last executing test programs: 18m19.075707711s ago: executing program 32 (id=206): r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 17m54.599876822s ago: executing program 33 (id=341): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) 17m30.321788099s ago: executing program 34 (id=465): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000180), 0x8000, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17m16.599205527s ago: executing program 35 (id=527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) listen(r0, 0x70000008) 16m46.428280601s ago: executing program 36 (id=718): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0xc000400) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x80000) 16m29.497712249s ago: executing program 37 (id=823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000001c0)="ed", 0x1}], 0x1) sendmmsg$inet(r1, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="04", 0x1}], 0x1}}], 0x2, 0x44801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 16m7.80365897s ago: executing program 38 (id=924): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 15m21.468486396s ago: executing program 39 (id=1085): gettid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 13m50.131393218s ago: executing program 40 (id=1595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/105, 0x69}], 0x1}, 0x0) 13m45.828779521s ago: executing program 41 (id=1608): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 12m27.122753499s ago: executing program 42 (id=2023): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0xeeee0000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x8000000000000000, 0x7, 0x449c, 0x401, 0xa, 0x3, 0x1, 0x10000000000009, 0x4, 0xffffffffffffff81, 0xb218, 0xfffffffffffffff9, 0x0, 0x8000000000000000, 0x7], 0xd000, 0x200800}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m25.614148874s ago: executing program 2 (id=4267): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4m23.574393852s ago: executing program 2 (id=4269): socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/schedstat\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4m23.358486057s ago: executing program 7 (id=4270): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x2d8, 0x1b8, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xff], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 4m23.266551819s ago: executing program 2 (id=4271): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 4m19.722234902s ago: executing program 7 (id=4277): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x58}}, 0x24040084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m19.437785569s ago: executing program 2 (id=4278): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16=r0, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8d0010, 0x0, 0x40, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 4m19.036279078s ago: executing program 7 (id=4279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000003040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 4m18.50411449s ago: executing program 2 (id=4280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 4m17.546290523s ago: executing program 7 (id=4282): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) 4m16.276960052s ago: executing program 2 (id=4285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m16.058410937s ago: executing program 7 (id=4287): landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x40000080806, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20) 4m15.08525826s ago: executing program 7 (id=4288): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 3m41.2916887s ago: executing program 43 (id=4286): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r2, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x7, 0x0, 0x0) 3m41.224977451s ago: executing program 44 (id=4283): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214ff", 0xa) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[], 0x0, 0x22f, &(0x7f0000000300)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x40400) mlockall(0x2) shmat(0x0, &(0x7f00002cc000/0x1000)=nil, 0x7000) 3m40.871445969s ago: executing program 45 (id=4288): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 3m40.655666995s ago: executing program 46 (id=4285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m33.451467965s ago: executing program 6 (id=4396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d24031f005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 2m33.301598309s ago: executing program 9 (id=4397): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2m29.728992282s ago: executing program 9 (id=4400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 2m29.303872362s ago: executing program 9 (id=4401): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2080, 0x0) r2 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xf2082785c25d7116}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x0, 0x0, 0x61, 0x5f, 0x25]}}, &(0x7f0000002200)=""/4110, 0x37, 0x100e, 0x1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r5, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r5, 0x100, 0x72bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x7fff}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x30d3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x645}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x38000000}}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x8001) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0x7ff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00031c0000001c037e"]}, 0x0) 2m28.393482663s ago: executing program 4 (id=4402): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ae"], 0x20}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 2m26.659024974s ago: executing program 6 (id=4404): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r3 = socket(0x10, 0x803, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x8003, 0x0, 0xff, "0000000000000000f7fcfeff000000a88000"}) syz_open_pts(0xffffffffffffffff, 0x8182) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m26.554519696s ago: executing program 4 (id=4405): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) creat(0x0, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m25.586657008s ago: executing program 0 (id=4406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4106, 0x100a}], 0x1) 2m25.52684003s ago: executing program 6 (id=4407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x4, 0x9c4b, 0x1, 0x3ec7, 0x3, 0x8, 0x0, 0x8}, 0x20) write(r2, &(0x7f0000000140)="04", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m25.516841771s ago: executing program 4 (id=4408): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2m25.356767424s ago: executing program 9 (id=4409): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback, 0xffffffffffffffff, 0x1a, 0x20}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 2m24.21630065s ago: executing program 6 (id=4410): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40, 0x4000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x20ab5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x40000) 2m23.37810164s ago: executing program 0 (id=4411): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 2m23.142152826s ago: executing program 4 (id=4412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) 2m22.982207859s ago: executing program 9 (id=4413): r0 = socket$inet6(0xa, 0x3, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @remote, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) 2m22.780772934s ago: executing program 0 (id=4414): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m22.431001392s ago: executing program 6 (id=4415): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003180)=[{{0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1}}], 0x1, 0x58ca2280, 0x0) 2m22.372100394s ago: executing program 9 (id=4416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x40080) 2m22.147737439s ago: executing program 0 (id=4417): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r0, 0x0, 0x0) 2m20.651704864s ago: executing program 0 (id=4418): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x1, 0x10088, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', 0x0}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) r2 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000001100)={0x2020}, 0x2020) msgsnd(r2, &(0x7f00000010c0)=ANY=[@ANYBLOB="02"], 0x2a, 0x0) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESOCT=r2], 0x2000, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0xdf9, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x10a, 0x0, 0xd}, {0xb95, 0x0, 0x8}]}) msgctl$IPC_RMID(0x0, 0x0) 2m20.280382863s ago: executing program 6 (id=4419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2m20.019254499s ago: executing program 4 (id=4420): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bond0\x00', 0x400}) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2d, 'rlimit'}]}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, &(0x7f0000000000), &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, &(0x7f00000026c0)=""/17, &(0x7f0000002700)="3666a5b1f6144abf9e132ae4a7", &(0x7f0000002740), 0x800, r1}, 0x38) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4880) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x34008000) 2m20.010774799s ago: executing program 0 (id=4421): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r5, &(0x7f0000000200)={0x0, 0x8, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) 2m19.413239293s ago: executing program 4 (id=4422): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7, 0x2000}) 1m45.646260922s ago: executing program 47 (id=4421): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r5, &(0x7f0000000200)={0x0, 0x8, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) 1m45.164184493s ago: executing program 48 (id=4419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1m44.993422807s ago: executing program 49 (id=4416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x40080) 1m44.84811899s ago: executing program 50 (id=4422): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7, 0x2000}) 26.165193059s ago: executing program 5 (id=4490): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22.301908289s ago: executing program 5 (id=4499): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) 21.509570418s ago: executing program 8 (id=4500): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000100)='rw\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) syz_emit_ethernet(0x16, &(0x7f0000000540)={@remote, @broadcast, @val, {@generic={0x8864}}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0x6, 0x58b, &(0x7f00000008c0)="$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") 20.578873219s ago: executing program 1 (id=4502): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 20.346323365s ago: executing program 8 (id=4503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20.227702618s ago: executing program 5 (id=4504): socket$unix(0x1, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close(0x3) 18.303333562s ago: executing program 1 (id=4505): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) rt_sigprocmask(0x0, &(0x7f00000001c0)={[0x1ff]}, 0x0, 0x8) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffa]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f0000000280)={{0x77359400}, {0x0, 0x9}}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x7, 0x5, 0x9, 0x2, 0x1, 0x1}, 0x0) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0xfffffffffffffffe) 18.129038467s ago: executing program 8 (id=4506): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x3}, 0x8) 17.930959701s ago: executing program 5 (id=4507): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8400, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.511961991s ago: executing program 8 (id=4508): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x80000000}, 0x0, 0x0) 17.055185752s ago: executing program 1 (id=4509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 17.036970052s ago: executing program 3 (id=4510): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x3) fchdir(r4) r5 = fanotify_init(0x1a, 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r5, 0x541, 0x1023, r6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 16.68770446s ago: executing program 5 (id=4511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb601fffc) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19c", 