347acdb576b1b8c75ad4fe76f3ceb2331adb9676968ebcc8bc70b50acd984f9067e2499ec9e28061d978efb1ebbb90d82d973c7b4bdadf6dcf1cd1ba8a4b8882779ab3c5a956791fcf5097ee4b0da8d910938b1edf34fbb493d106ad0270110e14f0c94d02e722ba66bc7e3d90197f4fc676d18723513482dbaa39e68b3a4c0d23f9706f67f76202f16de2f3a40b48a2de184a15f89b2935a65017dbd8783a3d9153c275b72470d0fc15920a659c531d6ca85c36012deb6bf650f9d0a598707c1798a3636b7339a0a5b0a3a62073dbc94eaeecccc58722b8d76d0a447fe0ec7c122ee5d028f5dd17813e62da599f209c621c06c98e0440c008b8678dd65ec6ae2b0b659d6883ff1170ff904db86d0748e8dd1e870c6255ddfc90cbb5aba594c593f64f518d69ab7e02425299303d7d37d5ed28afde8fa2daa4627855dba7c4ab12209d5a836ea0c4592cba568dabd5453382eb5f7e6ce5bd0489b876d4d1dabe18f0440190f5898675bff139d7e8c953abb31383b932a67808cc2a2f67cb714b9a2c8e75f68c21fbe56ecb49f39136b7a0b7b6a53a93f33f9987fb7e7437a0852b9194cb75bb84f3b40f4617ae8ce9a8da6ca74d4e7c737bbc5126b0b8bd0c86f4fb861fea02fd7b8649fb1c0523b30f28a24bd7f58495f29cd2e092f5b6ff29f4de5ce56894fbd9fa78df0fb93efe2192e966e14bc9bd4671b0a2c6873d7750773a8aef7f1d35cad742e64664dcd277b2d604f564fdc519911c0749575c7136226cd68f2ec02a1563c727c1eac916cc426da130ac5c5fd6c0169161c2d7f79fb16b9d8025a6c74e14abccaaf30e5e39806a8b1866cc62e8e238c38036cbcb0abf003861103634409202ffac458605f599ae67db8f4cbd45f72ac9bfd126783135f552dd6639937ff0f77e15ebf8a49fe3d6a7da4fd6faf018b62956957c13ae52537c5ffbb4b2c28f3076468b1d11b018b6af74ff706f17c4babd4987bf9afe98a4b9aa357137d9383b8fb6ca370dd2fdc582aa701e85d926bf3087565231d6089911b2cf578786607ec5849d3d58dd423ff4558092c9a22a1153b787f37c9075555e1d06bc99b95b03bb0862da5be4f8d4718b1c6b892c1ad1138cded558e910553a70699e9d6ac935c227bd3326bfe40f389b16517801826d0ba7a1d74528fa273eca268a74e11423f0ea00e2745abbb7342c846566cf067b38a308babc8a45e607f39b66ddd2e772867cee3e14b3e7dd8844c3651330d15db8aa51d94c98ece900f4443bcbbf8849c3fafd4e5d4e1e5ea4306c081438e1694c59bdafa3b6bf80302b48f09a541dd30db6026ac247303db3facce171b64b48a74a1865db29a15db73f6989f7e5d6b6f39431511246b2ac2873dcdbea3fa5636af6813c83a7fe8b3b7936911a6a47f10823188d0ad18dbf3e4c45c296210e5bfc3abc3dc3836fd60a691005857db271290243709c57fc1ca3ad9a7938550b81b473c66e614fdf7ff35b8e19e60f7616ed19af91e4818c5b2c30f5ff903a3da9c7b7debc5d1b9e41f4a12f122a727a627cc5e6a0f8d81161088a93e4d0e592b7e977287833ec9446a6b44aba303e12ecc19c7fda316f6049db6bf1617f6fefeebcded95f75371fbd6db605ed7b77f8f91ea27468a68e068d1aad50a4118bd619aa85d1f5ee0eb9bbdfcad7335628e3ae1340681ce824204a9997f8aad87c8ce0534482cd748148689ec331002203b94af4ecd11d5b75d80838478c26cfee0fa076c5baaa82483b04898ead705bdb37247956ee25db667ea6668a4f3082332070489da02c3b5d25091e3a00f884265185a28757cdeedb3a1e4a0ada801d4a386fbab0c1de6f35fbb6c7d81fd15370909a387eabd3415f146129647a13f20ccfa69e436ce067ed1a9e0dfb877c85f0b8032e64f5379a9f5a92967533f9b45584ce1a04b962306d2d707e0e462d9d2ce94dbf4c52835c2bc005d1c21fd4e64b0f2578a072d8c442c49bb9450a8fcb49a4b2167912ff1f5946585983087deffee403a0c079ba90a0b644584137c58626afc604ab684650aac5ede8632f3e035da41c511bfb25a62d0a283e35fdd67dc0ef135d428297805b5fd0ad62294531f46171f546c61eb6475fd9fc7c8357e65737d39a741417f8a0a7e035f696c1a83d44837e360592db9ae7afd2ae7be9859f062d274b0862746c9ad804eb1c72aecf6ef9cfbbed33f68f38f25eb493d165f3012c04ec02d42421e2232aa4b30910f9d4fb91b9ba2e7b40ea4fdb60f6957e3afed8cab6d076b2f5ac59ea53bd1e9d944cb53deaa2b8ba097664fca77ab97666c6add05e7556b92d8ad11d19887e83a8ae9dc086bbb4d23cabb3615fdc05e35c61fc3e28315659509df1cbaf449ac909f36c69f5366f1bbe9b3bf9899533f06a6161c986607292a202bfcfeb2508aa18dd993d2d239b32e4f06ba1321d607c154965b9d1f52c940777e69430967d456cafabf236a2f8cea019cc87b350a5bc2aed7f1469ae6cadbcd579864d2194e3bc71e2596c690226b15c86aa0c2aede98cec57c4e752edb6fbe58046ca59546511805a71aa187ce4bcd5399c36eb3f76681a63e5a1d948a9cf98703aebda62c0759477f1be96841d60256bb2d7140fe4481d4d5180df9595fae750da2a9178c89fab47766ae30cd3d8ffcb94eb4b4245ef19ee3d95b89094f528c16ed7289703afd5805e923ce48bb5e451a93ceadbef1443e61b6b59fc13e79ed418dc73cf12b302ff40aa09994374eeabec532bc98b820c21d15f2cd10f755132b12c824a8875387c6682e991dfc01280ce1619c23593659de590b080c7f2eac12ec00704ab8b3bc2052ba9ba6f59a2312b9ebf62c6ea1ec5250435c25215f87350903140a4a12d8e3f8e233f0d63002dbbbd12a7ba9282768dc2b2b9aceb9e45e9da4a2d4a8da83e72bf0cf91bc12324b544a1d6145525dd9cf44199d7448d839bc67b1d33d7da10a9abc08f8f08a894edbd42c1baf8482feb06d68f25c4405a624998bd4c28cb9b845712ba307ca9b9ff56131617ceccd2927ecd57796eb103b6b15dfa12b3e8e9aa2ac8af20cde7877501a98d8b04dbd96d606661066dd80ef55d45fbd5c410d4a0d59ad53cfe3779350e71f109118bccb61121bb8eefced8feaa72c95ed737490c7318e7db86d94eda2ce5f9b04f2308dadbd8a2be6991309a56959c6be4312623a04483bd72a64c210bc6ea600d887aeb3781030a0c4a6ee06f38896bb95688ba5c735180ed50f1fce6c321aa0503f714a000b6e10f22d019e0c5bdbf982bc0a3b15ee59e9c573f77073ac64394f3610f68eca10092a7b7544bc1e643c30017133fec103af1111536ec6b37472157ef7a57186d4b64812ee20f51257d2cdaa19b5508fc40824aeb678c368149387f9083d645c9b616fdf08459aa792897293e7dabfab1144ea74d39a2f0d3632d16ce1b1973717eb83d217250646903207ccd9804e584c12bd98be5096c2a43f21161547f6b2fcf244f12a3c6863a90b45901379a1df5948dba63c34aedb7b877c675dec404acdc0348482502c3e9a886d0829a17c06457a2bb3b6c843285b1aecb4c917d9d586b5b47be2895dad99e620cc824f4d0c577f8b737c20c39c40b77db27e8e72d83c6d220011e7e304c97e281697afe31e077f490f0e632a3fb5125351051543125d7895e86007e0be5527f57f98db8235bfaa3c4d25514ae88d06289261b49013f25326461a5672c0fd975af977d9e9725d14c923decf5b60cb800a267644e0fb5e8dfc734c5b1ba810ff276f24f8fd0608bda3ab335252fbfce4e75c533bf44d2f6a2d14314b5bf24ab3d3dc0794a120379264d2bdfb4111e614b4f68d36f930b4802863bd47dc7b8520f8e95b9673a9bac79dd4e68b7dd9e095d87eb8004f19763459171142145ff6ba160709fa7732579c48bbd4ace904fed83603de20179c6d230b1b098b2800749c1836b222b52da56a2d47dcd9a87e4ea2a2fc3da46b05fb446d1b6e134d5979c43c1e79b00ce0909a020fa2e0377e19bbbeb5c4453a0f04a09242a477bcf0fdf824b58b196d7ee987ed68092c6696cf2dbf942310ed22d674512a4428e9e194127eb44828f9a812c762460486889d715dc6dc4377e557834f31cab1db1b276a5e3c14618c233ae523f1e3f3c0078fe150354855b3c31d0f333928efff70c7383cf65880420cf7ec307b708307fed0745032cb81891b85d67fb55303a30da8f4b3bedeabddc6bd38d92edeec80aff10f0d29f116cfe31f1b1a96962a713300635329c04977ab606e50b93cb1305f5a82c826febf41318f1ddb7e6fd0eaf37936f6950f841c8853bf1acbb96ba04dcc4fa5a23d8eb8e5b22fea5b5784453d51799442c665df83b45ed6fa99401ceec8e0f62b89fab9fadaa0d51e845fcf2ec20676b3d867304b7f893054490af7a0080bdaacfddd54fee4349e03dff156c9f08ceffa31e3701d333251f7cd4b07c52a9901d4fd32bb01261544c7842df78b420b99645e7c2695fcc6dc4e402ddc0ac039bdaf4129a4ae70b37b1c61ebd47e6cb7d6dfde13e7e972c74b706e8a3ad7fddd50cf581d2055ff5b127695d6f5c8fc67df49aaa56afb789a9fa384125f13d928feea35139cd9153b254c6b39f838c0f0367c5efa13c5fbdcbec5c9f88d7d2ff54aaf8d0c4db4cada8b74ea780d32aa0e66942e936061692182be3c5b21fcd99dfbfd22467d4d3ce3d78e88f1481bc2ed388f0dc3f262a079bdcf41d2f21f1de75202fac6b4f8f9f8a7ee0bdb646ce582f6fd358461fc4266f980f33138c41daa3c8a82088eccb8a2944b6dc432f8149414115f209282945e51e5d0a999d518a32fec37e64e8618879f7d65e088514efed5104ead3fab91c017447a645575a50dba5f28a3a6359a9d591ee2c7eadd08b86e733a6a8723880890d3158e527b4d9a676b02ef0faabff71865c487641c6c104c15178106d878c6cd588b2c6f834a4a2ebb9d129ab28eb7dc6a556f3d868e2765034bb146c7be493d19302b31881a11257ed202bd20d53f05d7b5c96954b55cfb933fcf0945a10b460bf7e276ddb6fa313225b7bee647e8e6d5c1ef68dae19d4cca98f00d3a860602b66b09a1392ad01739a5ddb7117dcb0053e9c31602727101225c627225674aa1e49f3c3abeffada9f5ac76b5f10a2de55951de24b1fb144f4c1eae80e27bc36e5da70e01ff37ca465190180644a27eb9a96a15d6fb4eace5e652176a02d4ef8228bd72df5142351a6f1b08981a5c66eeab943983277c1bb192b668ff25cecae19229da67e2d8e3655c409f597b68260c70c47c5843082d94a94e72fc42ed11eed5a0cc5c9eb57de53947d2823cedbd9e417682b7b19ed3be8d27b3a887795b062c88317a0dc04bd6a62cf05fb78b2955af0514a99e3fe0e0f382c9fc2ff820af6451e0915722162c53b060250890c381ebe2edbb63359643ebd780a32770e78c6af810f341f3e07781ee25c92275ab427de063326239514c6623c9a3a2ee2c80da4c77404607cd208e2e9a273cfff2cf9c6cac6ed4cd6641d8890ce82f229cec11b483db0e4fe70161829bebcdc65351e75eef29d4ec70495415927aa6be603dfb8c5c34f4d2a0afe0bd0700540b8ccd9e0421efb4d449225fe38cf4ea8145e7e1ecdcfda0c1b8a6439b3535a7c853065f665cd28c86fcf4b47ce321edc9ba1bed1a6e4160e62819cc8f9d0914ca7c8f54c6392d9b8d8a9e23e6877e240cf50208b5dc085cbf5932d730dde94314d269f8e4730e72c62ebf1100b423e7c02c0c7b3d579fe738a75bf3d29264bc27009673ebc5fd0d777e2b43d4b738addf5e1c1d084270f5ad6441d10e723331ef5d41d1da2597817968e3c33324fd876bb2c4829921fb5c835ed01e78d0fa88d1f4043693a5cbf592f350505d37efd84845feb77ed38a25df0e98678047f320080972ae011d5ecc9b9cb1aa519fc661c3c909ccf1002844a4f3a9ff21dcb3e861cec427cea26eb765e3d30c532f3c67aead616cca4ed0ef627e3edec6a98e0f0866af49b0019ef8c50104b4e21c17b17b36b0bd5d785c0a46dd5e84dc7327d46c73637602f159900ddc1e6bd3f9afddf45ca54cc7958a6fc0a7e9b93c7e91da8afba0a63238f3847860ebe9403ff3b80e067493d34c55e7562b8b0fb06a2f8c1ddc9cd0f785aa9814cd40aa66ded541de15e647303864b27b5cb7631666f4166b6daf929fbff41fd95bf16994a6f9bc8ce579da13442357cd500f10c392ec78b0c161c99742c03b4d745262d86500e2a981586627350cfe1bcf4710b0824070abca21e1a53a36bfbc12ea7fe8336f741784746abef46f52ad131eafd02ac24c1d1636fa30337251a5f169cdb8c57fa214f2a900af0ee866748661f1a67a6c2c6a6e49ce1939139e45a456c7dbbec8a09be48853cd9b1feeefc6729740dde9de04dd1e0f9c774d387a902174274729e6349a7effd237e63c40bdbccb72e44dab5ac1eab96eb75a6ea8f2f7dd362159131072dd8d733fe9c54d1ea4771e85e7cc0b0455dae0a5c8ece44aeff7e2d247e94639c9a74f48e690c02e89d0377fe3afce5d6abc706dd3e23d19809dfa948b010b6d66556ea81ca3690c3322478dfa1e9ef6de5e4d21b6e9867c611fc4e78abc94bd3c9f112739f8d2996834f54d1137f34ff5442c2432746c37031bc7e9201fdeb7d73a24163fe423fdf3e8e22b655ec159664e905675d8bb80d651d4dda22dfed198d02c2b8ff5b0760fd2aea35e519619393cb66b048b59d4e6cf398652a4726925c8a1936ee29cde1bd70fdeeec0aa1e9289711c57ab8ba170c427173fada71e9a1f0fc4cbe23c248f5340db3f9ba4f8c23da230ef4c1013ba0ffaaf5bfc58cc2eb5084f96bcdce7c1ce76c4206189bfbc9d8f1238aed641c39693363762f2cbb1b3433cb01fba42dfbc7b1aa6a46cb9bfcc98a8d8f46cde8a5dc9d74de7fc73aa22420acd949a26c2bd0c8c6f05fcac03a88e622c851454f583623b35f825038ab1aaa3091d05018c2179f473a889219e3414bbbf4eb62333df13ca9eef4dd987358c90d6bdc113aa2972cbff9b7d7e5a76fa182609401567889febe7f2443b338982c3be4328caa199f4b14652ff609b3012fc66cd7a02d8e837bf85f7d2ee7f5061b359104a90e5a74179f6fe7ea44acaf2e8531b05875e041a7f42f6551e89518dd06f04ceaa5140fee9535cc3de18ca42721661d395e23828b07d449e4e09614c8aa753d28215608a56dbb66a929a47fe1beddc6123afad8d4f64cc5602138a289ef1287548d914647d144c3010cb5e3a90753aafebb70703a4f0eb4edbb991f47ed529b219a9fd421782a8a9d73d18e9ac69768791f408ee65af8f78ca3986e878276993c8dc140949f7410c8aee7b57739ffd57e5096ef3c1edc9d242d8ed7d0b5c8f7d4ff37b4ef76a6d4ca8960793508313c751a194ce0dcd0b08e3c3b91f06cb9f158347af1689fa86e9229970ab49bd44bf99da76818f7deb102bffbc575cf53966e247ce3558f77937d822ab74a437c5575dbcbd907199d5b645ee6ee122dc77090960302f8fce044fcb5d19a803b92a95950c262ea117522e6cbe44f5c277d6d7e36890eb7702136dc78abfdc5105f138b9415ee6ed0b4e1f805b3bdb5d0e7aba7d0aaf7c6c100edae89b8496804a7cc9e61d002ba42abb6ada2fdb12f672a15f2f3ef7d23330a5d411195bd2e3caf54d7c29a4ac9e13db64d88c35587059465e59507acd1ed7393f3557b8991116fdbb675f7f4a30acfa0cce3e31b817834a3037a18479aa764a83820f7186460fb96e07adcd529cdf66d0f6dad80260f51d3a9a1ebe213d03b9b71c9c522b4b8bdfe40b06a9da4c722f9a73d43423b456b2464bbb546b0527f71cbe600478169bab6caab15b98d4383552cf0dbf3c4b5208d901873f79901d174410ccd887073c1c9c6091f01c1772123f8354efdd6646d1e5373ef0e7750406b2c9acc1315c9fe1e9b0dba050717ee4f1ed17fc73357150921e5092c8edeb79f25a5b5e142e6813f20871252ebf52752d643a2965058509271b370bf98ef0fe8983a4725d39685647416757b85f87cef3ed7265d67a479d7752dcb3fb78447e6dff107a51365cba79fdf6edba21db2d3b52bf70579a398c36847bb3ec5e8ced0ad82c68c22d422335f73ea5297a95c5263d2403e06b7fb1d30804efd4d535894e0e0fb4747bd77caf3e92fd23d0bc8c73e08374ca42b52fa8c02f1ff3d19d8eaa78ef2ba7b3b1bea75faabf2658cf0a49f59bdd1fc49618fb60260053033184ede8c6a10fbf5f295a8a96553d469b160b17d9dbef52a651afd41fa87a169e5b34c8f3f0299aab066bcfadb07055502432b285f42e369606c4217f10f947fab6bd24889ca0aafad8be5ecbf11462b3a1cfd0c93c80e0a5611d6248a0a4fcc3a2307a7de22d1e301aae233155bd10d11f6b37d89a34c5104049bfe242ceba72e5968ead5ec6ec6b7056c8a1c390f6c6640ec92afbd76fb1072784ad7349ca30b605d6e755f0a21703724394a7681709f7b73aa34f6f44dea15264ef10e86a1079d64f98f6f7bb50bd2e0caca18df8b09a51ca436834ddc235d60fa9500bfb09fbb1dba93c95e1406086f83f6950a0cb9a4cd8ba97333b0de1e658d42469ac93529c596712231f8e0410992d789d326a127bc8c0d901f4dc99b36948c782410052229769f5177b328a6ca68df9e4fc4638cf090d17a4704cf142271418c5a85c7cd292b6fe1ac9e1f2a1858d17e5318d4d75cad3c4e7f2b3d3da458e4581217a07b28ca94043cd0d31d1af5264b8170ef325855a5b5863f01541dd1428cac12793e9080919f6d4b6f9f1255032b44daf64d2ae7b1084384d0d9eb76b7aa18c70b8ce5a174f2a3f73b31f98a9dc329c3f5e1a4ff04c6b85ab3e2eb95f8e265915937b5bad0088c7ab15e2c9cc97707039045758b56f613f58d8100ab0a829c2672e99624494ae81983c23dced6381e718454e714c00d6df6d76f502bc2bc7dd8dd67279418cc4855e33d9250dfd9eff61c98fb06d578d92d1510c1589025dc2bba8208b8d4554d9718bc846666c984ecd7442c60c3437dc9adb4a8bb671cb828ae0a1be34a4db662ef440fce64a6194a296726e7fd6c2b0d2dd52c785d01b26c66b363c6be384471c0e5e60aacb8c1c47751f8c689892ea1ead15f157dc7b567243cc298583e5f37a6bd4ff9d947e2ae56a466f0c27408cdb8b2b7036598aaef45c995b4b1bcb7f110b5c5aa87fdd652e30998796982fcfa0911558395ec8f63e7fc898221d6a9b904951600f1caf077870db43f5e1c59907e4d5c50c9b51e365cf82f4a77c5bccbfaf90b1ce51aef03675e7c45e2bf46f98bfc0d140273dc2ad2e1c25c74ca2edd2efca89aa1432d1c5450125b8a0c19326b0a8c845e657bf69481918a75502de4fff5db8c706fb0e6d0d7263f3b213171f478b71a67257924a8f5ffbf29215783d21d379f50722972cd7c96c4577dfd958155d15214fe704e73effd98092f640b4e376804013028539422407156de850d0cf7797383d0c9c7e7a0c79718003d5748b5393eb3cd8c18f314cd94139f432f4bc82f908533cdaa7c80d0d6d26e1228f8d00a8882b9b07fc6a177d20231e7f42eb40eaa029a1576cd0cd32d7da652d01824077bcf175d7f9540522f38a815aa0e2267588d9ddc6ab5188e45decb68c93091a3607c0d8f158387e0e152bb4a8da4e66fc3c6fde1fb8f4d00f03885b7822a8587abd72c36d10c77e1c7222d24e2bf1992a17c07d586540a0ae2631687cb9197a655fb66690c3b0a0de8808945ba66ffa1e60e0d9623d067fc6f8a233ab53332478d538597fd798f0abfcc97182ff22249f95bce4a07d9f410ae919fd3e0d313a5b12c03f58de66ff5d211e25c791c108ff82ade5be2d59cdb15c6a4759dca915ddf3c07bda00b13018bdb95caea0bf170a15b6cf53a230ef717e1c90233735b9693379e7ef711a367ce42fd7c3ffe25496789342517332a68350a46a3a8da15bfbb63c45f8dc7c5d25db7ab473da177398443857e81bb58d9aa6d97e0bc685e1b40a0704c330e1c0850b9e799207be79508f927fcd5df193b929e0aad5a426990f7c19c50c50427c66a73347fc0937f091c98668f1ece95fa029dcce72977d51a836b6d7e5c93084968ffbca70619eee8700b1a9cc5056b5485ae3d5440b4711b8600fd10fd814cadde2ed11cc6b241464a002fb06ade3ceb7e89fb74462c9abdeb3d88eb9e57eb4f9abbabd23fea5f970417a7fa8a0e78f96b233ec75c6ff89c0068dac52bbafbdc1636f8156a1681acc405b52c65960ad32bac32189c074390c11385dec2b6bad34e95de5e848845adab92a7edf2e60f3c70fda609cb76662a4b98b187b93a739bbe139054b09f5488428b2c8b462e8f5cea5df40290f2dab5ed51cf9e719688ecec4ab1c72b8497efa1746d1bc9b3dff2dabfcb1092f1856f17c2a9a7c37656eb3ec485ffdb0f51149391d6131dd1d8554310c60598e49afad834f5e5255f21c432abb377f54cdf2ea82148d73475214e28346785d797bc4e657d9a2f1f4ce54da741f8caf8262335e284e2f8a04a823de564e553474c39ec1e763700bce1bf030eacaedd345fbe3c3af2120f3fa962ceb2b1427663d791b5936a80b336941c6079f468f92d5c10deab0dfefe9593b76b673a71ad499c5d0fff4a9db2a5f5a0caa0c2c5620abf503deb905d8cb7b6c66865ee69bf31982ef6d9ae8834d361dce14d535a2025db065f5429f3945d5615886163892e1e41fd34c44949cd97592f1a378027de0e81637c11594609c1808da0cdb64de43a871b2b2640f2642d6c1aae34d83b0b0eb73aedf94ce7c1daeddf8cf684672edaf1ce0c7757f163dae3a4350cef5803a60f1e1f3d5eb277a17d38cc32ca8b6fdf536720ce186e7be6507d720810ce8801be2cc5488c7a6f0e398878ebb2ee530d62b61bf67fd4a7fdc811ecb119e4a6e7c6555685850656cf52dbc2a1da93d8550a7941a8a7716fa348f2cbcd6f58489051bf01c0ad0745b8a1e9a10fb748a9ae9f7897dfa81efc7fe240959a3857385f8be3a8102efb0791e1e01e539b370b8ea57d3b7b747bfce3a206612410c0a9aa9130320d80a912434c5a47048c1ab6901e7806c72fef1f4f59322bbf5a79f444a0eec2397a76ae63a22c5bc76a98c4e65212258f963709c07c54dc36ac15d16d7f34c6becd2de54a3ca98babdbe1068275e18585abd3a1fb4e889ea087d918ce2e791098a3e337926a408e9301f2e8f681c50b700cfc240d2a692516e491b7f4774309953b34372fc5425832d4206079872e4387f2343de66525c63c71b1c9625e7649adcc92f279d51d55fc771f7c8b81c02e8a7a6b2bb6f0170d6e5552882434382163f07ea5e4c5971bff35f530e04ca0247f5bdd27929eee90e2078141cfd2d45a1cc2a1bf47012025fa808b9e849978011e482fb7e851e5efcb02796b6a4ce2b72e8e83bba54670b912668723803b", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17e22, 0x40000, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000002a00)={0x28, 0x4, 0x0, {0x3, 0xfa20}}, 0x28) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 4m54.243743435s ago: executing program 8 (id=1579): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000240)=0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, 0x0, &(0x7f0000000440)=""/236}, 0x20) 4m50.175162324s ago: executing program 8 (id=1586): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xea, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0xb4, 0x73, 0x0, @local, @local, {[], "90b5a7661f379efd348adfc3d77ffbb87622284262abeed70845216b63c9e3ee45a369a9aeaf592a4765f24632adca34391579167c6c7c1f1627759a58230f3c449b4017b22ed6e01b0255a1b25a129e3ee2423ab148ff3c28be01adb90f82de0e99c2657b5148d51051e050c69cdd9dd350c77067daf242a2b84a2298ddc4214946086c4caa5399fa336ba7bc207de27f7c033d2173f1ba2b7df955ee829c91c4dcbe7458d39220844b7b88f789fb835af6d253"}}}}}, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xc8, 0x0, {0xff0f000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 4m46.903200423s ago: executing program 8 (id=1588): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/comedi4\x00', 0x6000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000005f00), 0x1, 0x149800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000005f40)={0x7fff, [0x7, 0x9], [{0xd20, 0x8e, 0x0, 0x1, 0x1}, {0x5, 0x3, 0x1, 0x1, 0x1}, {0xa, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x30, 0x0, 0x1, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x2, 0x0, 0x1, 0x1, 0x1}, {0xfffffff7, 0x5, 0x0, 0x1, 0x1}, {0x3, 0xfff, 0x1, 0x0, 0x1}, {0x6, 0x7ff, 0x1, 0x1, 0x0, 0x1}, {0xebd1, 0x6, 0x0, 0x1}, {0x3b, 0x97c, 0x1, 0x0, 0x0, 0x1}], 0x9}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmmsg(r5, &(0x7f0000005ac0)=[{{&(0x7f0000000080)=@generic={0x2c, "2a9da67a74dd6e7845097eafabb3649b707c5cd422c4815d8d8c114915cb531f701304a6bc2e0da768e2b320c18afa5a6896b4b6e25aab2d22d3dfcf90576b000966cbb6916872eb154dca5d956f2f2d664a08f697062fa68f825b73f23d9f92e040265c2385063ea2c2a40646c10c84c09c67a7d25572b2d94a8386f063"}, 0x80, 0x0}}, {{&(0x7f00000006c0)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000003ac0)=[{0x0}, {&(0x7f0000000440)}, {0x0}, {0x0}], 0x4, &(0x7f0000003b00)=ANY=[], 0x90}}, {{&(0x7f0000003bc0)=@llc={0x1a, 0xfefa, 0x0, 0x80, 0xe, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003cc0)}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[{0x10, 0x10e, 0x8001}, {0x20, 0xff, 0xb9d, "9fb619577283f7d8879f"}, {0x40, 0x115, 0xb, "e119f7c80fb2ca71ef7f7ec74349f266b7ebf5b9cf98780cf2e14149af001b2bcbe6efe1c38e23ca62"}, {0x60, 0x118, 0x0, "f108b43d5f8a8a6ab91118ea0076a75b71f11935e5c83bcad615991b75b7a2a37f14f20b8bee669eb5344f89414ba22d1c32449e982de7a80bd3e9829b1ed688bf5d0709f64dfe31fe908e9d1c9c3e77"}, {0x40, 0x112, 0x467, "6a0a6ac91771d14d103446aedaa2882674e8b91e81252939c03a913bd65a08ea0e55c765b4207e250d09b4110562de"}, {0x10, 0x111, 0xef}, {0x10, 0x88, 0x1}, {0x18, 0x799e364b96f4f8d0, 0x1000, "4635079e4730c296"}], 0x148}}], 0x4, 0x4000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000280)) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x27, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x68}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4m44.209989087s ago: executing program 8 (id=1593): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xea, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0xb4, 0x73, 0x0, @local, @local, {[], "90b5a7661f379efd348adfc3d77ffbb87622284262abeed70845216b63c9e3ee45a369a9aeaf592a4765f24632adca34391579167c6c7c1f1627759a58230f3c449b4017b22ed6e01b0255a1b25a129e3ee2423ab148ff3c28be01adb90f82de0e99c2657b5148d51051e050c69cdd9dd350c77067daf242a2b84a2298ddc4214946086c4caa5399fa336ba7bc207de27f7c033d2173f1ba2b7df955ee829c91c4dcbe7458d39220844b7b88f789fb835af6d253"}}}}}, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xc8, 0x0, {0xff0f000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 4m28.938781949s ago: executing program 37 (id=1593): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xea, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0xb4, 0x73, 0x0, @local, @local, {[], "90b5a7661f379efd348adfc3d77ffbb87622284262abeed70845216b63c9e3ee45a369a9aeaf592a4765f24632adca34391579167c6c7c1f1627759a58230f3c449b4017b22ed6e01b0255a1b25a129e3ee2423ab148ff3c28be01adb90f82de0e99c2657b5148d51051e050c69cdd9dd350c77067daf242a2b84a2298ddc4214946086c4caa5399fa336ba7bc207de27f7c033d2173f1ba2b7df955ee829c91c4dcbe7458d39220844b7b88f789fb835af6d253"}}}}}, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xc8, 0x0, {0xff0f000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1m36.578446638s ago: executing program 3 (id=1912): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x80000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1m35.197672354s ago: executing program 3 (id=1918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x2, 0x0, 0xfffffffffffffff2}, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x34}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x81}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0xae}, @IFLA_MACSEC_ES={0x3d, 0xa, 0x5e}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m33.196115716s ago: executing program 3 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ec, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x348) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r6, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x70, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1m21.384413914s ago: executing program 3 (id=1941): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.365743803s ago: executing program 3 (id=1943): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) times(&(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) prlimit64(r1, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 1m17.263837507s ago: executing program 3 (id=1945): recvmsg(0xffffffffffffffff, 0x0, 0x122) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f0000000300)={0x8cb3, 0x7fffffff, 0x1, 0x40, 0xe8}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 1m1.989843258s ago: executing program 38 (id=1945): recvmsg(0xffffffffffffffff, 0x0, 0x122) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f0000000300)={0x8cb3, 0x7fffffff, 0x1, 0x40, 0xe8}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 17.823529676s ago: executing program 9 (id=2045): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 16.119168335s ago: executing program 9 (id=2049): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="bf00000000000001000000000800000002000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)={0xffffffff, 0x2, {0x0, 0x1, 0xfffffffb, 0x3, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251200000408000100"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000000)=r6, 0x4) timer_create(0x2, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) 16.068290279s ago: executing program 2 (id=2050): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) 14.08608168s ago: executing program 9 (id=2053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, 0x0, 0x0) shutdown(r7, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3b11, 0x240b, 0xfffffffd, 0x34f, 0x0, r8}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$mice(0xffffff9c, &(0x7f0000000080), 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) 11.379137566s ago: executing program 5 (id=2060): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e78", 0xa) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 11.19007062s ago: executing program 2 (id=2061): openat$mice(0xffffffffffffff9c, &(0x7f00000018c0), 0x80082) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 10.866640405s ago: executing program 2 (id=2063): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="bf00000000000001000000000800000002000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)={0xffffffff, 0x2, {0x0, 0x1, 0xfffffffb, 0x3, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251200000408000100"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000000)=r6, 0x4) timer_create(0x2, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) 10.866257935s ago: executing program 9 (id=2064): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) epoll_create1(0x80000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 9.910149128s ago: executing program 5 (id=2065): socket$inet6(0xa, 0x802, 0x88) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.08419201s ago: executing program 0 (id=2067): socket(0x11, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x4208000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 7.441035695s ago: executing program 2 (id=2068): socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000003a80)={0x20218000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x1000000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x189040, 0x10a) mkdir(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 6.59159255s ago: executing program 9 (id=2069): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a6", 0x8f, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000480)=""/199, 0xc7, 0x0) r5 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x1, 0x0, &(0x7f0000002280)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000c03010329006ea8736902000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4044810}, 0xd7b2ce0e58f3fabb) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYRES32=r8, @ANYBLOB="01000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4c840) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) 5.79612104s ago: executing program 5 (id=2070): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/mnt\x00') r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6a5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b44959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000040)={0x1fe, 0x340, 0x80, &(0x7f0000000380)=[0x5, 0x8000000, 0x7e0b, 0x0, 0x9, 0x10000, 0x3, 0x1, 0x9, 0x3, 0x8000000000000000, 0x6, 0x5a2, 0x7, 0x81, 0x401, 0xff, 0x8, 0x4, 0x9, 0x9, 0x2, 0x334b, 0x101, 0xe, 0xfffffffffffffff6, 0x3, 0x5, 0xc7, 0x6, 0x3, 0x3c8, 0x8, 0x72be, 0x1, 0x10000, 0x10, 0x4, 0x7fffffff, 0xc000000000000000, 0x7fffffffffffffff, 0x3, 0xd, 0x7ff, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x400, 0x7ff, 0xfffffffffffffff9, 0x8000, 0xfffffffffffff787, 0x6, 0x8, 0x7fffffffffffffff, 0x5, 0x0, 0x400, 0x101, 0x4, 0x3, 0x400000, 0xe, 0x40, 0x5a8, 0x5, 0x7, 0x5, 0xff, 0x5, 0x8, 0x1bd7, 0x4, 0x8, 0x7, 0x0, 0x1, 0x80000000000000, 0xa8, 0x4, 0x2, 0xd, 0x1, 0x0, 0x6, 0x10, 0x2000, 0x0, 0xff, 0x0, 0x81, 0x8, 0x4, 0x40, 0x7, 0x3, 0x8001, 0x6b4, 0x9, 0x7, 0x2, 0xc5, 0x25, 0x1, 0xe, 0x6, 0x1, 0xe, 0x5, 0x7ff80000000000, 0x0, 0xffff, 0x2, 0x4, 0x3, 0x6, 0x3, 0x0, 0x5, 0x0, 0x2, 0x10001, 0x2, 0x6, 0x8]}) 5.484969524s ago: executing program 0 (id=2071): openat$mice(0xffffffffffffff9c, &(0x7f00000018c0), 0x80082) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 5.299838538s ago: executing program 2 (id=2072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, 0x0, 0x0) shutdown(r7, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3b11, 0x240b, 0xfffffffd, 0x34f, 0x0, r8}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$mice(0xffffff9c, &(0x7f0000000080), 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) 5.287298719s ago: executing program 0 (id=2073): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0x7, 0x0, &(0x7f0000000080)="4b97a4c480f259", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(r1, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r6, &(0x7f0000000000)='1\x00', 0x2) 4.248360838s ago: executing program 0 (id=2074): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket(0x18, 0x6, 0x200000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newchain={0x68, 0x64, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0xffe0}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x9}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xf19}]}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x5}}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) read$msr(r1, &(0x7f00000016c0)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x6000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r3, 0x10000, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0xe4, 0x3]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 3.180206819s ago: executing program 5 (id=2075): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40), 0x0, 0x8014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xea, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0xb4, 0x73, 0x0, @local, @local, {[], "90b5a7661f379efd348adfc3d77ffbb87622284262abeed70845216b63c9e3ee45a369a9aeaf592a4765f24632adca34391579167c6c7c1f1627759a58230f3c449b4017b22ed6e01b0255a1b25a129e3ee2423ab148ff3c28be01adb90f82de0e99c2657b5148d51051e050c69cdd9dd350c77067daf242a2b84a2298ddc4214946086c4caa5399fa336ba7bc207de27f7c033d2173f1ba2b7df955ee829c91c4dcbe7458d39220844b7b88f789fb835af6d253"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xc8, 0x0, {0xff0f000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 3.1639672s ago: executing program 0 (id=2076): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x58, 0xa) 3.058372588s ago: executing program 0 (id=2077): socket$inet6(0xa, 0x802, 0x88) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x4081) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.721416994s ago: executing program 5 (id=2078): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) epoll_create1(0x80000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 2.621111682s ago: executing program 9 (id=2079): socket$inet6(0xa, 0x802, 0x88) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.299062656s ago: executing program 4 (id=1966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0xbe, 0x6, @broadcast}, 0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xaa09}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20008811) nanosleep(&(0x7f0000000300), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a0104000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) unshare(0x2c020400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 707.165517ms ago: executing program 4 (id=2080): socket(0x11, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x4208000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 813.371µs ago: executing program 5 (id=2081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0xbe, 0x6, @broadcast}, 0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xaa09}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20008811) nanosleep(&(0x7f0000000300), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a0104000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) 0s ago: executing program 2 (id=2082): socket$inet6(0xa, 0x802, 0x88) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x4081) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.106133][ T4427] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 265.124560][ T4427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.209332][ T6398] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 265.335608][ T4427] usb 4-1: config 0 descriptor?? [ 265.943437][ T4427] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 266.756905][ T3546] bcm5974 4-1:0.0: could not read from device [ 266.798407][ T4427] usb 4-1: USB disconnect, device number 6 [ 268.160444][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 269.079365][ T6418] loop3: detected capacity change from 0 to 512 [ 269.112091][ T6419] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.144757][ T6419] bond0: (slave lo): Error: Device can not be enslaved while up [ 269.302474][ T6418] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 270.146113][ T6415] binder: BINDER_SET_CONTEXT_MGR already set [ 270.335843][ T6415] binder: 6414:6415 ioctl 4018620d 2000000002c0 returned -16 [ 272.165379][ T4231] Bluetooth: hci2: command 0x0401 tx timeout [ 272.490672][ T6453] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 272.744768][ T4231] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 273.014776][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 274.974837][ T4231] usb 4-1: device descriptor read/all, error -71 [ 275.487664][ T6479] loop1: detected capacity change from 0 to 512 [ 275.555191][ T6479] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 278.641546][ T6495] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.768637][ T6495] bond0: (slave lo): Error: Device can not be enslaved while up [ 279.067039][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 282.707141][ T6528] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 288.109815][ T6554] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.130850][ T6554] bond0: (slave lo): Error: Device can not be enslaved while up [ 289.484294][ T6577] fuse: Bad value for 'fd' [ 289.847192][ T6584] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 289.873853][ T6584] CIFS mount error: No usable UNC path provided in device string! [ 289.873853][ T6584] [ 289.884454][ T6584] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 290.843213][ T6588] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 293.874619][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 294.108766][ T6600] befs: (nbd3): No write support. Marking filesystem read-only [ 294.116669][ T263] block nbd3: Attempted send on invalid socket [ 294.122968][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.134326][ T6600] befs: (nbd3): unable to read superblock [ 294.522093][ T6613] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 294.561485][ T6613] bond0: (slave lo): Error: Device can not be enslaved while up [ 297.745242][ T4240] Bluetooth: hci5: command 0x0409 tx timeout [ 297.937164][ T6626] fuse: Bad value for 'fd' [ 297.972306][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.086898][ T4296] Bluetooth: hci5: command 0x041b tx timeout [ 300.481816][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.701849][ T6653] ksmbd: Unknown IPC event: 6, ignore. [ 302.246464][ T4586] Bluetooth: hci5: command 0x040f tx timeout [ 303.108028][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.151736][ T6656] befs: (nbd2): No write support. Marking filesystem read-only [ 303.159786][ T150] block nbd2: Attempted send on invalid socket [ 303.166577][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.177518][ T6656] befs: (nbd2): unable to read superblock [ 303.212748][ T6661] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 303.268333][ T6581] chnl_net:caif_netlink_parms(): no params data found [ 303.440487][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.708729][ T6678] fuse: Bad value for 'fd' [ 305.593103][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.816377][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.836025][ T6581] device bridge_slave_0 entered promiscuous mode [ 305.910411][ T6345] Bluetooth: hci5: command 0x0419 tx timeout [ 306.656805][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.668845][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.677689][ T6581] device bridge_slave_1 entered promiscuous mode [ 307.709563][ T6702] loop5: detected capacity change from 0 to 512 [ 308.074094][ T6702] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 308.097025][ T6709] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 308.218468][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.238970][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.462049][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 308.653515][ T6719] ksmbd: Unknown IPC event: 6, ignore. [ 310.954394][ T6581] team0: Port device team_slave_0 added [ 310.967364][ T6581] team0: Port device team_slave_1 added [ 311.102606][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.119523][ T6726] fuse: Bad value for 'fd' [ 311.120576][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.207160][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.473618][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.547719][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.669192][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.825851][ T6581] device hsr_slave_0 entered promiscuous mode [ 312.073030][ T6581] device hsr_slave_1 entered promiscuous mode [ 312.405443][ T9] Bluetooth: (null): Invalid header checksum [ 312.412787][ T9] Bluetooth: (null): Invalid header checksum [ 312.426008][ T6581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.433750][ T6581] Cannot create hsr debugfs directory [ 312.495556][ T6749] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 312.524925][ T9] Bluetooth: (null): Invalid header checksum [ 312.539605][ T6749] bond0: (slave lo): Error: Device can not be enslaved while up [ 314.568462][ T6774] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 315.200564][ T6783] fuse: Bad value for 'fd' [ 315.501241][ T6581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.872523][ T154] device hsr_slave_0 left promiscuous mode [ 317.562870][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.577474][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.913252][ T154] device hsr_slave_1 left promiscuous mode [ 317.951936][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.959805][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.975893][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.983474][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.061662][ T154] device bridge_slave_1 left promiscuous mode [ 318.069955][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.144099][ T154] device bridge_slave_0 left promiscuous mode [ 318.173809][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.278686][ T4803] Bluetooth: (null): Invalid header checksum [ 318.298045][ T4803] Bluetooth: (null): Invalid header checksum [ 318.335197][ T4803] Bluetooth: (null): Invalid header checksum [ 318.492826][ T154] device veth1_macvtap left promiscuous mode [ 318.526344][ T154] device veth0_macvtap left promiscuous mode [ 318.596930][ T154] device veth1_vlan left promiscuous mode [ 318.602962][ T154] device veth0_vlan left promiscuous mode [ 319.022334][ T154] team0 (unregistering): Port device team_slave_1 removed [ 319.052204][ T154] team0 (unregistering): Port device team_slave_0 removed [ 319.067426][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.082085][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.748864][ T154] bond0 (unregistering): Released all slaves [ 319.906025][ T6581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 319.924235][ T6581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 319.947501][ T6581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 320.030348][ T6809] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.050518][ T6809] bond0: (slave lo): Error: Device can not be enslaved while up [ 322.291488][ T6848] xt_nat: multiple ranges no longer supported [ 322.623122][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.693760][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.703912][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.723199][ T6858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.582'. [ 322.734421][ T6858] netlink: 3 bytes leftover after parsing attributes in process `syz.5.582'. [ 322.887046][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.913035][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.928049][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.962146][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.969352][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.399920][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.552654][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.562188][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.571711][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.578994][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.591991][ T6864] autofs4:pid:6864:autofs_fill_super: called with bogus options [ 323.804645][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.832116][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.918066][ T6867] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.965059][ T6867] bond0: (slave lo): Error: Device can not be enslaved while up [ 323.992727][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.028239][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.271753][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.446411][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.511595][ T6581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.522220][ T6581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.536874][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.696592][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.870123][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.255980][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.351685][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.371094][ T6892] befs: (nbd5): No write support. Marking filesystem read-only [ 325.380333][ T263] block nbd5: Attempted send on invalid socket [ 325.386634][ T263] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.398622][ T6892] befs: (nbd5): unable to read superblock [ 325.510342][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.673009][ T6901] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.952828][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.961346][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.003247][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.063615][ T6915] autofs4:pid:6915:autofs_fill_super: called with bogus options [ 326.529718][ T6922] device bpq0 entered promiscuous mode [ 326.578320][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 328.540378][ T6943] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 328.680284][ T6943] bond0: (slave lo): Error: Device can not be enslaved while up [ 328.938083][ T6948] loop2: detected capacity change from 0 to 512 [ 328.989028][ T6948] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 329.212710][ T6955] befs: (nbd1): No write support. Marking filesystem read-only [ 329.220865][ T263] block nbd1: Attempted send on invalid socket [ 329.227557][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 329.238760][ T6955] befs: (nbd1): unable to read superblock [ 329.326800][ T6963] autofs4:pid:6963:autofs_fill_super: called with bogus options [ 329.352334][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.362342][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.567092][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.120880][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.312537][ T6581] device veth0_vlan entered promiscuous mode [ 331.420711][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.655085][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.684855][ T4261] Bluetooth: hci2: command 0x0401 tx timeout [ 332.176492][ T6581] device veth1_vlan entered promiscuous mode [ 332.501165][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.593990][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.783860][ T6581] device veth0_macvtap entered promiscuous mode [ 332.820438][ T6581] device veth1_macvtap entered promiscuous mode [ 333.525450][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.729596][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.824737][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.890322][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.933157][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.976738][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.014571][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.055274][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.095808][ T4310] Bluetooth: (null): Invalid header checksum [ 334.098073][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.103111][ T4310] Bluetooth: (null): Invalid header checksum [ 334.162618][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.220740][ T4370] Bluetooth: (null): Invalid header checksum [ 334.241446][ T6993] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 334.284270][ T6993] bond0: (slave lo): Error: Device can not be enslaved while up [ 334.324825][ T4370] Bluetooth: (null): Invalid header checksum [ 334.332205][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.343881][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.371584][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.432665][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.223342][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.240577][ T7006] loop1: detected capacity change from 0 to 512 [ 335.264509][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.314556][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.344588][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.380111][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.421319][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.462580][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.521112][ T7006] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 335.634586][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.643745][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.719450][ T6581] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.761239][ T6581] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.809672][ T6581] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.989174][ T6581] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.229818][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.274915][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.336325][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.346660][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.382762][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.421463][ T7033] autofs4:pid:7033:autofs_fill_super: called with bogus options [ 336.437931][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.598270][ T7038] befs: (nbd2): No write support. Marking filesystem read-only [ 336.608041][ T263] block nbd2: Attempted send on invalid socket [ 336.614258][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.625821][ T7038] befs: (nbd2): unable to read superblock [ 338.661022][ T7059] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.716256][ T7059] bond0: (slave lo): Error: Device can not be enslaved while up [ 338.957318][ T7067] loop1: detected capacity change from 0 to 512 [ 339.048577][ T7067] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 339.789309][ T7083] autofs4:pid:7083:autofs_fill_super: called with bogus options [ 340.306313][ T7095] CIFS mount error: No usable UNC path provided in device string! [ 340.306313][ T7095] [ 340.317160][ T7095] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 340.680138][ T4240] Bluetooth: hci2: command 0x0401 tx timeout [ 341.633415][ T7102] fuse: Bad value for 'fd' [ 341.684928][ T7104] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 343.943465][ T7130] fuse: Bad value for 'fd' [ 344.331026][ T7137] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.402959][ T7137] bond0: (slave lo): Error: Device can not be enslaved while up [ 344.487002][ T7149] binder: 7139:7149 ioctl c0306201 2000000003c0 returned -22 [ 347.971367][ T13] Bluetooth: hci2: command 0x0401 tx timeout [ 348.160229][ T7160] fuse: Bad value for 'fd' [ 352.821402][ T7217] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.836524][ T7217] bond0: (slave lo): Error: Device can not be enslaved while up [ 352.878044][ T7204] binder: 7203:7204 ioctl c0306201 2000000003c0 returned -22 [ 353.016617][ T7225] fuse: Bad value for 'fd' [ 354.884773][ T4247] Bluetooth: hci2: command 0x0401 tx timeout [ 355.119016][ T7248] device syzkaller0 entered promiscuous mode [ 356.799843][ T7262] CIFS mount error: No usable UNC path provided in device string! [ 356.799843][ T7262] [ 356.811711][ T7262] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.461150][ T7280] binder: 7275:7280 ioctl c0306201 2000000003c0 returned -22 [ 362.690472][ T4247] Bluetooth: hci2: command 0x0401 tx timeout [ 365.360039][ T4878] Bluetooth: hci2: command 0x0401 tx timeout [ 366.265390][ T7325] ksmbd: Unknown IPC event: 6, ignore. [ 375.493424][ T7384] netlink: 68 bytes leftover after parsing attributes in process `syz.3.692'. [ 378.648029][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.657130][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.735549][ T7412] fuse: Unknown parameter 'use00000000000000000000' [ 379.979201][ T7427] ksmbd: Unknown IPC event: 6, ignore. [ 381.929044][ T7437] netlink: 68 bytes leftover after parsing attributes in process `syz.3.704'. [ 385.343745][ T7474] autofs4:pid:7474:autofs_fill_super: called with bogus options [ 388.164926][ T4296] Bluetooth: hci1: command 0x0409 tx timeout [ 388.198341][ T7515] device syzkaller0 entered promiscuous mode [ 388.999794][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 389.615597][ T7536] autofs4:pid:7536:autofs_fill_super: called with bogus options [ 390.365131][ T6345] Bluetooth: hci1: command 0x041b tx timeout [ 390.416500][ T7555] netlink: 2 bytes leftover after parsing attributes in process `syz.7.728'. [ 391.076010][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.084663][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.093119][ T7487] device bridge_slave_0 entered promiscuous mode [ 391.120516][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.145548][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.177633][ T7487] device bridge_slave_1 entered promiscuous mode [ 391.427557][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.161797][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.222616][ T7487] team0: Port device team_slave_0 added [ 392.243552][ T7487] team0: Port device team_slave_1 added [ 392.431094][ T5203] Bluetooth: hci1: command 0x040f tx timeout [ 393.835405][ T7576] tipc: Failed to obtain node identity [ 393.840938][ T7576] tipc: Enabling of bearer rejected, failed to enable media [ 394.098292][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.485371][ T5203] Bluetooth: hci1: command 0x0419 tx timeout [ 394.872059][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.639870][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.652690][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.659818][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.689130][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.815244][ T7588] device syzkaller0 entered promiscuous mode [ 395.900115][ T7487] device hsr_slave_0 entered promiscuous mode [ 395.928201][ T7598] autofs4:pid:7598:autofs_fill_super: called with bogus options [ 396.007878][ T7487] device hsr_slave_1 entered promiscuous mode [ 396.058170][ T7487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.095355][ T7487] Cannot create hsr debugfs directory [ 397.763928][ T7622] xt_nat: multiple ranges no longer supported [ 400.632315][ T7487] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 400.807201][ T7487] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 400.862027][ T7487] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 400.968865][ T7487] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 401.167796][ T7655] device syzkaller0 entered promiscuous mode [ 402.543685][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.582981][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.611812][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.629444][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.652820][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.668985][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.722630][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.729802][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.782879][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.854162][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.910648][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.152835][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.160014][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.200057][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.295866][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.354283][ T7687] loop5: detected capacity change from 0 to 512 [ 403.371747][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.483127][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.737811][ T7687] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 403.925211][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.055508][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.120594][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.187098][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.208726][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.241342][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 404.304991][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 404.342176][ T7487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.667894][ T4368] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.713653][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.806513][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.920785][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.176595][ T4368] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.882430][ T4368] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.057235][ T4368] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.247239][ T4368] tipc: Left network mode [ 408.248965][ T7730] device syzkaller0 entered promiscuous mode [ 408.501830][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.567008][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.603136][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.5.763'. [ 408.627288][ T7740] netlink: 3 bytes leftover after parsing attributes in process `syz.5.763'. [ 408.688288][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.736192][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.757189][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.785379][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.985585][ T7487] device veth0_vlan entered promiscuous mode [ 409.007179][ T7487] device veth1_vlan entered promiscuous mode [ 