0x2) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000900)=""/194, 0xc2}, {&(0x7f0000000780)=""/66, 0x42}], 0x3, &(0x7f0000000a00)=""/212, 0xd4}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="cf18e24fed9b7a37ce9ef944c3614d4c30a5786bccb37a29a9549fb3147b9ae4d8a64082a6b61eff0df79888926d7930ab22089fbedfac7dc94d57971558ff021406a5c2a13fd05a8e96d387ad3fa025b5ea829087d3fa9806367c9873ddfe6ea42a73bdeb31bfc555461f2c319276388d8fc66aa15d1a2dcad2458e46b49a21a06b27124a8e9edf8dc2be0d5a3c3ec7e39d7a885810b1e17f1f448acc2532516087c1fd23717d0865947f4f5b979776561e876cc5ca047b6edd306d8f9b53cca9fb464188ae12a78f", 0xc9, 0x400d4, &(0x7f0000000080)={0xa, 0x4e21, 0x46fe1ef1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) 16.370795688s ago: executing program 3 (id=4512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 16.128096373s ago: executing program 8 (id=4513): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x1c552, &(0x7f0000000b40)=ANY=[], 0x4, 0x1202, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, 0x0, 0x52142, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000300)) syz_mount_image$fuse(0x0, 0x0, 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x8a, 0x20000}, 0x20) 16.042305825s ago: executing program 5 (id=4514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 15.718048653s ago: executing program 1 (id=4515): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x4b24, &(0x7f0000000340)={0x0, 0x9164, 0x200, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000100)) close_range(r0, r0, 0x0) 15.623245365s ago: executing program 3 (id=4516): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7fd, &(0x7f0000000040)={0x0, 0xfd49, 0xc000, 0x3, 0xa0002f5}) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="51640646eae0", @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.078428468s ago: executing program 3 (id=4517): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x141000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206030000000300686173683a69000000000100000000000900020073797a311b000097cc26afc28057001400078008001340000017e508001240000000090000000000"], 0x48}}, 0x4080) socket(0x1, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x48000, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1000, 0xffff8000) 14.819038434s ago: executing program 1 (id=4518): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r5, 0x2, 0x1, "fa"}, 0x9) 14.684985067s ago: executing program 3 (id=4519): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @local, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x80, 0x800, @mcast1}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 14.573076759s ago: executing program 8 (id=4520): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c37693ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r3 = fsmount(r0, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007f00)={0x2020}, 0x4b) read$FUSE(r4, &(0x7f0000009f40)={0x2020}, 0x2020) 14.525849651s ago: executing program 1 (id=4521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0x7f, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x5, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x184, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x4, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x4, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x8, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2ea, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xffffffff, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x6, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x0, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x4, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 14.304951956s ago: executing program 3 (id=4522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) 0s ago: executing program 51 (id=4514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) kernel console output (not intermixed with test programs): iniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 703.769587][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3240'. [ 704.615026][ T28] audit: type=1326 audit(1783125780.665:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3bd9de59 code=0x7ffc0000 [ 704.723421][ T28] audit: type=1326 audit(1783125780.665:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3bd9de59 code=0x7ffc0000 [ 704.808716][ T28] audit: type=1326 audit(1783125780.665:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3bd9de59 code=0x7ffc0000 [ 704.890563][ T28] audit: type=1326 audit(1783125780.665:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3bd9de59 code=0x7ffc0000 [ 704.996425][ T28] audit: type=1326 audit(1783125780.685:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2c3bd9de59 code=0x7ffc0000 [ 705.088157][ T28] audit: type=1326 audit(1783125780.765:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c3bd5e68e code=0x7ffc0000 [ 705.199344][ T28] audit: type=1326 audit(1783125780.765:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c3bd5e68e code=0x7ffc0000 [ 705.294037][ T28] audit: type=1326 audit(1783125780.765:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c3bd5e68e code=0x7ffc0000 [ 705.323275][ T28] audit: type=1326 audit(1783125780.765:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c3bd5e68e code=0x7ffc0000 [ 705.353717][ T28] audit: type=1326 audit(1783125780.775:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.3243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c3bd5e68e code=0x7ffc0000 [ 706.701764][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3252'. [ 710.518863][T18886] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3276'. [ 712.985867][T18925] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3290'. [ 713.515454][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.554584][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.615242][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.645131][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.704120][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.758384][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.809472][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.855098][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.351887][T18934] tipc: Failed to remove unknown binding: 66,0,0/0:1883203071/1883203072 [ 714.385419][T18934] tipc: Failed to remove unknown binding: 66,0,0/0:1883203071/1883203072 [ 714.748964][T18938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3294'. [ 715.846035][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 715.846055][ T28] audit: type=1326 audit(1783125791.885:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18946 comm="syz.3.3298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3bd9de59 code=0x7fc00000 [ 715.942361][T18952] overlayfs: failed to clone upperpath [ 715.962433][ T28] audit: type=1326 audit(1783125791.885:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18946 comm="syz.3.3298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c3bd9de59 code=0x7fc00000 [ 716.068571][ T28] audit: type=1326 audit(1783125792.015:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18946 comm="syz.3.3298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c3bd97bd7 code=0x7fc00000 [ 716.185038][ T28] audit: type=1326 audit(1783125792.015:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18946 comm="syz.3.3298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c3bd3f1d9 code=0x7fc00000 [ 716.287325][ T28] audit: type=1326 audit(1783125792.015:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18946 comm="syz.3.3298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2c3bd3f29d code=0x7fc00000 [ 716.354604][T18954] bond13: entered allmulticast mode [ 716.399763][ T28] audit: type=1326 audit(1783125792.015:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18946 comm="syz.3.3298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c3bd9de59 code=0x7fc00000 [ 716.449441][T18956] macvlan0: entered promiscuous mode [ 716.481564][T18956] macvlan0: entered allmulticast mode [ 716.527716][T18956] bond13: entered promiscuous mode [ 716.575279][T18956] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 716.643023][T18956] bond13: left promiscuous mode [ 718.036898][T18979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.193269][T18979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.316422][T18980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.626147][T19009] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3317'. [ 720.674517][T19010] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3317'. [ 720.778135][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3317'. [ 721.491235][T19028] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 721.587806][T19028] bond8: entered promiscuous mode [ 721.593224][T19028] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.772833][T19035] bridge0: Device is already in use. [ 721.823139][T19034] bridge0: Device is already in use. [ 722.352249][T19055] xt_TPROXY: Can be used only with -p tcp or -p udp [ 723.395058][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3340'. [ 725.706583][T19113] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.715533][T19113] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.278481][T19144] overlayfs: failed to clone upperpath [ 726.847665][T19113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.004507][T19113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.877370][T19113] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.893143][T19113] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.913481][T19113] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.930437][T19113] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.593600][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3362'. [ 728.676239][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3366'. [ 728.772224][T19172] tipc: Started in network mode [ 728.778547][T19172] tipc: Node identity ac1414aa, cluster identity 4711 [ 728.795327][T19172] tipc: Enabling of bearer rejected, failed to enable media [ 728.877320][T19174] tipc: Enabled bearer , priority 0 [ 729.855148][T19201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3382'. [ 729.881227][T19201] ip6gre2: entered promiscuous mode [ 729.904948][T19201] ip6gre2: entered allmulticast mode [ 730.065452][ T8] tipc: Node number set to 2886997162 [ 730.073206][T19206] netlink: 'syz.1.3382': attribute type 6 has an invalid length. [ 730.089593][T19206] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3382'. [ 735.261566][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'. [ 737.323194][T19332] 9pnet_fd: Insufficient options for proto=fd [ 738.425839][T19332] syz.2.3424 (19332) used greatest stack depth: 17896 bytes left [ 739.011649][T19356] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 739.028368][T19356] ref_ctr increment failed for inode: 0x678 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805995b900 [ 739.062001][T19355] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 739.080817][T19355] ref_ctr decrement failed for inode: 0x678 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805995b900 [ 740.020143][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3438'. [ 741.159718][T19390] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3446'. [ 742.710056][T19420] macsec0: entered promiscuous mode [ 742.725263][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'. [ 742.784011][T19420] macsec0 (unregistering): left promiscuous mode [ 743.733814][T19438] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3471'. [ 743.743818][T19438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3471'. [ 744.019196][ T5792] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 744.186477][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 745.742657][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'. [ 745.915782][T19471] netlink: 'syz.3.3483': attribute type 2 has an invalid length. [ 747.056740][T19492] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 747.651740][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.658306][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.429464][ T5792] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 748.440237][ T5792] Bluetooth: hci1: Injecting HCI hardware error event [ 748.452198][ T51] Bluetooth: hci1: hardware error 0x00 [ 748.740305][T19507] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3489'. [ 750.564290][T19532] Invalid ELF header magic: != ELF [ 750.605219][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 752.286862][T19558] netlink: 'syz.2.3509': attribute type 1 has an invalid length. [ 752.400358][T19558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 752.493579][T19562] bond9: (slave veth5): Enslaving as an active interface with a down link [ 752.569042][T19563] veth0_virt_wifi: entered promiscuous mode [ 752.610316][T19563] bond9: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 752.797974][T19558] veth0_virt_wifi: left promiscuous mode [ 752.867127][T19558] bond9: (slave veth0_virt_wifi): Releasing active interface [ 753.427633][T19581] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 754.111749][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3518'. [ 757.455543][T19645] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 757.727064][T19645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 757.860382][T19648] bond4: (slave veth9): Enslaving as an active interface with a down link [ 757.975325][T19649] veth0_virt_wifi: entered promiscuous mode [ 758.041415][T19649] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 758.252752][T19650] veth0_virt_wifi: left promiscuous mode [ 758.305611][T19650] bond4: (slave veth0_virt_wifi): Releasing active interface [ 758.566460][T19653] syz.7.3547 (19653): attempted to duplicate a private mapping with mremap. This is not supported. [ 758.670517][T19657] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 758.837369][T19661] 9pnet_fd: Insufficient options for proto=fd [ 760.929715][T19699] netlink: 'syz.1.3552': attribute type 2 has an invalid length. [ 762.217822][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3564'. [ 763.330730][T19750] netlink: 'syz.7.3571': attribute type 2 has an invalid length. [ 765.176652][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3576'. [ 768.341410][T19800] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 768.488445][T19800] bond5: entered promiscuous mode [ 768.493653][T19800] bond5: entered allmulticast mode [ 768.553609][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 768.673354][T19802] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 768.784329][T19802] bond5: (slave bridge7): making interface the new active one [ 768.838736][T19802] bridge7: entered promiscuous mode [ 768.845970][T19802] bridge7: entered allmulticast mode [ 768.860388][T19802] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 769.105409][T19800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3586'. [ 769.124353][T19800] bond5: left promiscuous mode [ 769.156270][T19800] bridge7: left promiscuous mode [ 769.162988][T19800] bond5: left allmulticast mode [ 769.205386][T19800] bridge7: left allmulticast mode [ 769.237628][T19800] 8021q: adding VLAN 0 to HW filter on device bond5 [ 769.800650][T19820] overlayfs: failed to clone upperpath [ 769.842402][T19821] : renamed from veth0_to_bond [ 773.838852][T19862] : renamed from bond0 [ 775.747844][T19901] netlink: 'syz.2.3619': attribute type 1 has an invalid length. [ 775.992295][T19901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 776.203012][T19904] bond10: (slave veth7): Enslaving as an active interface with a down link [ 776.262431][T19907] bond10: (slave dummy0): making interface the new active one [ 776.280641][T19907] dummy0: entered promiscuous mode [ 776.316654][T19907] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 776.923597][T19901] netlink: 'syz.2.3619': attribute type 10 has an invalid length. [ 776.954957][T19901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3619'. [ 777.001845][T19901] bond10: (slave dummy0): Releasing active interface [ 781.953866][ T28] audit: type=1804 audit(1783125858.005:1043): pid=19982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3650" name="bus" dev="ramfs" ino=52597 res=1 errno=0 [ 782.031910][ T28] audit: type=1804 audit(1783125858.045:1044): pid=19982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3650" name="bus" dev="ramfs" ino=52597 res=1 errno=0 [ 784.801751][T20003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.944572][T20003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.051099][T20003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.686845][T20014] xt_TCPMSS: Only works on TCP SYN packets [ 786.414122][T20027] netlink: 'syz.7.3662': attribute type 1 has an invalid length. [ 786.510785][T20027] 8021q: adding VLAN 0 to HW filter on device bond5 [ 786.591396][T20029] bond5: (slave veth11): Enslaving as an active interface with a down link [ 786.761603][T20027] netlink: 'syz.7.3662': attribute type 10 has an invalid length. [ 786.788964][T20027] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3662'. [ 787.097730][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3670'. [ 788.191025][T20060] IPVS: Error connecting to the multicast addr [ 788.804271][T20070] netlink: 'syz.3.3678': attribute type 1 has an invalid length. [ 789.142010][T20070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 789.474971][T20071] bond6: (slave veth11): Enslaving as an active interface with a down link [ 789.590750][T20073] dummy0: left promiscuous mode [ 789.656447][T20073] bond6: (slave dummy0): making interface the new active one [ 789.763595][T20073] dummy0: entered promiscuous mode [ 789.804494][T20073] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 789.891101][T20074] netlink: 'syz.3.3678': attribute type 10 has an invalid length. [ 789.914897][T20074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3678'. [ 790.041351][T20074] bond6: (slave dummy0): Releasing active interface [ 790.158627][T20080] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 790.206010][T20080] ref_ctr increment failed for inode: 0xfca offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888059958000 [ 790.254450][T20079] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 790.264728][T20079] ref_ctr decrement failed for inode: 0xfca offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888059958000 [ 790.662944][ T51] Bluetooth: hci3: Malformed Event: 0x02 [ 790.713958][T20090] 9pnet_fd: Insufficient options for proto=fd [ 792.595257][T20117] netlink: 'syz.3.3695': attribute type 4 has an invalid length. [ 792.664044][T20117] netlink: 'syz.3.3695': attribute type 4 has an invalid length. [ 792.672810][ T28] audit: type=1804 audit(1783125868.725:1045): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3696" name="bus" dev="ramfs" ino=52810 res=1 errno=0 [ 792.785099][ T28] audit: type=1804 audit(1783125868.755:1046): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3696" name="bus" dev="ramfs" ino=52810 res=1 errno=0 [ 795.326294][T20159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.487269][T20154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.591030][T20154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.704725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 801.470145][T20231] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 801.825712][T20241] netlink: 'syz.2.3731': attribute type 11 has an invalid length. [ 804.242473][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'. [ 805.323210][T20293] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 805.409998][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.428485][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.444059][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.462611][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.490515][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.525317][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.616178][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.725357][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 805.757136][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 806.692242][T20306] sctp: [Deprecated]: syz.3.3755 (pid 20306) Use of int in max_burst socket option deprecated. [ 806.692242][T20306] Use struct sctp_assoc_value instead [ 807.787299][T20323] netlink: 'syz.3.3761': attribute type 4 has an invalid length. [ 807.915616][T20326] netlink: 'syz.3.3761': attribute type 4 has an invalid length. [ 809.090923][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.097955][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.054723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 810.114722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 810.184718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 812.223363][T20377] __nla_validate_parse: 2 callbacks suppressed [ 812.223411][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3776'. [ 816.879974][ T28] audit: type=1326 audit(1783125892.925:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 816.978834][ T28] audit: type=1326 audit(1783125892.925:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 817.009775][ T28] audit: type=1326 audit(1783125892.925:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 817.085136][ T28] audit: type=1326 audit(1783125892.925:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 817.175213][ T28] audit: type=1326 audit(1783125892.925:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 817.205055][ T28] audit: type=1326 audit(1783125892.925:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 817.240218][ T28] audit: type=1326 audit(1783125892.975:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 817.275338][ T28] audit: type=1326 audit(1783125892.975:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7ffc0000 [ 817.303063][ T28] audit: type=1326 audit(1783125893.035:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc94675e68e code=0x7ffc0000 [ 817.357507][ T28] audit: type=1326 audit(1783125893.035:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.7.3793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc94675e68e code=0x7ffc0000 [ 819.244720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 819.482892][T20452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.523921][T20452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.563156][T20452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.576371][T20452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.578819][T20452] tipc: Resetting bearer [ 823.742910][T19139] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.315066][T19139] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 831.712911][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3841'. [ 835.355305][T20596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3849'. [ 838.063247][T20628] : (slave bond_slave_0): Releasing backup interface [ 838.132774][T20628] : (slave bond_slave_1): Releasing backup interface [ 838.157918][T20628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.211697][T20628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.275448][T20628] bond2: (slave veth15): Releasing backup interface [ 838.309727][T20628] veth15: left promiscuous mode [ 838.390193][T20628] bond5: (slave bond6): Releasing backup interface [ 838.402737][T19139] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.415092][T20628] bond6: left promiscuous mode [ 838.603070][T20628] bond7: (slave bond8): Releasing backup interface [ 838.634025][T20628] bond8: left allmulticast mode [ 838.726534][T11676] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.754830][T20628] bond9: (slave veth17): Releasing backup interface [ 838.806817][T20628] bond11: (slave gretap1): Releasing active interface [ 838.826953][T20628] gretap1: left allmulticast mode [ 839.380566][T20640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3866'. [ 839.823107][T20654] netlink: 'syz.2.3868': attribute type 6 has an invalid length. [ 844.166412][T20714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3890'. [ 844.264453][T20714] team1: entered promiscuous mode [ 844.295224][T20714] team1: entered allmulticast mode [ 844.308526][T20715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.341983][T20714] 8021q: adding VLAN 0 to HW filter on device team1 [ 844.386408][T20716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3890'. [ 844.513304][T20716] team2: entered promiscuous mode [ 844.548469][T20716] team2: entered allmulticast mode [ 844.565585][T20716] 8021q: adding VLAN 0 to HW filter on device team2 [ 848.297074][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3902'. [ 848.419095][T20756] bond0: (slave bridge0): Releasing backup interface [ 848.465037][T20756] bridge_slave_0: left allmulticast mode [ 848.492214][T20756] bridge_slave_0: left promiscuous mode [ 848.515176][T20756] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.554209][T20756] bridge_slave_1: left allmulticast mode [ 848.560867][T20756] bridge_slave_1: left promiscuous mode [ 848.575115][T20756] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.606080][T20756] bond0: (slave bond_slave_0): Releasing backup interface [ 848.627221][T20756] bond0: (slave bond_slave_1): Releasing backup interface [ 848.659279][T20756] team0: Port device team_slave_0 removed [ 848.670877][T20756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.682343][T20756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.699341][T20756] vlan2: left allmulticast mode [ 848.719199][T20756] erspan0: left allmulticast mode [ 848.724409][T20756] vlan2: left promiscuous mode [ 848.733501][T20756] erspan0: left promiscuous mode [ 848.744165][T20756] bridge1: port 1(vlan2) entered disabled state [ 848.770429][T20756] bond2: (slave veth3): Releasing active interface [ 848.806696][T20756] bond3: (slave veth5): Releasing active interface [ 848.853557][T20756] bond4: (slave veth9): Releasing active interface [ 848.883542][T20756] bond5: (slave bridge7): Releasing active interface [ 848.916066][T20756] bond6: (slave veth11): Releasing active interface [ 848.983845][T20758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3902'. [ 849.859298][T20774] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 851.429622][T20785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3911'. [ 854.785690][T20823] : entered promiscuous mode [ 855.539884][T20839] ip6erspan0: entered allmulticast mode [ 855.706030][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 855.706047][ T28] audit: type=1326 audit(1783125931.765:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.3932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94679de59 code=0x7fc00000 [ 855.807511][ T28] audit: type=1326 audit(1783125931.765:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.3932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc94679de59 code=0x7fc00000 [ 856.849196][T20863] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 858.286387][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3951'. [ 858.941483][T20919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3954'. [ 859.449464][T20928] netlink: 'syz.2.3956': attribute type 1 has an invalid length. [ 859.647772][T20928] 8021q: adding VLAN 0 to HW filter on device bond11 [ 859.858201][T20934] bond11: entered promiscuous mode [ 859.924817][T20934] bond11: entered allmulticast mode [ 861.030143][T20957] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 861.077122][T20957] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 861.219840][T20960] bridge0: port 3(vlan1) entered blocking state [ 861.252128][ T28] audit: type=1326 audit(1783125937.305:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20953 comm="syz.1.3963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7fc00000 [ 861.284151][T20960] bridge0: port 3(vlan1) entered disabled state [ 861.303277][T20960] vlan1: entered allmulticast mode [ 861.314215][T20960] bond0: entered allmulticast mode [ 861.323133][T20960] bond_slave_1: entered allmulticast mode [ 861.338204][T20960] bridge0: entered allmulticast mode [ 861.343795][T20960] macvlan0: entered allmulticast mode [ 861.353973][T20960] team0: entered allmulticast mode [ 861.363812][T20960] team_slave_0: entered allmulticast mode [ 861.380148][T20960] vlan1: left allmulticast mode [ 861.387933][T20960] bond0: left allmulticast mode [ 861.393000][T20960] bond_slave_1: left allmulticast mode [ 861.428488][T20960] bridge0: left allmulticast mode [ 861.444112][T20960] macvlan0: left allmulticast mode [ 861.471442][T20960] team0: left allmulticast mode [ 861.477152][T20960] team_slave_0: left allmulticast mode [ 861.729917][ T28] audit: type=1326 audit(1783125937.775:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20953 comm="syz.1.3963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddf213f1d9 code=0x7fc00000 [ 862.282181][T20979] Device name cannot be null; rc = [-22] [ 863.713706][T21004] bond0: entered promiscuous mode [ 866.582273][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3991'. [ 866.947831][T21042] syz_tun: entered allmulticast mode [ 867.336226][T21040] bond0: entered promiscuous mode [ 867.355615][T21040] bond_slave_1: entered promiscuous mode [ 867.378676][T21040] bridge0: entered promiscuous mode [ 867.403870][T21040] macvlan0: entered promiscuous mode [ 867.430681][T21040] team0: entered promiscuous mode [ 867.450419][T21040] team_slave_0: entered promiscuous mode [ 867.604567][T21043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 867.637494][T21043] bond7: (slave bond8): Enslaving as an active interface with an up link [ 867.689712][T21045] bond7 (unregistering): (slave bond8): Releasing backup interface [ 867.769854][T21045] bond7 (unregistering): Released all slaves [ 868.125774][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 868.136609][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 868.147872][ T51] Bluetooth: hci3: hardware error 0x00 [ 868.163389][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3995'. [ 868.667316][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4000'. [ 869.645172][T21084] syz_tun: entered allmulticast mode [ 869.661026][T21085] overlayfs: failed to clone upperpath [ 869.696113][T19139] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 869.716197][T21084] bond0: entered promiscuous mode [ 869.731537][T21084] bond_slave_0: entered promiscuous mode [ 869.748267][T21084] bond_slave_1: entered promiscuous mode [ 869.766990][T21084] bridge0: entered promiscuous mode [ 869.802932][T21086] team0: Port device xfrm0 added [ 869.915060][T19140] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 870.214815][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 870.537569][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.543996][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.500298][T21119] tipc: Enabling of bearer rejected, failed to enable media [ 878.533465][T21195] macvlan0: entered promiscuous mode [ 878.539224][T21195] vlan1: entered promiscuous mode [ 878.544467][T21195] gretap0: entered promiscuous mode [ 878.560873][T21195] vlan1: left promiscuous mode [ 878.567035][T21195] gretap0: left promiscuous mode [ 880.069065][T21211] overlayfs: failed to clone upperpath [ 880.182166][T19140] Process accounting resumed [ 880.764926][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 882.032294][T21233] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 882.061065][T21233] CIFS mount error: No usable UNC path provided in device string! [ 882.061065][T21233] [ 882.071938][T21233] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 886.550698][T21296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4081'. [ 887.108985][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'. [ 888.623697][ T28] audit: type=1326 audit(1783125964.675:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21320 comm="syz.1.4086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x0 [ 888.806800][ T28] audit: type=1326 audit(1783125964.865:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 888.919274][ T28] audit: type=1326 audit(1783125964.895:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 889.030634][ T28] audit: type=1326 audit(1783125964.895:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 889.103827][ T28] audit: type=1326 audit(1783125964.895:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 889.160393][ T28] audit: type=1326 audit(1783125964.895:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 889.223104][ T28] audit: type=1326 audit(1783125964.895:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 889.344909][ T28] audit: type=1326 audit(1783125964.895:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 889.454789][ T28] audit: type=1326 audit(1783125964.895:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 889.534903][ T28] audit: type=1326 audit(1783125964.905:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.2.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f299bf9de59 code=0x7ffc0000 [ 891.805132][T21356] vlan1: entered promiscuous mode [ 891.810642][T21356] vlan1: entered allmulticast mode [ 891.847305][T21356] bridge0: entered allmulticast mode [ 891.893001][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 891.950813][T21361] lo speed is unknown, defaulting to 1000 [ 891.957870][T21360] bond4: (slave syz_tun): Removing an active aggregator [ 891.978803][T21360] bond4: (slave syz_tun): Releasing backup interface [ 892.041291][T21360] bond0: (slave bridge0): Releasing backup interface [ 892.097804][T21360] bridge_slave_0: left allmulticast mode [ 892.157282][T21360] bridge_slave_0: left promiscuous mode [ 892.196336][T21360] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.258141][T21360] bridge_slave_1: left allmulticast mode [ 892.264514][T21360] bridge_slave_1: left promiscuous mode [ 892.290544][T21360] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.359041][T21360] bond0: (slave bond_slave_1): Releasing backup interface [ 892.388159][T21360] bond_slave_1: left promiscuous mode [ 892.401156][T21360] team_slave_0: left promiscuous mode [ 892.412694][T21360] team0: Port device team_slave_0 removed [ 892.427355][T21360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.449922][T21360] bond1: (slave geneve2): Releasing active interface [ 892.463820][T21360] bond6: (slave ip6gretap2): Releasing active interface [ 892.478536][T21360] bond7: (slave ip6gretap3): Releasing backup interface [ 892.490408][T21360] ip6gretap3: left allmulticast mode [ 892.502207][T21360] bond9: (slave veth5): Releasing active interface [ 892.514224][T21360] bond10: (slave veth7): Releasing active interface [ 892.538266][T21360] bond0: (slave macvlan0): Releasing backup interface [ 892.549340][T21360] macvlan0: left promiscuous mode [ 892.555105][T21360] team0: left promiscuous mode [ 892.577988][T21361] lo speed is unknown, defaulting to 1000 [ 892.585413][T21364] netlink: 'syz.3.4101': attribute type 1 has an invalid length. [ 892.624372][T21364] 8021q: adding VLAN 0 to HW filter on device bond7 [ 892.637475][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4101'. [ 892.695668][T21366] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 892.752490][T21366] bond7: entered allmulticast mode [ 892.821116][T21368] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 892.839485][T21361] lo speed is unknown, defaulting to 1000 [ 892.937983][T21361] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 893.180785][T21361] lo speed is unknown, defaulting to 1000 [ 893.191950][T21361] lo speed is unknown, defaulting to 1000 [ 893.215850][T21361] lo speed is unknown, defaulting to 1000 [ 893.256645][T21361] lo speed is unknown, defaulting to 1000 [ 893.264055][T21361] lo speed is unknown, defaulting to 1000 [ 893.376464][T21361] lo speed is unknown, defaulting to 1000 [ 894.525824][T21394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4109'. [ 894.654534][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 896.292756][T21408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'. [ 896.824825][T21413] 8021q: adding VLAN 0 to HW filter on device bond14 [ 896.857662][T21413] bond0: (slave bond14): Enslaving as an active interface with an up link [ 897.147001][T21415] bond0 (unregistering): (slave bond14): Releasing backup interface [ 897.283236][T21415] bond0 (unregistering): Released all slaves [ 897.982403][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'. [ 898.074303][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'. [ 902.241796][T21439] lo speed is unknown, defaulting to 1000 [ 902.482486][T21452] netlink: 'syz.7.4123': attribute type 7 has an invalid length. [ 902.595194][T21452] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.604137][T21452] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.613208][T21452] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.622691][T21452] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.679826][T21452] netlink: 'syz.7.4123': attribute type 7 has an invalid length. [ 902.743617][T21452] netlink: 'syz.7.4123': attribute type 7 has an invalid length. [ 912.792218][T21520] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2427132450/2427132452 [ 912.855932][T21520] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2427132450/2427132451 [ 912.931019][T21520] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2427132450/2427132452 [ 913.005314][T21520] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2427132450/2427132451 [ 