409.554621][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.650333][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.679541][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.718310][ T7487] device veth0_macvtap entered promiscuous mode [ 409.786469][ T7487] device veth1_macvtap entered promiscuous mode [ 409.877474][ T7766] netlink: 2 bytes leftover after parsing attributes in process `syz.7.768'. [ 409.993683][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.059081][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.219323][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.337986][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.438951][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.560509][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.612513][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.689681][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.780004][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.790606][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.802190][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.811233][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.843603][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.893621][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.902903][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.843578][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.124589][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.017886][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.036843][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.051943][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.070914][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.129889][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.149382][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.160797][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.181672][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.265829][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.286997][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.347235][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.386628][ T7487] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.424769][ T7487] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.469541][ T7799] loop7: detected capacity change from 0 to 512 [ 413.485917][ T7487] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.502224][ T7487] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.562433][ T7799] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 413.590658][ T7803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.775'. [ 413.614863][ T7803] netlink: 3 bytes leftover after parsing attributes in process `syz.3.775'. [ 413.756335][ T7806] device syzkaller0 entered promiscuous mode [ 414.035152][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.063715][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.095543][ T7816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.776'. [ 414.111929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.156543][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.222079][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.323849][ T4368] device hsr_slave_0 left promiscuous mode [ 414.360680][ T4368] device hsr_slave_1 left promiscuous mode [ 414.382714][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.419530][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.451299][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.490914][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.518165][ T4368] device bridge_slave_1 left promiscuous mode [ 414.524495][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.586303][ T4368] device bridge_slave_0 left promiscuous mode [ 414.592586][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.731730][ T4368] device veth1_macvtap left promiscuous mode [ 414.747453][ T4368] device veth0_macvtap left promiscuous mode [ 414.763906][ T4368] device veth1_vlan left promiscuous mode [ 414.784183][ T4368] device veth0_vlan left promiscuous mode [ 415.229060][ T7835] xt_nat: multiple ranges no longer supported [ 416.591542][ T6345] Bluetooth: hci5: command 0x0406 tx timeout [ 416.661979][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 416.757292][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 416.824830][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.935036][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.235072][ T4368] bond0 (unregistering): Released all slaves [ 417.626895][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 417.699046][ T7861] tipc: Failed to obtain node identity [ 417.704798][ T7861] tipc: Enabling of bearer rejected, failed to enable media [ 417.849222][ T7870] netlink: 68 bytes leftover after parsing attributes in process `syz.3.787'. [ 419.631915][ T7886] loop3: detected capacity change from 0 to 512 [ 420.155008][ T7895] netlink: 2 bytes leftover after parsing attributes in process `syz.7.792'. [ 420.709169][ T7886] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 421.322130][ T7913] fuse: Bad value for 'fd' [ 421.687788][ T7922] netlink: 68 bytes leftover after parsing attributes in process `syz.7.798'. [ 424.599506][ T6345] Bluetooth: hci2: command 0x0401 tx timeout [ 424.870939][ T7935] device syzkaller0 entered promiscuous mode [ 426.956118][ T7962] fuse: Bad value for 'fd' [ 428.444836][ T7976] CIFS mount error: No usable UNC path provided in device string! [ 428.444836][ T7976] [ 428.627471][ T7976] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 429.367134][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.8.812'. [ 429.462917][ T7992] netlink: 3 bytes leftover after parsing attributes in process `syz.8.812'. [ 429.479286][ T7996] netlink: 68 bytes leftover after parsing attributes in process `syz.2.815'. [ 433.981360][ T8051] loop7: detected capacity change from 0 to 512 [ 434.048432][ T8051] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 435.049412][ T8055] netlink: 68 bytes leftover after parsing attributes in process `syz.3.826'. [ 435.432615][ T8067] tipc: Failed to obtain node identity [ 435.438375][ T8067] tipc: Enabling of bearer rejected, failed to enable media [ 436.017085][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 436.245005][ T21] usb 4-1: device descriptor read/64, error -71 [ 436.276073][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 436.524638][ T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 437.314592][ T21] usb 4-1: device descriptor read/64, error -71 [ 437.437996][ T21] usb usb4-port1: attempt power cycle [ 437.855045][ T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 438.114735][ T21] usb 4-1: device descriptor read/8, error -71 [ 438.394661][ T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 438.722023][ T21] usb 4-1: device not accepting address 12, error -71 [ 438.741376][ T21] usb usb4-port1: unable to enumerate USB device [ 440.097236][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103846][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.390397][ T8122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.839'. [ 443.134562][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 444.049457][ T13] usb 3-1: device descriptor read/64, error -71 [ 445.003192][ T13] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 445.369467][ T8166] tipc: Failed to obtain node identity [ 445.375162][ T8166] tipc: Enabling of bearer rejected, failed to enable media [ 445.742232][ T13] usb 3-1: device descriptor read/64, error -71 [ 445.865222][ T13] usb usb3-port1: attempt power cycle [ 448.653796][ T8196] CIFS mount error: No usable UNC path provided in device string! [ 448.653796][ T8196] [ 448.664468][ T8196] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 450.741633][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 453.884541][ T1107] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 454.084810][ T1107] usb 6-1: device descriptor read/64, error -71 [ 454.355005][ T1107] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 454.445569][ T8241] tipc: Failed to obtain node identity [ 454.451206][ T8241] tipc: Enabling of bearer rejected, failed to enable media [ 455.045639][ T1107] usb 6-1: device descriptor read/64, error -71 [ 455.164713][ T1107] usb usb6-port1: attempt power cycle [ 455.574521][ T1107] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 456.464704][ T1107] usb 6-1: device descriptor read/8, error -71 [ 456.548244][ T8252] loop2: detected capacity change from 0 to 512 [ 456.642333][ T8252] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 460.132306][ T8278] tipc: Enabling of bearer rejected, failed to enable media [ 460.908423][ T8288] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.975515][ T8288] bond0: (slave lo): Error: Device can not be enslaved while up [ 462.354543][ T4247] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 463.406350][ T4247] usb 4-1: device descriptor read/64, error -71 [ 463.493013][ T6345] Bluetooth: hci0: command 0x0409 tx timeout [ 463.684570][ T4247] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 463.690126][ T8319] netlink: 40 bytes leftover after parsing attributes in process `syz.5.879'. [ 463.816554][ T8319] netlink: 3 bytes leftover after parsing attributes in process `syz.5.879'. [ 463.974519][ T4247] usb 4-1: device descriptor read/64, error -71 [ 464.167464][ T4247] usb usb4-port1: attempt power cycle [ 464.479692][ T8280] chnl_net:caif_netlink_parms(): no params data found [ 465.756635][ T4427] Bluetooth: hci0: command 0x041b tx timeout [ 467.262001][ T8349] tipc: Started in network mode [ 467.405101][ T8349] tipc: Node identity 927683672fe, cluster identity 4711 [ 467.545507][ T8349] tipc: Enabled bearer , priority 0 [ 467.746547][ T8349] tipc: Disabling bearer [ 467.764551][ T4247] Bluetooth: hci0: command 0x040f tx timeout [ 467.835048][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.842166][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.860848][ T8280] device bridge_slave_0 entered promiscuous mode [ 467.887949][ T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.925806][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.939519][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.957054][ T8280] device bridge_slave_1 entered promiscuous mode [ 468.054811][ T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.074937][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.104350][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.206265][ T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.465156][ T6345] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 468.561784][ T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.665249][ T6345] usb 3-1: device descriptor read/64, error -71 [ 468.757974][ T8280] team0: Port device team_slave_0 added [ 468.927439][ T8280] team0: Port device team_slave_1 added [ 468.954747][ T6345] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 469.184754][ T6345] usb 3-1: device descriptor read/64, error -71 [ 469.315700][ T6345] usb usb3-port1: attempt power cycle [ 469.592673][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.788019][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.814041][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.913177][ T4367] Bluetooth: hci0: command 0x0419 tx timeout [ 470.757275][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.892'. [ 471.048891][ T6345] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 471.381967][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.397472][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.407453][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.434098][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.494868][ T6345] usb 3-1: device descriptor read/8, error -71 [ 473.416018][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 473.822719][ T8280] device hsr_slave_0 entered promiscuous mode [ 473.853552][ T8280] device hsr_slave_1 entered promiscuous mode [ 474.671061][ T8433] CIFS mount error: No usable UNC path provided in device string! [ 474.671061][ T8433] [ 474.681620][ T8433] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 475.103512][ T8425] tipc: Started in network mode [ 475.134592][ T8425] tipc: Node identity cef5cccbd1cb, cluster identity 4711 [ 475.217332][ T8425] tipc: Enabled bearer , priority 0 [ 475.245341][ T8426] device syzkaller0 entered promiscuous mode [ 476.336979][ T4586] tipc: Node number set to 524209355 [ 476.574942][ T8426] tipc: Resetting bearer [ 476.653279][ T8426] tipc: Disabling bearer [ 476.989037][ T8280] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 477.071297][ T8280] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 477.119198][ T8465] fuse: Bad value for 'fd' [ 477.134359][ T8280] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 477.558856][ T8280] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 478.354859][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.412547][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.436670][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.351813][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.361969][ T8503] Device name cannot be null; rc = [-22] [ 479.429884][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.459562][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.492027][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.499540][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.624986][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 480.349935][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.526013][ T8516] Device name cannot be null; rc = [-22] [ 480.565492][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.582249][ T8520] netlink: 2 bytes leftover after parsing attributes in process `syz.5.914'. [ 481.406102][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.428402][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.435583][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.889615][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.139011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.205143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.355434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.403142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.422333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.693531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.716656][ T8545] fuse: Bad value for 'fd' [ 482.756973][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.772231][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.828705][ T8280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.862190][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.871393][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.900667][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.092826][ T154] device hsr_slave_0 left promiscuous mode [ 483.127257][ T154] device hsr_slave_1 left promiscuous mode [ 483.151945][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.167869][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.188848][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.223003][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.250584][ T154] device bridge_slave_1 left promiscuous mode [ 483.271732][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.304149][ T154] device bridge_slave_0 left promiscuous mode [ 483.331708][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.402650][ T154] device veth1_macvtap left promiscuous mode [ 483.432218][ T154] device veth0_macvtap left promiscuous mode [ 483.468526][ T154] device veth1_vlan left promiscuous mode [ 483.479814][ T154] device veth0_vlan left promiscuous mode [ 484.407617][ T154] team0 (unregistering): Port device team_slave_1 removed [ 484.478075][ T154] team0 (unregistering): Port device team_slave_0 removed [ 484.722730][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.842549][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.552301][ T154] bond0 (unregistering): Released all slaves [ 485.936265][ T8583] Device name cannot be null; rc = [-22] [ 486.038663][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.057886][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.186132][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.8.927'. [ 486.999960][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.728363][ T8599] fuse: Invalid rootmode [ 488.997846][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.928'. [ 492.324643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.452217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.616423][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.632783][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.721573][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.761592][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.863419][ T8280] device veth0_vlan entered promiscuous mode [ 492.880511][ T8280] device veth1_vlan entered promiscuous mode [ 493.113542][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 493.140597][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 493.195776][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.319093][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.328123][ T8656] tipc: Failed to obtain node identity [ 493.333809][ T8656] tipc: Enabling of bearer rejected, failed to enable media [ 493.436947][ T8280] device veth0_macvtap entered promiscuous mode [ 493.572395][ T8280] device veth1_macvtap entered promiscuous mode [ 493.591923][ T8661] netlink: 2 bytes leftover after parsing attributes in process `syz.2.942'. [ 494.141766][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.153959][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.170111][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.238617][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.524812][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.756043][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.794471][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.836968][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.878252][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.907225][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 