913.406589][T21529] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.4151'. [ 914.945842][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 914.945907][ T28] audit: type=1326 audit(1783125990.995:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.4160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f299bf9de59 code=0x0 [ 916.771274][T19139] IPVS: starting estimator thread 0... [ 916.894909][T21564] IPVS: using max 31 ests per chain, 74400 per kthread [ 917.685278][T21574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4168'. [ 917.745402][T21574] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 918.178056][T21575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4168'. [ 918.357800][T21575] bond9: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 919.955909][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'. [ 920.132058][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4173'. [ 920.180552][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4173'. [ 920.249525][T21594] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.224935][T21680] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 929.254218][T21680] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 929.529467][T21684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4199'. [ 930.336190][ T28] audit: type=1107 audit(1783126006.385:1182): pid=21681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 933.095313][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.425159][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.593596][T21707] netlink: 'syz.2.4205': attribute type 4 has an invalid length. [ 934.615056][T21707] netlink: 'syz.2.4205': attribute type 5 has an invalid length. [ 934.644990][T21707] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4205'. [ 937.314210][T21732] vlan1: entered promiscuous mode [ 937.324070][T21732] syz_tun: entered promiscuous mode [ 938.985657][T21757] xt_CONNSECMARK: invalid mode: 0 [ 939.619982][T21762] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4223'. [ 942.681086][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 944.624106][ T28] audit: type=1326 audit(1783126020.675:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.631474][T21821] syz.1.4246 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 944.663200][ T28] audit: type=1326 audit(1783126020.675:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.663255][ T28] audit: type=1326 audit(1783126020.675:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.663300][ T28] audit: type=1326 audit(1783126020.675:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.663344][ T28] audit: type=1326 audit(1783126020.675:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.663387][ T28] audit: type=1326 audit(1783126020.675:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.663431][ T28] audit: type=1326 audit(1783126020.675:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.663473][ T28] audit: type=1326 audit(1783126020.675:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.663517][ T28] audit: type=1326 audit(1783126020.675:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 944.903440][ T28] audit: type=1326 audit(1783126020.955:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21819 comm="syz.1.4246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf219de59 code=0x7ffc0000 [ 945.330117][T21831] netlink: 'syz.3.4249': attribute type 1 has an invalid length. [ 945.492658][T21831] 8021q: adding VLAN 0 to HW filter on device bond10 [ 946.350054][T21837] bond10 (unregistering): Released all slaves [ 946.651847][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4256'. [ 947.937859][T21877] Invalid option length (1045252) for dns_resolver key [ 949.185783][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'. [ 949.766354][T21896] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 949.858883][T21896] batman_adv: batadv0: Adding interface: gretap2 [ 951.255358][T21896] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.311192][T21896] batman_adv: batadv0: Interface activated: gretap2 [ 953.594700][T21918] xt_TPROXY: Can be used only with -p tcp or -p udp [ 954.526581][T21922] lo speed is unknown, defaulting to 1000 [ 954.647586][T21929] netlink: 'syz.1.4273': attribute type 4 has an invalid length. [ 954.764865][T21929] netlink: 'syz.1.4273': attribute type 4 has an invalid length. [ 954.859788][T11676] lo speed is unknown, defaulting to 1000 [ 955.446453][T21938] netlink: 'syz.1.4276': attribute type 1 has an invalid length. [ 955.561753][T21938] bond0: entered promiscuous mode [ 955.568031][T21938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.652245][T21938] veth23: entered promiscuous mode [ 957.448694][T21938] veth23: entered allmulticast mode [ 957.529726][T21938] bond0: (slave veth23): Enslaving as a backup interface with a down link [ 993.685471][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.691854][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.136497][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 997.156944][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 997.167442][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 997.183111][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 997.192879][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 997.202362][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.217296][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 997.225503][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.238484][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 997.278137][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 997.289449][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 997.298481][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 997.375374][T22016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 997.402952][T22016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 997.412688][T22016] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 997.425368][T22016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 997.433395][T22016] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 997.447769][T22016] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 997.472664][ T5792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 997.488553][ T5792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 997.498941][ T5792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 997.509454][ T5792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 997.518165][ T5792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 997.525932][ T5792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 997.761986][T22010] lo speed is unknown, defaulting to 1000 [ 998.027146][T22009] lo speed is unknown, defaulting to 1000 [ 998.155500][T22014] lo speed is unknown, defaulting to 1000 [ 998.257348][T22015] lo speed is unknown, defaulting to 1000 [ 998.365215][T15459] syz_tun (unregistering): left allmulticast mode [ 999.014513][T22010] chnl_net:caif_netlink_parms(): no params data found [ 999.301258][T14490] syz_tun (unregistering): left allmulticast mode [ 999.325457][ T5792] Bluetooth: hci0: command tx timeout [ 999.405396][ T5792] Bluetooth: hci4: command tx timeout [ 999.501116][T22009] chnl_net:caif_netlink_parms(): no params data found [ 999.521563][T22010] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.535374][T22010] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.545018][T22010] bridge_slave_0: entered allmulticast mode [ 999.577141][T22010] bridge_slave_0: entered promiscuous mode [ 999.624325][ T3446] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.646527][ T5792] Bluetooth: hci5: command tx timeout [ 999.653195][ T5792] Bluetooth: hci6: command tx timeout [ 999.715483][T22010] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.722682][T22010] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.735708][T22010] bridge_slave_1: entered allmulticast mode [ 999.745346][T22010] bridge_slave_1: entered promiscuous mode [ 999.753365][T22014] chnl_net:caif_netlink_parms(): no params data found [ 999.820652][ T3446] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.912701][T22015] chnl_net:caif_netlink_parms(): no params data found [ 999.967681][ T3446] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.097178][T22010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.194232][T22010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.300979][T22009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.308688][T22009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.317492][T22009] bridge_slave_0: entered allmulticast mode [ 1000.329449][T22009] bridge_slave_0: entered promiscuous mode [ 1000.432871][T22009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.450789][T22009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.460158][T22009] bridge_slave_1: entered allmulticast mode [ 1000.472128][T22009] bridge_slave_1: entered promiscuous mode [ 1000.517329][T22010] team0: Port device team_slave_0 added [ 1000.538702][T22014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.547108][T22014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.554433][T22014] bridge_slave_0: entered allmulticast mode [ 1000.568238][T22014] bridge_slave_0: entered promiscuous mode [ 1000.578013][T22014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.585343][T22014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.592638][T22014] bridge_slave_1: entered allmulticast mode [ 1000.601045][T22014] bridge_slave_1: entered promiscuous mode [ 1000.644009][T22010] team0: Port device team_slave_1 added [ 1000.683280][T22009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.745376][T22015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.752717][T22015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.764461][T22015] bridge_slave_0: entered allmulticast mode [ 1000.772904][T22015] bridge_slave_0: entered promiscuous mode [ 1000.812409][T22009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.875106][T22015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.882478][T22015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.890724][T22015] bridge_slave_1: entered allmulticast mode [ 1000.898865][T22015] bridge_slave_1: entered promiscuous mode [ 1000.908405][T22010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.915835][T22010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.942655][T22010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.999613][T22014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.023959][T22014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.162181][T22010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.175837][T22010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.202811][T22010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.232473][T22009] team0: Port device team_slave_0 added [ 1001.249012][T22009] team0: Port device team_slave_1 added [ 1001.301598][T22015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.315963][T22015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.405902][ T5792] Bluetooth: hci0: command tx timeout [ 1001.434289][T22014] team0: Port device team_slave_0 added [ 1001.472135][T22014] team0: Port device team_slave_1 added [ 1001.495099][ T5792] Bluetooth: hci4: command tx timeout [ 1001.528328][T22009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.537257][T22009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.567916][T22009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.589516][T22009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.597698][T22009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.628308][T22009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.727399][T22016] Bluetooth: hci5: command tx timeout [ 1001.732999][ T5792] Bluetooth: hci6: command tx timeout [ 1001.818703][T22015] team0: Port device team_slave_0 added [ 1001.838328][T22015] team0: Port device team_slave_1 added [ 1001.965071][T22014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.972117][T22014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.999261][T22014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.252935][T22010] hsr_slave_0: entered promiscuous mode [ 1002.278354][T22010] hsr_slave_1: entered promiscuous mode [ 1002.300091][T22010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.314759][T22010] Cannot create hsr debugfs directory [ 1002.325907][T22014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.332901][T22014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.380425][T22014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.410464][T22015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.429876][T22015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.463167][T22015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.686477][T22015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.693516][T22015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.732759][T22015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.773126][T22009] hsr_slave_0: entered promiscuous mode [ 1002.791837][T22009] hsr_slave_1: entered promiscuous mode [ 1002.803817][T22009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.824822][T22009] Cannot create hsr debugfs directory [ 1003.249047][T22014] hsr_slave_0: entered promiscuous mode [ 1003.268199][T22014] hsr_slave_1: entered promiscuous mode [ 1003.281727][T22014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.295089][T22014] Cannot create hsr debugfs directory [ 1003.343877][T22015] hsr_slave_0: entered promiscuous mode [ 1003.356397][T22015] hsr_slave_1: entered promiscuous mode [ 1003.374536][T22015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.382744][T22015] Cannot create hsr debugfs directory [ 1003.507055][ T5792] Bluetooth: hci0: command tx timeout [ 1003.565001][ T5792] Bluetooth: hci4: command tx timeout [ 1003.666304][ T3446] batman_adv: batadv0: Interface deactivated: gretap2 [ 1003.721866][ T3446] batman_adv: batadv0: Removing interface: gretap2 [ 1003.804895][ T5792] Bluetooth: hci6: command tx timeout [ 1003.810381][ T5792] Bluetooth: hci5: command tx timeout [ 1005.388544][ T3446] hsr_slave_0: left promiscuous mode [ 1005.410874][ T3446] hsr_slave_1: left promiscuous mode [ 1005.431195][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.441208][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.458190][ T3446] bridge_slave_1: left allmulticast mode [ 1005.465256][ T3446] bridge_slave_1: left promiscuous mode [ 1005.472295][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.491583][ T3446] bridge_slave_0: left allmulticast mode [ 1005.499087][ T3446] bridge_slave_0: left promiscuous mode [ 1005.506756][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.565641][ T5792] Bluetooth: hci0: command tx timeout [ 1005.653759][ T5792] Bluetooth: hci4: command tx timeout [ 1005.887059][ T5792] Bluetooth: hci5: command tx timeout [ 1005.892692][T22016] Bluetooth: hci6: command tx timeout [ 1006.499376][ T3446] bond5 (unregistering): (slave veth11): Releasing active interface [ 1006.834359][ T3446] bond5 (unregistering): Released all slaves [ 1006.909264][ T3446] bond4 (unregistering): (slave veth7): Releasing active interface [ 1007.207386][ T3446] bond4 (unregistering): Released all slaves [ 1007.265341][ T3446] bond3 (unregistering): (slave veth5): Releasing active interface [ 1007.569422][ T3446] bond3 (unregistering): Released all slaves [ 1008.030006][ T3446] bond2 (unregistering): Released all slaves [ 1008.187801][ T3446] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1008.555300][ T3446] bond1 (unregistering): Released all slaves [ 1009.848809][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 1009.939594][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.949332][ T3446] bond_slave_1 (unregistering): left promiscuous mode [ 1010.061087][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.072805][ T3446] bond_slave_0 (unregistering): left promiscuous mode [ 1010.864257][ T3446] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1010.873549][ T3446] bridge0 (unregistering): left promiscuous mode [ 1010.881113][ T3446] bond0 (unregistering): Released all slaves [ 1014.161562][ T3446] IPVS: stop unused estimator thread 0... [ 1015.019091][T22010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1015.055081][T22010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1015.071537][T22010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1015.087518][T22010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1015.286720][T22009] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1015.310579][T22009] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1015.329620][T22009] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1015.363502][T22009] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1015.689517][T22015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1015.727630][T22015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1015.750537][T22015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1015.772065][T22015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1015.862177][T22010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.000816][T22009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.054274][T22014] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1016.073794][T22010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.090082][T22014] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1016.110269][T22014] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1016.143865][T22009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.214277][T22014] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1016.251768][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.259018][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.269841][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.277076][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.290212][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.297477][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.374296][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.381526][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.988086][T22015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.099391][T22015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.183248][T22014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.219943][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.227465][ T7484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.307544][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.314921][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.479369][T22014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.590097][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.597567][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.678035][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.685267][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.852414][T22010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.948683][T22009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.229895][T22010] veth0_vlan: entered promiscuous mode [ 1018.300648][T22010] veth1_vlan: entered promiscuous mode [ 1018.539147][T22010] veth0_macvtap: entered promiscuous mode [ 1018.619024][T22010] veth1_macvtap: entered promiscuous mode [ 1018.668874][T22010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.682469][T22010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.696922][T22010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.714161][T22010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.727047][T22010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.740674][T22010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.759249][T22010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.769760][T22010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.780541][T22010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.791708][T22010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.110408][T22015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.298986][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.335122][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.486849][T22014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.537983][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.575480][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.852344][T22009] veth0_vlan: entered promiscuous mode [ 1019.961353][T22009] veth1_vlan: entered promiscuous mode [ 1020.058431][T22009] veth0_macvtap: entered promiscuous mode [ 1020.081707][T22009] veth1_macvtap: entered promiscuous mode [ 1020.139945][T22009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.152934][T22009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.164944][T22009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.177565][T22009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.191670][T22009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.218743][T22009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.231817][T22009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.243229][T22009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.255635][T22009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.269238][T22009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.288387][T22009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.299118][T22009] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.311447][T22009] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.321870][T22009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.535433][T16206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.576230][T16206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.676911][T16206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.727091][T16206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.256232][T22015] veth0_vlan: entered promiscuous mode [ 1021.598058][T22015] veth1_vlan: entered promiscuous mode [ 1022.327676][T22014] veth0_vlan: entered promiscuous mode [ 1022.542000][T22014] veth1_vlan: entered promiscuous mode [ 1022.639349][T22015] veth0_macvtap: entered promiscuous mode [ 1022.688803][T22015] veth1_macvtap: entered promiscuous mode [ 1022.982999][T22014] veth0_macvtap: entered promiscuous mode [ 1023.083288][T22015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.121027][T22015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.149791][T22015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.251493][T22015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.342623][T22015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.441356][T22015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.531576][T22015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.685853][T22014] veth1_macvtap: entered promiscuous mode [ 1023.733030][T22015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.802191][T22015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.853875][T22015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.879569][T22015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.930359][T22015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.962604][T22015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.021480][T22015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.091603][T22174] lo speed is unknown, defaulting to 1000 [ 1024.141443][T22015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.181292][T22015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.226490][T22015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.269475][T22015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.334266][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.374786][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.408373][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.469689][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.510615][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.554909][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.594764][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.637442][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.684511][T22014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.779028][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.820788][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.854839][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.894789][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.931696][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.963448][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.997916][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.029695][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.080974][T22014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.209370][T22014] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.245610][T22014] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.256245][T22014] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.266645][T22014] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.495748][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.503819][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.708301][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.738341][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.825218][T16206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.853792][T16206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.005311][T16206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.013216][T16206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.930786][T22233] Cannot