494.927881][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 494.963557][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.009461][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.629879][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.851355][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.863900][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.875062][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.885063][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.899007][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.922072][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.942647][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.002895][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.042211][ T8280] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.058079][ T8280] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.084530][ T8280] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.103553][ T8280] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.382326][ T4296] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 496.666379][ T4296] usb 6-1: no configurations [ 496.671758][ T4296] usb 6-1: can't read configurations, error -22 [ 496.930470][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.984886][ T4296] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 497.184523][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.245350][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.253557][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.274944][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 497.365027][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 497.524743][ T4296] usb 6-1: no configurations [ 497.529498][ T4296] usb 6-1: can't read configurations, error -22 [ 497.561986][ T4296] usb usb6-port1: attempt power cycle [ 499.445184][ T4296] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 500.534720][ T4296] usb 6-1: device descriptor read/8, error -71 [ 500.751935][ T8719] xt_nat: multiple ranges no longer supported [ 501.527558][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.536609][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.979290][ T8734] fuse: Bad value for 'fd' [ 505.140944][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.959'. [ 508.277400][ T23] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 508.442454][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.964'. [ 508.528170][ T8782] fuse: Bad value for 'fd' [ 508.585601][ T23] usb 9-1: no configurations [ 508.590784][ T23] usb 9-1: can't read configurations, error -22 [ 508.844645][ T23] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 509.117029][ T8744] Bluetooth: hci1: command 0x0406 tx timeout [ 517.917320][ T8844] fuse: Unknown parameter 'use00000000000000000000' [ 518.108310][ T8856] tipc: Failed to obtain node identity [ 518.113928][ T8856] tipc: Enabling of bearer rejected, failed to enable media [ 518.213993][ T4247] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 518.753130][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 519.264484][ T8867] tipc: Enabling of bearer rejected, failed to enable media [ 519.280517][ T4247] usb 3-1: no configurations [ 519.285881][ T4247] usb 3-1: can't read configurations, error -22 [ 519.392997][ T8861] device syzkaller0 entered promiscuous mode [ 524.387142][ T8923] fuse: Unknown parameter 'use00000000000000000000' [ 525.247529][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.9.996'. [ 528.766699][ T8964] tipc: Started in network mode [ 528.771646][ T8964] tipc: Node identity 3e0d6944138d, cluster identity 4711 [ 528.890423][ T8964] tipc: Enabled bearer , priority 0 [ 528.978770][ T8964] tipc: Resetting bearer [ 529.049663][ T8968] device syzkaller0 entered promiscuous mode [ 529.096627][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 529.506787][ T8962] tipc: Resetting bearer [ 529.823382][ T8962] tipc: Disabling bearer [ 530.308803][ T8993] fuse: Bad value for 'fd' [ 532.797118][ T9013] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1010'. [ 533.886166][ T9019] ksmbd: Unknown IPC event: 6, ignore. [ 534.453113][ T9034] xt_nat: multiple ranges no longer supported [ 536.917250][ T9055] fuse: Unknown parameter 'user_i00000000000000000000' [ 537.796261][ T9076] loop5: detected capacity change from 0 to 512 [ 538.026175][ T9081] Device name cannot be null; rc = [-22] [ 538.575005][ T9076] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 541.137581][ T9114] tipc: Enabled bearer , priority 0 [ 541.145979][ T9114] device syzkaller0 entered promiscuous mode [ 542.239360][ T23] tipc: Node number set to 3180757863 [ 542.265107][ T9114] tipc: Resetting bearer [ 542.286935][ T9111] tipc: Resetting bearer [ 542.646335][ T9111] tipc: Disabling bearer [ 542.916448][ T9121] tipc: Failed to obtain node identity [ 542.922067][ T9121] tipc: Enabling of bearer rejected, failed to enable media [ 545.518000][ T9163] fuse: Bad value for 'fd' [ 548.035448][ T9183] tipc: Enabling of bearer rejected, failed to enable media [ 549.100123][ T9211] ksmbd: Unknown IPC event: 6, ignore. [ 552.425334][ T9223] fuse: Unknown parameter 'user_id00000000000000000000' [ 555.079022][ T9255] tipc: Enabling of bearer rejected, failed to enable media [ 557.017743][ T9282] fuse: Unknown parameter 'user_id00000000000000000000' [ 561.320139][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 562.046159][ T9324] tipc: Started in network mode [ 562.234656][ T9324] tipc: Node identity 2a34a4e16bd3, cluster identity 4711 [ 562.278083][ T9324] tipc: Enabled bearer , priority 0 [ 562.317524][ T9328] device syzkaller0 entered promiscuous mode [ 562.449490][ T9333] CIFS mount error: No usable UNC path provided in device string! [ 562.449490][ T9333] [ 562.459820][ T9333] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 562.647638][ T9322] tipc: Resetting bearer [ 562.967102][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.973728][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.523446][ T9336] fuse: Unknown parameter 'user_id00000000000000000000' [ 563.707671][ T9300] tipc: Node number set to 1105700065 [ 563.735490][ T9322] tipc: Disabling bearer [ 566.481714][ T9360] binder: BINDER_SET_CONTEXT_MGR already set [ 566.487974][ T9360] binder: 9359:9360 ioctl 4018620d 2000000002c0 returned -16 [ 568.498407][ T4427] Bluetooth: hci2: command 0x0401 tx timeout [ 569.953648][ T9385] fuse: Bad value for 'fd' [ 570.503352][ T9395] loop2: detected capacity change from 0 to 512 [ 570.661766][ T9395] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 570.693679][ T9399] tipc: Enabled bearer , priority 0 [ 570.703618][ T9399] device syzkaller0 entered promiscuous mode [ 570.733940][ T9399] tipc: Resetting bearer [ 570.795126][ T9398] tipc: Resetting bearer [ 570.862468][ T9398] tipc: Disabling bearer [ 574.939347][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'. [ 577.994092][ T9464] tipc: Enabled bearer , priority 0 [ 578.105116][ T9464] tipc: Resetting bearer [ 578.925429][ T9460] tipc: Disabling bearer [ 583.320246][ T9505] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1111'. [ 585.993474][ T9536] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1117'. [ 586.072870][ T2287] Bluetooth: hci0: command 0x0406 tx timeout [ 586.647070][ T9543] ksmbd: Unknown IPC event: 6, ignore. [ 590.447458][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1122'. [ 599.677525][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1139'. [ 601.406733][ T9664] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1145'. [ 601.450164][ T9669] fuse: Unknown parameter 'user_i00000000000000000000000' [ 603.926031][ T144] kworker/dying (144) used greatest stack depth: 20768 bytes left [ 605.251450][ T9705] xt_nat: multiple ranges no longer supported [ 605.906678][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1154'. [ 606.238320][ T9709] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1154'. [ 606.949233][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 607.133753][ T9728] fuse: Unknown parameter 'user_i00000000000000000000000' [ 607.144240][ T9729] CIFS mount error: No usable UNC path provided in device string! [ 607.144240][ T9729] [ 607.220559][ T9729] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 609.449977][ T23] Bluetooth: hci2: command 0x0401 tx timeout [ 610.872500][ T9748] tipc: Enabled bearer , priority 0 [ 610.941024][ T9748] device syzkaller0 entered promiscuous mode [ 611.118625][ T9753] xt_nat: multiple ranges no longer supported [ 611.217426][ T9748] tipc: Resetting bearer [ 611.319784][ T9747] tipc: Resetting bearer [ 611.377803][ T9747] tipc: Disabling bearer [ 611.423387][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1166'. [ 611.444472][ T9761] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1166'. [ 611.468758][ T9760] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 611.493251][ T9760] bond0: (slave lo): Error: Device can not be enslaved while up [ 611.607435][ T4276] Bluetooth: (null): Invalid header checksum [ 611.663576][ T4276] Bluetooth: (null): Invalid header checksum [ 613.607368][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 613.830610][ T9798] binder: BINDER_SET_CONTEXT_MGR already set [ 613.836898][ T9798] binder: 9789:9798 ioctl 4018620d 2000000002c0 returned -16 [ 615.848718][ T6345] Bluetooth: hci2: command 0x0401 tx timeout [ 616.133868][ T9805] xt_nat: multiple ranges no longer supported [ 617.390712][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 617.683116][ T9832] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 619.318229][ T9832] bond0: (slave lo): Error: Device can not be enslaved while up [ 619.374530][ T9841] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1184'. [ 620.084765][ T9847] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1186'. [ 620.115187][ T9852] fuse: Unknown parameter 'fd0x0000000000000003' [ 621.643963][ T9879] xt_nat: multiple ranges no longer supported [ 621.972985][ T9883] binder: 9875:9883 ioctl c0306201 2000000003c0 returned -22 [ 624.038559][ T6345] Bluetooth: hci2: command 0x0401 tx timeout [ 625.758830][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.765240][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.943905][ T9914] fuse: Unknown parameter 'fd0x0000000000000003' [ 627.316875][ T9923] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1201'. [ 628.472243][ T9950] xt_nat: multiple ranges no longer supported [ 628.764504][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 628.770658][ T9955] binder: 9943:9955 ioctl 4018620d 2000000002c0 returned -16 [ 630.804546][ T21] Bluetooth: hci2: command 0x0401 tx timeout [ 631.170649][ T9980] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 633.404093][ T9992] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1213'. [ 633.770405][ T9992] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1213'. [ 635.187652][T10016] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1218'. [ 635.270746][T10016] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1218'. [ 635.448444][T10020] xt_nat: multiple ranges no longer supported [ 636.621747][T10032] binder: BINDER_SET_CONTEXT_MGR already set [ 636.627879][T10032] binder: 10026:10032 ioctl 4018620d 2000000002c0 returned -16 [ 638.655341][ T6345] Bluetooth: hci2: command 0x0401 tx timeout [ 641.468058][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 642.979172][T10086] xt_nat: multiple ranges no longer supported [ 643.862844][T10091] xt_nat: multiple ranges no longer supported [ 644.678718][T10095] tipc: Enabling of bearer rejected, failed to enable media [ 646.736580][T10120] binder: 10110:10120 ioctl c0306201 2000000003c0 returned -22 [ 649.181785][ T9300] Bluetooth: hci2: command 0x0401 tx timeout [ 651.592713][T10156] xt_nat: multiple ranges no longer supported [ 652.116825][T10168] tipc: Enabling of bearer rejected, failed to enable media [ 654.770327][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 658.535232][T10228] xt_nat: multiple ranges no longer supported [ 658.838796][T10238] CIFS mount error: No usable UNC path provided in device string! [ 658.838796][T10238] [ 658.848946][T10238] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 659.223825][T10251] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1264'. [ 659.378967][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1262'. [ 659.424609][T10257] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1262'. [ 660.656088][T10267] tipc: Enabled bearer , priority 0 [ 661.273577][T10267] device syzkaller0 entered promiscuous mode [ 661.416072][T10265] tipc: Resetting bearer [ 662.959837][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1268'. [ 663.212099][ T4247] tipc: Node number set to 763390276 [ 663.286088][T10265] tipc: Disabling bearer [ 663.795620][T10301] CIFS mount error: No usable UNC path provided in device string! [ 663.795620][T10301] [ 663.806154][T10301] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 664.878757][T10303] xt_nat: multiple ranges no longer supported [ 665.126044][T10312] binder: 10304:10312 ioctl c0306201 2000000003c0 returned -22 [ 667.124517][ T13] Bluetooth: hci2: command 0x0401 tx timeout [ 667.314113][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 671.415534][T10355] tipc: Enabled bearer , priority 0 [ 671.422898][T10355] device syzkaller0 entered promiscuous mode [ 671.440942][T10348] tipc: Resetting bearer [ 672.441491][T10348] tipc: Disabling bearer [ 673.322890][T10381] CIFS mount error: No usable UNC path provided in device string! [ 673.322890][T10381] [ 673.333416][T10381] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 674.007017][T10361] binder: 10360:10361 ioctl c0306201 2000000003c0 returned -22 [ 674.056261][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1291'. [ 675.966246][ T21] Bluetooth: hci2: command 0x0401 tx timeout [ 676.346684][T10425] xt_nat: multiple ranges no longer supported [ 680.230439][T10470] binder: BINDER_SET_CONTEXT_MGR already set [ 680.236616][T10470] binder: 10463:10470 ioctl 4018620d 2000000002c0 returned -16 [ 681.009699][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 682.435494][T10469] CIFS mount error: No usable UNC path provided in device string! [ 682.435494][T10469] [ 682.445701][T10469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 683.929781][T10487] xt_nat: multiple ranges no longer supported [ 685.102518][T10500] fuse: Bad value for 'fd' [ 685.848169][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.854705][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.916769][T10515] CIFS mount error: No usable UNC path provided in device string! [ 686.916769][T10515] [ 686.927180][T10515] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 688.747667][T10535] binder: BINDER_SET_CONTEXT_MGR already set [ 688.753853][T10535] binder: 10528:10535 ioctl 4018620d 2000000002c0 returned -16 [ 690.875372][T10549] xt_nat: multiple ranges no longer supported [ 690.940372][ T4427] Bluetooth: hci2: command 0x0401 tx timeout [ 691.415807][T10554] fuse: Bad value for 'fd' [ 695.662263][T10589] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 698.229264][T10607] tipc: Failed to obtain node identity [ 698.235091][T10607] tipc: Enabling of bearer rejected, failed to enable media [ 700.241164][T10626] binder: 10618:10626 ioctl c0306201 2000000003c0 returned -22 [ 702.880391][ T6345] Bluetooth: hci2: command 0x0401 tx timeout [ 703.745161][T10642] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 703.754495][T10642] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 703.763991][T10642] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 703.778165][T10642] syz.2.1343 (10642) used greatest stack depth: 18400 bytes left [ 703.844642][ T26] audit: type=1800 audit(1753862281.419:5): pid=10642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1343" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 706.465049][T10660] fuse: Unknown parameter 'fd0x0000000000000003' [ 706.569107][T10663] tipc: Enabled bearer , priority 0 [ 707.494429][T10676] ksmbd: Unknown IPC event: 6, ignore. [ 710.436046][T10688] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1353'. [ 711.179362][T10690] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 711.189113][T10690] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 711.199027][T10690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 711.211284][T10690] syz.2.1352 (10690) used greatest stack depth: 18080 bytes left [ 711.414502][ T26] audit: type=1800 audit(1753862288.859:6): pid=10690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1352" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 712.316785][T10703] xt_hashlimit: size too large, truncated to 1048576 [ 721.314634][T10782] xt_hashlimit: size too large, truncated to 1048576 [ 726.066044][T10829] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1385'. [ 732.896729][T10898] xt_hashlimit: size too large, truncated to 1048576 [ 734.699225][T10909] ksmbd: Unknown IPC event: 6, ignore. [ 738.661301][T10934] tipc: Enabling of bearer rejected, already enabled [ 740.943099][T10950] ksmbd: Unknown IPC event: 6, ignore. [ 744.029878][T10974] tipc: Enabled bearer , priority 0 [ 747.297060][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.303575][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.225252][T11091] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 761.141278][T11144] CIFS mount error: No usable UNC path provided in device string! [ 761.141278][T11144] [ 761.151538][T11144] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 764.418204][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1459'. [ 767.781508][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 768.195254][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'. [ 780.524607][ T4427] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 781.775348][ T4427] usb 6-1: Using ep0 maxpacket: 16 [ 783.216212][ T4427] usb 6-1: unable to read config index 0 descriptor/all [ 783.223333][ T4427] usb 6-1: can't read configurations, error -71 [ 786.824637][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 790.363241][ T4878] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 790.676634][T11406] capability: warning: `syz.8.1520' uses 32-bit capabilities (legacy support in use) [ 795.964518][ T13] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 796.294488][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 796.544634][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.581666][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 796.661938][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.857040][ T13] usb 3-1: config 0 descriptor?? [ 797.304576][ T13] usb 3-1: can't set config #0, error -71 [ 797.646020][ T13] usb 3-1: USB disconnect, device number 19 [ 798.643693][T11483] tipc: Failed to obtain node identity [ 798.649293][T11483] tipc: Enabling of bearer rejected, failed to enable media [ 799.920866][T11493] ksmbd: Unknown IPC event: 6, ignore. [ 800.059507][T11504] binder: BINDER_SET_CONTEXT_MGR already set [ 800.065821][T11504] binder: 11498:11504 ioctl 4018620d 2000000002c0 returned -16 [ 803.856742][T11522] autofs4:pid:11522:autofs_fill_super: called with bogus options [ 803.917664][ T4261] Bluetooth: hci2: command 0x0401 tx timeout [ 804.741926][T11536] xt_hashlimit: size too large, truncated to 1048576 [ 805.215526][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 805.464466][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 805.588088][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.608852][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 805.636541][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.679910][ T13] usb 4-1: config 0 descriptor?? [ 805.954831][ T13] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 808.020254][ T3546] bcm5974 4-1:0.0: could not read from device [ 808.112376][ T13] usb 4-1: USB disconnect, device number 16 [ 808.124431][ T3546] bcm5974 4-1:0.0: could not read from device [ 808.133048][ T3546] bcm5974 4-1:0.0: could not read from device [ 808.176811][T11552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1556'. [ 808.206587][T11552] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1556'. [ 808.231960][ T3546] bcm5974 4-1:0.0: could not read from device [ 808.353152][T11555] binder: 11551:11555 ioctl c0306201 2000000003c0 returned -22 [ 808.949461][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.958314][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.185602][T11578] autofs4:pid:11578:autofs_fill_super: called with bogus options [ 810.414635][ T13] Bluetooth: hci2: command 0x0401 tx timeout [ 814.566849][T11608] ALSA: seq fatal error: cannot create timer (-22) [ 814.584415][ T4296] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 814.883304][T11625] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1572'. [ 814.904590][T11623] binder: 11612:11623 ioctl c0306201 2000000003c0 returned -22 [ 814.954384][ T4296] usb 9-1: Using ep0 maxpacket: 16 [ 815.265668][T11635] autofs4:pid:11635:autofs_fill_super: called with bogus options [ 815.914615][ T4296] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.050633][ T4296] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 816.070596][ T4296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.242328][ T4296] usb 9-1: config 0 descriptor?? [ 817.018645][ T13] Bluetooth: hci2: command 0x0401 tx timeout [ 817.074513][ T4296] usb 9-1: can't set config #0, error -71 [ 817.100322][ T4296] usb 9-1: USB disconnect, device number 5 [ 817.112479][T11648] autofs4:pid:11648:autofs_fill_super: called with bogus options [ 819.718824][T11665] xt_hashlimit: size too large, truncated to 1048576 [ 820.444636][T11677] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1583'. [ 823.190713][T11696] ksmbd: Unknown IPC event: 6, ignore. [ 825.902047][T11702] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1588'. [ 825.933994][T11702] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1588'. [ 829.238108][T11724] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 830.938543][T11738] autofs4:pid:11738:autofs_fill_super: called with bogus options [ 831.875870][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 832.111000][T11744] autofs4:pid:11744:autofs_fill_super: called with bogus options [ 835.509156][T11766] ksmbd: Unknown IPC event: 6, ignore. [ 838.525292][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1606'. [ 840.298118][T11783] ALSA: seq fatal error: cannot create timer (-22) [ 841.782082][T11794] ALSA: seq fatal error: cannot create timer (-22) [ 841.958700][T11803] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1615'. [ 842.091787][T11809] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1616'. [ 842.186753][T11809] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1616'. [ 842.264842][T11811] ALSA: seq fatal error: cannot create timer (-22) [ 843.181918][T11819] xt_nat: multiple ranges no longer supported [ 843.793925][T11829] ksmbd: Unknown IPC event: 6, ignore. [ 847.507798][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1624'. [ 851.525233][ T13] Bluetooth: hci2: command 0x0401 tx timeout [ 852.693781][T11875] autofs4:pid:11875:autofs_fill_super: called with bogus options [ 853.484642][T11879] ksmbd: Unknown IPC event: 6, ignore. [ 855.732075][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 856.713573][T11865] chnl_net:caif_netlink_parms(): no params data found [ 857.775156][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 859.326838][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 859.534413][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.555967][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.586640][T11865] device bridge_slave_0 entered promiscuous mode [ 859.597268][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.654725][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.683664][T11865] device bridge_slave_1 entered promiscuous mode [ 859.817640][ T9369] Bluetooth: hci2: command 0x0401 tx timeout [ 859.944208][T11931] autofs4:pid:11931:autofs_fill_super: called with bogus options [ 860.654276][T11932] ksmbd: Unknown IPC event: 6, ignore. [ 861.284636][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 861.766519][T11865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.099819][T11865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.105709][T11865] team0: Port device team_slave_0 added [ 863.237281][T11865] team0: Port device team_slave_1 added [ 863.374542][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 864.671545][T11865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.679236][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.892130][T11865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.718963][T11865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.731121][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.758139][T11865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.010232][T11865] device hsr_slave_0 entered promiscuous mode [ 867.032673][T11865] device hsr_slave_1 entered promiscuous mode [ 867.150058][T11865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 867.172323][T11865] Cannot create hsr debugfs directory [ 869.885809][ T4803] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.998101][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1654'. [ 870.013193][T11987] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1658'. [ 870.163668][ T4803] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.184858][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.191281][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.254013][ T4803] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.729101][ T4803] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.338559][ T4803] tipc: Disabling bearer [ 876.376418][ T4803] tipc: Left network mode [ 877.863141][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 880.644160][T12078] xt_nat: multiple ranges no longer supported [ 885.274114][T12126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1687'. [ 885.674038][T12142] xt_nat: multiple ranges no longer supported [ 886.792329][T12154] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1690'. [ 888.108715][T12174] ALSA: seq fatal error: cannot create timer (-22) [ 888.868080][T11865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 889.620630][T12185] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 889.630092][T12185] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 889.639743][T12185] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 889.686929][T11865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 889.831249][T11865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 890.034305][T12199] ALSA: seq fatal error: cannot create timer (-22) [ 890.173230][T11865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 891.748327][ T4803] device hsr_slave_0 left promiscuous mode [ 891.808016][ T4803] device hsr_slave_1 left promiscuous mode [ 891.828554][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.904592][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.939105][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.964553][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.001894][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 893.095473][ T4803] device bridge_slave_1 left promiscuous mode [ 893.132203][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.274317][ T4803] device bridge_slave_0 left promiscuous mode [ 893.553144][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.594677][ T4803] device veth1_macvtap left promiscuous mode [ 893.629208][ T4803] device veth0_macvtap left promiscuous mode [ 893.636244][ T4803] device veth1_vlan left promiscuous mode [ 893.642367][ T4803] device veth0_vlan left promiscuous mode [ 893.725223][T12235] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1705'. [ 895.146887][T12244] autofs4:pid:12244:autofs_fill_super: called with bogus options [ 896.649681][ T4803] team0 (unregistering): Port device team_slave_1 removed [ 896.886199][ T4803] team0 (unregistering): Port device team_slave_0 removed [ 897.855586][ T4803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.000218][ T4803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.416692][ T4803] bond0 (unregistering): Released all slaves [ 899.636690][T12271] ksmbd: Unknown IPC event: 6, ignore. [ 901.237722][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 902.367556][T11865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.409017][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 902.463413][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 902.509157][T11865] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.622240][T12278] binder: BINDER_SET_CONTEXT_MGR already set [ 902.628500][T12278] binder: 12274:12278 ioctl 4018620d 2000000002c0 returned -16 [ 903.516375][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 903.555287][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.622163][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.629351][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.894943][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 904.644718][ T4247] Bluetooth: hci2: command 0x0401 tx timeout [ 905.929150][T12312] CIFS mount error: No usable UNC path provided in device string! [ 905.929150][T12312] [ 905.939297][T12312] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 906.564553][ T1107] Bluetooth: hci5: command 0x0409 tx timeout [ 906.866577][T12295] chnl_net:caif_netlink_parms(): no params data found [ 908.194525][T12342] binder: BINDER_SET_CONTEXT_MGR already set [ 908.200621][T12342] binder: 12334:12342 ioctl 4018620d 2000000002c0 returned -16 [ 908.644645][ T9300] Bluetooth: hci5: command 0x041b tx timeout [ 909.965517][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.137003][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.163531][T12295] device bridge_slave_0 entered promiscuous mode [ 910.340250][T12051] Bluetooth: hci2: command 0x0401 tx timeout [ 910.399014][T12295] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.650780][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.579683][ T4586] Bluetooth: hci5: command 0x040f tx timeout [ 911.600458][T12358] xt_hashlimit: size too large, truncated to 1048576 [ 912.049165][T12295] device bridge_slave_1 entered promiscuous mode [ 913.024053][T12355] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 913.033848][T12355] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 913.043670][T12355] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 914.017371][ T4261] Bluetooth: hci5: command 0x0419 tx timeout [ 914.770931][T12295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.686738][T12295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.234724][T12405] binder: 12401:12405 ioctl c0306201 2000000003c0 returned -22 [ 918.361644][T12295] team0: Port device team_slave_0 added [ 918.613805][T12295] team0: Port device team_slave_1 added [ 919.071300][T12295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.158238][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.861580][T12051] Bluetooth: hci2: command 0x0401 tx timeout [ 920.869947][T12295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.917749][T12295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.094811][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.127133][T12295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.052547][T12449] ksmbd: Unknown IPC event: 6, ignore. [ 926.224259][T12295] device hsr_slave_0 entered promiscuous mode [ 926.238901][T12295] device hsr_slave_1 entered promiscuous mode [ 926.390489][T12295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.398251][T12295] Cannot create hsr debugfs directory [ 926.518200][T12457] autofs4:pid:12457:autofs_fill_super: called with bogus options [ 927.931935][T12464] binder: 12460:12464 ioctl c0306201 2000000003c0 returned -22 [ 930.045373][ T1107] Bluetooth: hci2: command 0x0401 tx timeout [ 931.607805][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.695192][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.694127][T12512] autofs4:pid:12512:autofs_fill_super: called with bogus options [ 934.510533][T12513] ksmbd: Unknown IPC event: 6, ignore. [ 937.444757][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1764'. [ 937.460607][T12295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 937.535918][T12295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 937.638161][T12295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 938.326425][T12295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 939.379296][T12533] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 939.388708][T12533] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 939.398200][T12533] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 941.367209][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.459333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 941.577612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 941.711208][T12295] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.842558][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 941.895181][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 941.903830][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.911054][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.066546][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 942.095505][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 942.119571][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.126780][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.164178][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 942.218896][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 942.247018][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 942.328183][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 942.520169][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 942.854930][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 942.926776][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 942.952415][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 942.967052][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 943.043929][T12295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 943.111146][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 943.161663][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 943.179689][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 943.245144][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 944.366867][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 945.252389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 945.300915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 945.589324][T12295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.449540][T12618] xt_nat: multiple ranges no longer supported [ 947.118656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 947.285303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 947.343618][T12295] device veth0_vlan entered promiscuous mode [ 947.445515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 948.175915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 948.546089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 948.568819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 948.748324][T12295] device veth1_vlan entered promiscuous mode [ 949.542996][T12295] device veth0_macvtap entered promiscuous mode [ 949.612992][T12295] device veth1_macvtap entered promiscuous mode [ 949.815907][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.929259][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.939232][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.950700][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.960939][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.971719][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.077775][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.088363][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.119144][T12295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.332902][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 950.346599][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 950.355827][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 950.367567][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 950.381002][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 950.824150][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.880575][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.890583][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.901174][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.911529][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.922051][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.932452][T12295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.942964][T12295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.957749][T12295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.982205][T12295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.001769][T12295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.054789][T12295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.109351][T12295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.145836][T12649] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 951.155321][T12649] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 951.164974][T12649] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 951.320191][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 951.338202][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 951.348127][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 952.255100][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.263849][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.356651][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 952.378890][T10283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.436577][T10283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.513363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 959.556469][ T4803] device hsr_slave_0 left promiscuous mode [ 959.665513][T12756] ksmbd: Unknown IPC event: 6, ignore. [ 962.140199][ T4803] device hsr_slave_1 left promiscuous mode [ 962.983704][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.071488][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.025732][ T4803] device bridge_slave_1 left promiscuous mode [ 964.032015][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.710485][ T4803] device bridge_slave_0 left promiscuous mode [ 964.727089][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.821622][ T4803] team0 (unregistering): Port device team_slave_1 removed [ 966.955259][ T4803] team0 (unregistering): Port device team_slave_0 removed [ 967.143415][ T4803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.178402][ T4803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.209127][ T4803] bond0 (unregistering): Released all slaves [ 968.268232][T12817] xt_nat: multiple ranges no longer supported [ 970.371392][T12830] CIFS mount error: No usable UNC path provided in device string! [ 970.371392][T12830] [ 970.381643][T12830] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 971.627571][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1822'. [ 972.395885][T12865] xt_nat: multiple ranges no longer supported [ 974.035737][T12879] xt_nat: multiple ranges no longer supported [ 975.319263][T12895] ksmbd: Unknown IPC event: 6, ignore. [ 978.269178][T12907] CIFS mount error: No usable UNC path provided in device string! [ 978.269178][T12907] [ 978.279520][T12907] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 982.182977][T12943] xt_nat: multiple ranges no longer supported [ 988.900693][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1857'. [ 988.944455][ T13] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 990.054755][ T13] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 990.204455][ T13] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 990.250570][ T13] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 991.076879][T13015] binder: BINDER_SET_CONTEXT_MGR already set [ 991.083024][T13015] binder: 13004:13015 ioctl 4018620d 2000000002c0 returned -16 [ 992.776804][ T13] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.047124][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.056516][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.544551][ T13] usb 10-1: can't set config #27, error -71 [ 993.571522][ T13] usb 10-1: USB disconnect, device number 2 [ 997.225033][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1872'. [ 998.736197][T13084] binder: 13081:13084 ioctl c0306201 2000000003c0 returned -22 [ 999.902695][T13094] tipc: Failed to obtain node identity [ 999.908491][T13094] tipc: Enabling of bearer rejected, failed to enable media [ 1002.357898][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1885'. [ 1004.588921][T13146] ksmbd: Unknown IPC event: 6, ignore. [ 1006.920728][T13170] binder: BINDER_SET_CONTEXT_MGR already set [ 1006.926896][T13170] binder: 13165:13170 ioctl 4018620d 2000000002c0 returned -16 [ 1009.785760][T13181] ALSA: seq fatal error: cannot create timer (-22) [ 1013.203601][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 1015.806857][T13240] binder: 13233:13240 ioctl c0306201 2000000003c0 returned -22 [ 1022.415335][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 1022.570259][T13329] binder: 13319:13329 ioctl c0306201 2000000003c0 returned -22 [ 1026.209288][T13344] xt_nat: multiple ranges no longer supported [ 1028.019624][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1933'. [ 1028.324443][ T1107] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1029.034419][ T1107] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.787498][ T1107] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1029.797743][ T1107] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1029.806878][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.834587][T13354] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1030.964447][ T1107] Bluetooth: hci5: command 0x0406 tx timeout [ 1031.960652][ T1107] usb 3-1: USB disconnect, device number 20 [ 1032.318706][T11703] udevd[11703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.512676][T13412] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.518817][T13412] binder: 13404:13412 ioctl 4018620d 2000000002c0 returned -16 [ 1034.446914][T13419] xt_nat: multiple ranges no longer supported [ 1035.387230][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1947'. [ 1041.904354][ T1107] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1042.141749][T13476] xt_nat: multiple ranges no longer supported [ 1042.295392][ T1107] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1042.391836][ T1107] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1042.555701][ T1107] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1042.741715][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.834638][T13465] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1044.591589][T13486] binder: 13479:13486 ioctl c0306201 2000000003c0 returned -22 [ 1045.373591][ T13] usb 3-1: USB disconnect, device number 21 [ 1046.584993][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 1046.911935][T13506] ksmbd: Unknown IPC event: 6, ignore. [ 1052.720167][T13538] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.726580][T13538] binder: 13535:13538 ioctl 4018620d 2000000002c0 returned -16 [ 1054.372910][ T4247] Bluetooth: hci1: command 0x0409 tx timeout [ 1054.487077][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.493424][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.028037][ T4247] Bluetooth: hci1: command 0x041b tx timeout [ 1058.274371][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 1058.469212][T13585] CIFS mount error: No usable UNC path provided in device string! [ 1058.469212][T13585] [ 1058.479937][T13585] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1058.784288][ T1107] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1059.258295][ T4367] Bluetooth: hci1: command 0x040f tx timeout [ 1059.814419][T13598] xt_nat: multiple ranges no longer supported [ 1060.076017][T13520] chnl_net:caif_netlink_parms(): no params data found [ 1060.104357][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1060.524971][ T1107] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1060.587472][ T1107] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1060.621093][ T1107] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1060.647714][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.781029][T13581] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1060.883744][T13612] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1983'. [ 1061.314788][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.334355][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1061.344666][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1061.353858][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.447743][T13593] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1061.907718][ T1107] usb 1-1: USB disconnect, device number 7 [ 1062.716612][ T4247] Bluetooth: hci1: command 0x0419 tx timeout [ 1063.894993][ T4247] usb 3-1: USB disconnect, device number 22 [ 1065.927559][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.974343][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.999028][T13520] device bridge_slave_0 entered promiscuous mode [ 1066.199738][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 1066.241727][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.303181][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.528442][T13520] device bridge_slave_1 entered promiscuous mode [ 1067.178797][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.917420][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.007630][T13671] ALSA: seq fatal error: cannot create timer (-22) [ 1069.159917][T13657] overlayfs: failed to resolve './file0': -2 [ 1069.417279][T13520] team0: Port device team_slave_0 added [ 1069.595752][T13520] team0: Port device team_slave_1 added [ 1069.754281][T11224] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1069.847066][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.854066][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.021314][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.079646][T13691] binder: BINDER_SET_CONTEXT_MGR already set [ 1070.086106][T13691] binder: 13688:13691 ioctl 4018620d 2000000002c0 returned -16 [ 1070.135097][T11224] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1070.197511][T11224] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1070.349307][T11224] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1070.456016][T11224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.656351][T13680] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1072.267732][T11224] usb 3-1: USB disconnect, device number 23 [ 1072.364119][T13557] udevd[13557]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.056473][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.078506][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.172827][T13705] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2003'. [ 1073.391166][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.547669][ T4427] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1073.781024][T13520] device hsr_slave_0 entered promiscuous mode [ 1073.804631][ T4427] usb 6-1: Using ep0 maxpacket: 16 [ 1073.924424][ T4427] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.958463][ T4427] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1074.017497][T13520] device hsr_slave_1 entered promiscuous mode [ 1074.025949][ T4427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.043471][T13520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1074.053293][T13520] Cannot create hsr debugfs directory [ 1074.245289][ T4427] usb 6-1: config 0 descriptor?? [ 1074.702141][ T4427] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input34 [ 1075.584241][T11224] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1076.044566][T11224] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1076.076160][T11224] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1076.086722][ T3546] bcm5974 6-1:0.0: could not read from device [ 1076.106972][T11224] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1076.124279][T11224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.165780][T13722] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1076.177132][ T4427] usb 6-1: USB disconnect, device number 19 [ 1077.515601][ T2287] usb 1-1: USB disconnect, device number 8 [ 1077.662396][T13750] binder: 13749:13750 ioctl c0306201 2000000003c0 returned -22 [ 1078.740929][T13761] xt_nat: multiple ranges no longer supported [ 1081.894470][ T2287] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1082.274354][ T2287] usb 1-1: Using ep0 maxpacket: 16 [ 1082.397859][ T2287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.429051][ T2287] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1082.445551][ T2287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.505181][ T2287] usb 1-1: config 0 descriptor?? [ 1082.557744][ T2287] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 1082.566349][T13520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1082.611020][T13520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1082.633613][T13520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1082.687811][T13520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1082.784532][ T3546] bcm5974 1-1:0.0: could not read from device [ 1084.930451][ T2287] usb 1-1: USB disconnect, device number 9 [ 1086.130785][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.263885][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1086.294969][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1086.323188][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.577380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1087.375935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1087.431891][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.439043][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.545553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1087.650373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1087.665311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1087.685700][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.692811][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.744237][ T23] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1087.805639][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1087.820332][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1087.887130][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1087.933061][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1088.022088][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1088.054032][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1088.134560][ T23] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1088.148289][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1088.163198][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1088.167192][ T23] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1088.174103][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1088.207125][T13520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.225337][ T23] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1088.245890][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.253557][T13520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1088.282002][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1088.294808][T13840] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1088.346345][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1088.951072][T13172] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1089.478441][T13172] usb 3-1: Using ep0 maxpacket: 16 [ 1089.929652][ T4803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.034445][T13172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.050165][T13172] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1090.692707][T13172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.717488][T13172] usb 3-1: config 0 descriptor?? [ 1090.748818][ T4803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.943743][T13172] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 1090.972343][T11224] usb 10-1: USB disconnect, device number 3 [ 1091.300543][ T4803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.711756][T13895] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.718615][T13895] binder: 13890:13895 ioctl 4018620d 2000000002c0 returned -16 [ 1092.800456][ T4803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.912802][T13520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.090524][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1093.121109][ T6345] usb 3-1: USB disconnect, device number 24 [ 1093.127278][ T3546] bcm5974 3-1:0.0: could not read from device [ 1094.024022][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1094.299741][T13909] CIFS mount error: No usable UNC path provided in device string! [ 1094.299741][T13909] [ 1094.309863][T13909] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1094.955229][ T4803] tipc: Left network mode [ 1095.448732][T13929] xt_nat: multiple ranges no longer supported [ 1096.211604][T13934] ALSA: seq fatal error: cannot create timer (-22) [ 1096.547479][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1096.593449][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1096.659719][T13946] ALSA: seq fatal error: cannot create timer (-22) [ 1097.163509][T13520] device veth0_vlan entered promiscuous mode [ 1097.224232][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1097.297452][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1097.754994][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1098.348635][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1098.390619][T13520] device veth1_vlan entered promiscuous mode [ 1098.489241][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1098.505076][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1098.545250][T13520] device veth0_macvtap entered promiscuous mode [ 1098.659403][T13520] device veth1_macvtap entered promiscuous mode [ 1098.704302][ T2287] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1098.828661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1098.837830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1098.986131][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.014499][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.024968][ T2287] usb 10-1: Using ep0 maxpacket: 16 [ 1099.048670][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.102959][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.145129][ T2287] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.184615][ T2287] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1099.203373][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.214594][ T2287] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.228297][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.239192][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.250919][ T2287] usb 10-1: config 0 descriptor?? [ 1099.257205][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.267991][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.286859][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.473939][ T2287] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input37 [ 1099.485222][T13520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.507825][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1099.558036][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1100.586171][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.714383][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.767906][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.988397][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.074219][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.114459][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.140597][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.171107][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.201645][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.225864][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.259832][T13520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.367146][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1101.400090][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1101.415167][ T3546] bcm5974 10-1:0.0: could not read from device [ 1101.446591][T14020] bcm5974 10-1:0.0: could not read from device [ 1101.477069][T13520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.486719][ T3546] bcm5974 10-1:0.0: could not read from device [ 1101.515206][T13520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.575356][T13520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.631675][T13520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.919949][ T2287] usb 10-1: USB disconnect, device number 4 [ 1102.211862][ T3546] bcm5974 10-1:0.0: could not read from device [ 1102.643245][ T4803] device hsr_slave_0 left promiscuous mode [ 1102.679486][ T4803] device hsr_slave_1 left promiscuous mode [ 1102.842398][T14033] overlayfs: failed to resolve './file1': -2 [ 1102.904366][ T4367] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1102.909766][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 1102.939011][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.988310][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.333070][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.362543][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.520244][ T4367] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1104.991904][ T4367] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1105.137881][ T4367] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1105.278323][ T4367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.737406][ T4247] Bluetooth: hci2: command 0x0401 tx timeout [ 1105.826683][ T4803] device veth1_macvtap left promiscuous mode [ 1105.844722][ T4803] device veth0_macvtap left promiscuous mode [ 1105.887572][ T4803] device veth1_vlan left promiscuous mode [ 1105.893444][ T4803] device veth0_vlan left promiscuous mode [ 1106.061984][ T4367] usb 6-1: can't set config #27, error -71 [ 1106.913162][ T4367] usb 6-1: USB disconnect, device number 20 [ 1107.461784][T14073] xt_nat: multiple ranges no longer supported [ 1109.330908][ T4803] team0 (unregistering): Port device team_slave_1 removed [ 1109.354378][T13172] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1109.393654][ T4803] team0 (unregistering): Port device team_slave_0 removed [ 1109.452328][ T4803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.479891][ T4803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.617251][T13172] usb 3-1: Using ep0 maxpacket: 16 [ 1109.650340][ T4803] bond0 (unregistering): Released all slaves [ 1109.664572][ T4878] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1109.734567][T13172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.774682][T13172] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1109.833879][T13172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.842890][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.860796][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.880501][T13172] usb 3-1: config 0 descriptor?? [ 1109.891795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1109.899980][T10283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.910640][T10283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.930284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1110.039987][T13172] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 1110.084914][T13888] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1110.150974][ T4878] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.211185][ T4878] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.270567][ T4878] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1110.291851][ T4878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.354628][T14101] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1110.564457][T13888] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.600806][T13888] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.673261][T14118] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1966'. [ 1111.469641][T13888] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.469677][T13888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.485282][T14110] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1111.916070][ T3546] bcm5974 3-1:0.0: could not read from device [ 1112.382767][T13172] usb 3-1: USB disconnect, device number 25 [ 1112.388861][ T3546] bcm5974 3-1:0.0: could not read from device [ 1112.640259][ T3546] bcm5974 3-1:0.0: could not read from device [ 1112.776772][T14136] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2081'. [ 1113.304989][ T23] usb 1-1: USB disconnect, device number 10 [ 1113.529723][ C1] ================================================================== [ 1113.538345][ C1] BUG: KASAN: use-after-free in snd_rawmidi_transmit+0x392/0x400 [ 1113.546127][ C1] Read of size 1 at addr ffff88807b6fc018 by task ksoftirqd/1/20 [ 1113.553977][ C1] [ 1113.556318][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.189-syzkaller #0 [ 1113.564385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1113.574452][ C1] Call Trace: [ 1113.577732][ C1] [ 1113.580662][ C1] dump_stack_lvl+0x168/0x230 [ 1113.585350][ C1] ? show_regs_print_info+0x20/0x20 [ 1113.590639][ C1] ? load_image+0x3b0/0x3b0 [ 1113.595144][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1113.600523][ C1] print_address_description+0x60/0x2d0 [ 1113.606075][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 1113.611458][ C1] kasan_report+0xdf/0x130 [ 1113.615886][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 1113.621264][ C1] snd_rawmidi_transmit+0x392/0x400 [ 1113.626484][ C1] snd_usbmidi_standard_output+0x1e4/0xdd0 [ 1113.632293][ C1] ? snd_usbmidi_standard_output+0xdd0/0xdd0 [ 1113.638283][ C1] ? snd_usbmidi_standard_input+0x110/0x110 [ 1113.644188][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 1113.649227][ C1] snd_usbmidi_do_output+0x21e/0x560 [ 1113.654522][ C1] snd_usbmidi_error_timer+0x312/0x660 [ 1113.659984][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 1113.665528][ C1] call_timer_fn+0x16c/0x530 [ 1113.670117][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 1113.675666][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1113.681653][ C1] ? __run_timers+0x7c0/0x7c0 [ 1113.686335][ C1] ? rcu_is_watching+0x11/0xa0 [ 1113.691101][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1113.696313][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1113.701510][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 1113.707056][ C1] __run_timers+0x525/0x7c0 [ 1113.711568][ C1] ? detach_timer+0x2b0/0x2b0 [ 1113.716245][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1113.722228][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1113.727083][ C1] run_timer_softirq+0x63/0xf0 [ 1113.731852][ C1] handle_softirqs+0x328/0x820 [ 1113.736625][ C1] ? run_ksoftirqd+0x98/0xf0 [ 1113.741270][ C1] ? do_softirq+0x200/0x200 [ 1113.745770][ C1] ? run_ksoftirqd+0x75/0xf0 [ 1113.750357][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1113.755552][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1113.760837][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1113.766035][ C1] run_ksoftirqd+0x98/0xf0 [ 1113.770450][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1113.775660][ C1] smpboot_thread_fn+0x4f6/0x970 [ 1113.780609][ C1] kthread+0x436/0x520 [ 1113.784672][ C1] ? cpu_report_death+0x180/0x180 [ 1113.789703][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1113.794290][ C1] ret_from_fork+0x1f/0x30 [ 1113.798713][ C1] [ 1113.801725][ C1] [ 1113.804054][ C1] Allocated by task 14110: [ 1113.808483][ C1] __kasan_kmalloc+0xb5/0xf0 [ 1113.813087][ C1] kvmalloc_node+0x84/0x130 [ 1113.817604][ C1] open_substream+0x29d/0x6c0 [ 1113.822290][ C1] rawmidi_open_priv+0xc4/0x660 [ 1113.827141][ C1] snd_rawmidi_kernel_open+0x1a2/0x240 [ 1113.832602][ C1] midisynth_use+0xd8/0x260 [ 1113.837113][ C1] check_and_subscribe_port+0x669/0xb30 [ 1113.842694][ C1] snd_seq_port_connect+0x256/0x430 [ 1113.847943][ C1] snd_seq_ioctl_subscribe_port+0x32c/0x6f0 [ 1113.853877][ C1] snd_seq_oss_midi_open+0x3a4/0x7c0 [ 1113.859229][ C1] snd_seq_oss_synth_setup_midi+0x129/0x520 [ 1113.865132][ C1] snd_seq_oss_open+0x87a/0xe40 [ 1113.869978][ C1] odev_open+0x63/0x90 [ 1113.874043][ C1] chrdev_open+0x597/0x670 [ 1113.878461][ C1] do_dentry_open+0x7ff/0xf80 [ 1113.883141][ C1] path_openat+0x2682/0x2f30 [ 1113.887724][ C1] do_filp_open+0x1b3/0x3e0 [ 1113.892229][ C1] do_sys_openat2+0x142/0x4a0 [ 1113.896914][ C1] __x64_sys_openat+0x135/0x160 [ 1113.901787][ C1] do_syscall_64+0x4c/0xa0 [ 1113.906202][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1113.912096][ C1] [ 1113.914418][ C1] Freed by task 14128: [ 1113.918474][ C1] kasan_set_track+0x4b/0x70 [ 1113.923072][ C1] kasan_set_free_info+0x1f/0x40 [ 1113.928039][ C1] ____kasan_slab_free+0xd5/0x110 [ 1113.933062][ C1] slab_free_freelist_hook+0xea/0x170 [ 1113.938547][ C1] kfree+0xef/0x2a0 [ 1113.942474][ C1] close_substream+0x360/0x5a0 [ 1113.947236][ C1] rawmidi_release_priv+0xe9/0x170 [ 1113.952353][ C1] snd_rawmidi_kernel_release+0x42/0xa0 [ 1113.957985][ C1] __delete_and_unsubscribe_port+0x280/0x430 [ 1113.964056][ C1] snd_seq_port_disconnect+0x4f5/0x620 [ 1113.969510][ C1] snd_seq_ioctl_unsubscribe_port+0x32c/0x6f0 [ 1113.975576][ C1] snd_seq_oss_midi_close+0x2fc/0x620 [ 1113.980956][ C1] snd_seq_oss_synth_cleanup+0x142/0x540 [ 1113.986583][ C1] snd_seq_oss_release+0xf0/0x2c0 [ 1113.991607][ C1] odev_release+0x52/0x70 [ 1113.995951][ C1] __fput+0x234/0x930 [ 1113.999929][ C1] task_work_run+0x125/0x1a0 [ 1114.004515][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 1114.009889][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1114.015439][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1114.020906][ C1] do_syscall_64+0x58/0xa0 [ 1114.025337][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1114.031235][ C1] [ 1114.033567][ C1] The buggy address belongs to the object at ffff88807b6fc000 [ 1114.033567][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 1114.047617][ C1] The buggy address is located 24 bytes inside of [ 1114.047617][ C1] 4096-byte region [ffff88807b6fc000, ffff88807b6fd000) [ 1114.060894][ C1] The buggy address belongs to the page: [ 1114.066556][ C1] page:ffffea0001edbe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b6f8 [ 1114.076714][ C1] head:ffffea0001edbe00 order:3 compound_mapcount:0 compound_pincount:0 [ 1114.085049][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1114.093042][ C1] raw: 00fff00000010200 0000000000000000 0000000200000001 ffff888016842140 [ 1114.101712][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1114.110288][ C1] page dumped because: kasan: bad access detected [ 1114.116732][ C1] page_owner tracks the page as allocated [ 1114.122473][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4200, ts 149610134695, free_ts 147735550919 [ 1114.142471][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 1114.148033][ C1] __alloc_pages+0x1e1/0x470 [ 1114.152629][ C1] new_slab+0xc0/0x4b0 [ 1114.156703][ C1] ___slab_alloc+0x81e/0xdf0 [ 1114.161306][ C1] __kmalloc+0x1cd/0x330 [ 1114.165581][ C1] tomoyo_realpath_from_path+0x118/0x610 [ 1114.171217][ C1] tomoyo_check_open_permission+0x183/0x360 [ 1114.177646][ C1] security_file_open+0x5e/0xa0 [ 1114.182527][ C1] do_dentry_open+0x322/0xf80 [ 1114.187218][ C1] path_openat+0x2682/0x2f30 [ 1114.191808][ C1] do_filp_open+0x1b3/0x3e0 [ 1114.196315][ C1] do_sys_openat2+0x142/0x4a0 [ 1114.201021][ C1] __x64_sys_openat+0x135/0x160 [ 1114.205885][ C1] do_syscall_64+0x4c/0xa0 [ 1114.210307][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1114.216217][ C1] page last free stack trace: [ 1114.220880][ C1] free_unref_page_prepare+0x637/0x6c0 [ 1114.226346][ C1] free_unref_page+0x94/0x280 [ 1114.231055][ C1] __unfreeze_partials+0x1a5/0x200 [ 1114.236285][ C1] put_cpu_partial+0x12d/0x190 [ 1114.241174][ C1] qlist_free_all+0x35/0x90 [ 1114.245698][ C1] kasan_quarantine_reduce+0x150/0x160 [ 1114.251192][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 1114.256082][ C1] slab_post_alloc_hook+0x4c/0x380 [ 1114.261309][ C1] kmem_cache_alloc_trace+0x103/0x2a0 [ 1114.266707][ C1] netdevice_event+0x324/0x900 [ 1114.271516][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1114.276911][ C1] unregister_netdevice_many+0xf57/0x18f0 [ 1114.282720][ C1] default_device_exit_batch+0x336/0x390 [ 1114.288495][ C1] cleanup_net+0x77b/0xb80 [ 1114.292922][ C1] process_one_work+0x863/0x1000 [ 1114.297859][ C1] worker_thread+0xaa8/0x12a0 [ 1114.302545][ C1] [ 1114.304870][ C1] Memory state around the buggy address: [ 1114.310507][ C1] ffff88807b6fbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1114.318583][ C1] ffff88807b6fbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1114.326831][ C1] >ffff88807b6fc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1114.334912][ C1] ^ [ 1114.339782][ C1] ffff88807b6fc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1114.347845][ C1] ffff88807b6fc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1114.356030][ C1] ================================================================== [ 1114.364262][ C1] Disabling lock debugging due to kernel taint [ 1114.370454][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1114.377736][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B 5.15.189-syzkaller #0 [ 1114.387187][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1114.397377][ C1] Call Trace: [ 1114.400689][ C1] [ 1114.403627][ C1] dump_stack_lvl+0x168/0x230 [ 1114.408353][ C1] ? show_regs_print_info+0x20/0x20 [ 1114.413681][ C1] ? load_image+0x3b0/0x3b0 [ 1114.418214][ C1] panic+0x2c9/0x7f0 [ 1114.422164][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1114.426710][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1114.432621][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1114.437586][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 1114.443048][ C1] check_panic_on_warn+0x80/0xa0 [ 1114.448005][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 1114.453426][ C1] end_report+0x6d/0xf0 [ 1114.457611][ C1] kasan_report+0x102/0x130 [ 1114.462119][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 1114.467519][ C1] snd_rawmidi_transmit+0x392/0x400 [ 1114.472717][ C1] snd_usbmidi_standard_output+0x1e4/0xdd0 [ 1114.478524][ C1] ? snd_usbmidi_standard_output+0xdd0/0xdd0 [ 1114.484511][ C1] ? snd_usbmidi_standard_input+0x110/0x110 [ 1114.490493][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 1114.495515][ C1] snd_usbmidi_do_output+0x21e/0x560 [ 1114.500807][ C1] snd_usbmidi_error_timer+0x312/0x660 [ 1114.506264][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 1114.511813][ C1] call_timer_fn+0x16c/0x530 [ 1114.516403][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 1114.522032][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1114.528167][ C1] ? __run_timers+0x7c0/0x7c0 [ 1114.532881][ C1] ? rcu_is_watching+0x11/0xa0 [ 1114.537746][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1114.542981][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1114.548203][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 1114.553763][ C1] __run_timers+0x525/0x7c0 [ 1114.558272][ C1] ? detach_timer+0x2b0/0x2b0 [ 1114.562946][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1114.568929][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1114.573884][ C1] run_timer_softirq+0x63/0xf0 [ 1114.578790][ C1] handle_softirqs+0x328/0x820 [ 1114.583768][ C1] ? run_ksoftirqd+0x98/0xf0 [ 1114.588409][ C1] ? do_softirq+0x200/0x200 [ 1114.593125][ C1] ? run_ksoftirqd+0x75/0xf0 [ 1114.597749][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1114.603074][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1114.608387][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1114.613586][ C1] run_ksoftirqd+0x98/0xf0 [ 1114.618005][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1114.623341][ C1] smpboot_thread_fn+0x4f6/0x970 [ 1114.628313][ C1] kthread+0x436/0x520 [ 1114.632380][ C1] ? cpu_report_death+0x180/0x180 [ 1114.637405][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1114.642005][ C1] ret_from_fork+0x1f/0x30 [ 1114.646444][ C1] [ 1114.649823][ C1] Kernel Offset: disabled [ 1114.654252][ C1] Rebooting in 86400 seconds..