find add_set index 0 as target [ 1029.327679][T22234] batman_adv: batadv0: Adding interface: macvtap1 [ 1029.351960][T22234] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.382959][T22234] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1030.156949][T22230] batman_adv: batadv0: Removing interface: macvtap1 [ 1030.804528][T22237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1030.884727][ T8127] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1031.185382][ T8127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.232981][ T8127] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1031.290034][ T8127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.365378][ T8127] usb 7-1: config 0 descriptor?? [ 1031.897470][T22268] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.4316'. [ 1031.945602][ T8127] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 1032.053029][ T8127] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0003/input/input11 [ 1032.554015][T19139] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1032.620375][ T8127] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1032.765706][ T8127] usb 7-1: USB disconnect, device number 2 [ 1032.794369][T19139] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.879836][T19139] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1032.954761][T19139] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.033506][T19139] usb 10-1: config 0 descriptor?? [ 1033.136600][T22279] fido_id[22279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1033.168251][T19139] pwc: Askey VC010 type 2 USB webcam detected. [ 1033.597925][T19139] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1033.653528][T19139] pwc: recv_control_msg error -32 req 02 val 2700 [ 1033.716386][T19139] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1033.745754][T22293] netlink: 'syz.0.4322': attribute type 1 has an invalid length. [ 1033.774510][T19139] pwc: recv_control_msg error -32 req 04 val 1000 [ 1033.824833][T19139] pwc: recv_control_msg error -32 req 04 val 1300 [ 1033.875577][T19139] pwc: recv_control_msg error -32 req 04 val 1400 [ 1033.923849][T19139] pwc: recv_control_msg error -32 req 02 val 2000 [ 1033.965262][T19139] pwc: recv_control_msg error -32 req 02 val 2100 [ 1033.988729][T19139] pwc: recv_control_msg error -32 req 04 val 1500 [ 1034.027430][T22297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4322'. [ 1034.251837][T19139] pwc: recv_control_msg error -71 req 02 val 2400 [ 1034.316814][T19139] pwc: recv_control_msg error -71 req 02 val 2600 [ 1034.353160][T19139] pwc: recv_control_msg error -71 req 02 val 2900 [ 1034.404018][T19139] pwc: recv_control_msg error -71 req 02 val 2800 [ 1034.442603][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1034.456956][T19139] pwc: recv_control_msg error -71 req 04 val 1100 [ 1034.494190][T19139] pwc: recv_control_msg error -71 req 04 val 1200 [ 1034.557397][T19139] pwc: Registered as video103. [ 1034.596962][T19139] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input12 [ 1034.722083][T19139] usb 10-1: USB disconnect, device number 3 [ 1034.865656][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1035.167849][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1038.617364][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4337'. [ 1042.610851][T22353] team0: Port device team_slave_0 removed [ 1045.429582][T22399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.620398][T22403] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1045.895202][T22403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.959999][T22403] bond1: (slave lo): making interface the new active one [ 1045.973794][T22403] bond1: (slave lo): Enslaving as an active interface with an up link [ 1046.046280][T22403] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1052.250570][T22486] dccp_close: ABORT with 28 bytes unread [ 1052.440155][T22490] all: renamed from lo (while UP) [ 1055.085711][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.092728][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.065612][T22540] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 1057.416256][T22545] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 1057.505173][T22548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4383'. [ 1057.535977][T22548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4383'. [ 1057.627848][T22523] loop9: detected capacity change from 0 to 128 [ 1057.691773][T22540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1057.762082][T22540] bond1: (slave bond2): making interface the new active one [ 1057.771559][T22540] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1057.983582][T22543] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1058.141506][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1058.233133][T22552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1058.659857][T22564] syzkaller0: entered promiscuous mode [ 1058.694910][T22564] syzkaller0: entered allmulticast mode [ 1059.685354][ T8127] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1059.876757][T22578] loop6: detected capacity change from 0 to 4096 [ 1059.974800][ T8127] usb 10-1: Using ep0 maxpacket: 32 [ 1060.014792][ T8127] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1060.045400][T22369] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1060.088119][ T8127] usb 10-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1060.132385][ T8127] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.414822][ T8127] usb 10-1: Product: syz [ 1060.446097][ T8127] usb 10-1: Manufacturer: syz [ 1060.482489][ T8127] usb 10-1: SerialNumber: syz [ 1060.501903][T19139] IPVS: starting estimator thread 0... [ 1060.552320][ T8127] usb 10-1: config 0 descriptor?? [ 1060.586929][T22569] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1061.165166][T22578] loop6: detected capacity change from 0 to 128 [ 1061.284043][ T8127] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1061.295003][T22588] IPVS: using max 18 ests per chain, 43200 per kthread [ 1061.810651][ T8127] usb 10-1: USB disconnect, device number 4 [ 1061.879766][T22601] loop0: detected capacity change from 0 to 128 [ 1062.011685][T22601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1062.073467][T22601] System zones: 1-3, 19-19, 35-36 [ 1062.141026][T22601] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1062.265393][T22601] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.540626][T22010] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1065.718854][T22616] IPVS: Error joining to the multicast group [ 1066.234828][ T5821] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1066.474682][ T5821] usb 10-1: Using ep0 maxpacket: 16 [ 1066.570369][ T5821] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1066.702170][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.754247][ T5821] usb 10-1: Product: syz [ 1066.819235][ T5821] usb 10-1: Manufacturer: syz [ 1067.104739][ T5821] usb 10-1: SerialNumber: syz [ 1068.513438][ T5821] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1069.163204][ T5821] snd-usb-audio: probe of 10-1:222.0 failed with error -71 [ 1069.261139][ T5821] usb 10-1: USB disconnect, device number 5 [ 1069.319197][T22369] udevd[22369]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.087883][T22675] netlink: 'syz.0.4411': attribute type 9 has an invalid length. [ 1075.175425][T22714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4419'. [ 1075.333589][T22720] bond2: entered promiscuous mode [ 1075.387232][T22720] bond2: entered allmulticast mode [ 1075.427195][T22722] smc: net device bond0 applied user defined pnetid SYZ2 [ 1075.474921][T22722] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1075.879442][T22722] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1075.930667][T22722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.618852][T22722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.028110][T22722] bond0 (unregistering): Released all slaves [ 1112.460597][T21061] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1112.472547][T22013] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1112.495416][T21061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1112.524928][T21061] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1112.534319][T22013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1112.543238][T22013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1112.561263][T21061] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1112.569851][T22013] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1112.586238][T22013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1112.619930][T22016] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1112.643765][T22013] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1112.651503][T22013] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1112.823621][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1112.873464][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1112.884313][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1112.895839][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1112.903733][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1112.911659][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1113.113626][T22013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1113.134057][T22013] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1113.144993][T22013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1113.155404][T22013] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1113.165966][T22013] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1113.173842][T22013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1113.840846][ T2931] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.908765][T22749] lo speed is unknown, defaulting to 1000 [ 1114.022098][ T2931] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.067319][T22751] lo speed is unknown, defaulting to 1000 [ 1114.074976][T22753] lo speed is unknown, defaulting to 1000 [ 1114.102483][T22760] lo speed is unknown, defaulting to 1000 [ 1114.194457][ T2931] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.329868][ T2931] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.846591][T22013] Bluetooth: hci1: command tx timeout [ 1114.853589][T22013] Bluetooth: hci2: command tx timeout [ 1115.085156][T22013] Bluetooth: hci3: command tx timeout [ 1115.258592][T22013] Bluetooth: hci4: command tx timeout [ 1115.521368][T22753] chnl_net:caif_netlink_parms(): no params data found [ 1115.690342][T22751] chnl_net:caif_netlink_parms(): no params data found [ 1115.962759][T22760] chnl_net:caif_netlink_parms(): no params data found [ 1116.061300][T22749] chnl_net:caif_netlink_parms(): no params data found [ 1116.293687][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.301918][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.642922][T22753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.672343][T22753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.694987][T22753] bridge_slave_0: entered allmulticast mode [ 1116.705309][T22753] bridge_slave_0: entered promiscuous mode [ 1116.720307][T22753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.729093][T22753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.738147][T22753] bridge_slave_1: entered allmulticast mode [ 1116.747213][T22753] bridge_slave_1: entered promiscuous mode [ 1116.925274][T22013] Bluetooth: hci2: command tx timeout [ 1116.934473][ T5792] Bluetooth: hci1: command tx timeout [ 1117.065097][T22751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.072325][T22751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.106250][T22751] bridge_slave_0: entered allmulticast mode [ 1117.125020][T22751] bridge_slave_0: entered promiscuous mode [ 1117.134053][T22751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.154783][T22751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.165165][T22013] Bluetooth: hci3: command tx timeout [ 1117.171022][T22751] bridge_slave_1: entered allmulticast mode [ 1117.184103][T22751] bridge_slave_1: entered promiscuous mode [ 1117.260687][T22760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.275257][T22760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.282576][T22760] bridge_slave_0: entered allmulticast mode [ 1117.316811][T22760] bridge_slave_0: entered promiscuous mode [ 1117.327282][T22013] Bluetooth: hci4: command tx timeout [ 1117.344728][T22760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.353519][T22760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.361901][T22760] bridge_slave_1: entered allmulticast mode [ 1117.371335][T22760] bridge_slave_1: entered promiscuous mode [ 1117.491853][T22753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.616775][T22749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.624166][T22749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.650755][T22749] bridge_slave_0: entered allmulticast mode [ 1117.666343][T22749] bridge_slave_0: entered promiscuous mode [ 1117.688619][T22749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.706526][T22749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.713849][T22749] bridge_slave_1: entered allmulticast mode [ 1117.736527][T22749] bridge_slave_1: entered promiscuous mode [ 1117.775856][T22753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.827671][T22751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.900750][T22760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.925326][T22760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.997037][T22751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.166027][T22749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.212872][T22753] team0: Port device team_slave_0 added [ 1118.243813][T22753] team0: Port device team_slave_1 added [ 1118.408477][T22751] team0: Port device team_slave_0 added [ 1118.447888][T22760] team0: Port device team_slave_0 added [ 1118.460565][T22760] team0: Port device team_slave_1 added [ 1118.470773][T22749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.503944][T22751] team0: Port device team_slave_1 added [ 1118.779812][T22753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.788615][T22753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.818697][T22753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.866341][T22760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.873410][T22760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.912393][T22760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.927719][T22760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.937098][T22760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.963416][T22760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.993856][T22749] team0: Port device team_slave_0 added [ 1119.005276][T22013] Bluetooth: hci2: command tx timeout [ 1119.010759][T22013] Bluetooth: hci1: command tx timeout [ 1119.013528][T22749] team0: Port device team_slave_1 added [ 1119.031672][T22753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.040945][T22753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.072757][T22753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.174360][T22751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.195111][T22751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.237541][T22751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.250451][T22013] Bluetooth: hci3: command tx timeout [ 1119.291083][T22751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.304914][T22751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.338571][T22751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.405288][T22013] Bluetooth: hci4: command tx timeout [ 1119.419885][ T2931] hsr_slave_0: left promiscuous mode [ 1119.427556][ T2931] hsr_slave_1: left promiscuous mode [ 1119.435469][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.444796][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.459505][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.468959][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.479728][ T2931] bridge_slave_1: left allmulticast mode [ 1119.487100][ T2931] bridge_slave_1: left promiscuous mode [ 1119.494169][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.516624][ T2931] bridge_slave_0: left allmulticast mode [ 1119.523795][ T2931] bridge_slave_0: left promiscuous mode [ 1119.531461][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.621610][ T2931] veth1_macvtap: left promiscuous mode [ 1119.628569][ T2931] veth0_macvtap: left promiscuous mode [ 1119.635735][ T2931] veth1_vlan: left promiscuous mode [ 1119.642358][ T2931] veth0_vlan: left promiscuous mode [ 1121.085640][T22013] Bluetooth: hci1: command tx timeout [ 1121.094862][ T5792] Bluetooth: hci2: command tx timeout [ 1121.324638][T22013] Bluetooth: hci3: command tx timeout [ 1121.486425][T22013] Bluetooth: hci4: command tx timeout [ 1122.043311][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 1122.145053][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 1122.266499][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.360226][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.257924][ T2931] bond0 (unregistering): Released all slaves [ 1123.532310][T22749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.554734][T22749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.600008][T22749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.639262][T22753] hsr_slave_0: entered promiscuous mode [ 1123.661253][T22753] hsr_slave_1: entered promiscuous mode [ 1123.676213][T22753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.683850][T22753] Cannot create hsr debugfs directory [ 1123.720873][T22760] hsr_slave_0: entered promiscuous mode [ 1123.749028][T22760] hsr_slave_1: entered promiscuous mode [ 1123.756371][T22760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.763992][T22760] Cannot create hsr debugfs directory [ 1123.860048][T22749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.868710][T22749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.900165][T22749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.149343][T22749] hsr_slave_0: entered promiscuous mode [ 1124.206491][T22749] hsr_slave_1: entered promiscuous mode [ 1124.215191][T22749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.222932][T22749] Cannot create hsr debugfs directory [ 1124.310378][T22751] hsr_slave_0: entered promiscuous mode [ 1124.350338][T22751] hsr_slave_1: entered promiscuous mode [ 1124.357459][T22751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.396664][T22751] Cannot create hsr debugfs directory [ 1125.416662][T22760] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.585709][ T2931] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.818618][T22760] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.912072][ T2931] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.031678][T22760] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.139251][ T2931] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.291191][T22760] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.431313][ T2931] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.172574][ T2931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.231051][T22760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1127.250998][T22760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1127.601876][T22760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1127.641471][T22760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1127.690121][ T2931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.879894][ T2931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.038331][ T2931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.128118][T22760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.198335][T22760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.247163][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.254700][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.408209][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.415565][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.707183][T22760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.029666][T22760] veth0_vlan: entered promiscuous mode [ 1130.411746][T22760] veth1_vlan: entered promiscuous mode [ 1130.557779][T22760] veth0_macvtap: entered promiscuous mode [ 1130.569525][T22760] veth1_macvtap: entered promiscuous mode [ 1131.210499][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.287894][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.326134][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.354903][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.378702][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.395258][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.419137][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.444396][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.466677][T22760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.494031][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.512335][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.524859][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.539148][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.550871][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.563044][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.575381][T22760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.588205][T22760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.601723][T22760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.872075][T22760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.906326][T22760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.937716][T22760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.974707][T22760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.067827][T22753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.318719][T22753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.444905][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.482693][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.500915][T22749] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1133.543882][T22749] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1133.612640][T22753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.698658][T22749] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1133.734339][T22749] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1133.897157][T22753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.943670][T16206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.004791][T16206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.435006][ T2931] hsr_slave_0: left promiscuous mode [ 1134.462975][ T2931] hsr_slave_1: left promiscuous mode [ 1134.478053][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.499849][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.526065][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.544168][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.565730][ T2931] bridge_slave_1: left allmulticast mode [ 1134.575721][ T2931] bridge_slave_1: left promiscuous mode [ 1134.581533][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.598238][ T2931] bridge_slave_0: left allmulticast mode [ 1134.605851][ T2931] bridge_slave_0: left promiscuous mode [ 1134.611679][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.683435][ T2931] hsr_slave_0: left promiscuous mode [ 1134.702108][ T2931] hsr_slave_1: left promiscuous mode [ 1134.716125][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.725211][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.759994][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.773967][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.791442][ T2931] bridge_slave_1: left allmulticast mode [ 1134.804245][ T2931] bridge_slave_1: left promiscuous mode [ 1134.820595][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.851960][ T2931] bridge_slave_0: left allmulticast mode [ 1134.864670][ T2931] bridge_slave_0: left promiscuous mode [ 1134.877362][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.166608][ T2931] veth1_macvtap: left promiscuous mode [ 1135.172448][ T2931] veth0_macvtap: left promiscuous mode [ 1135.185475][ T2931] veth1_vlan: left promiscuous mode [ 1135.192220][ T2931] veth0_vlan: left promiscuous mode [ 1135.298486][ T2931] veth1_macvtap: left promiscuous mode [ 1135.315343][ T2931] veth0_macvtap: left promiscuous mode [ 1135.335256][ T2931] veth1_vlan: left promiscuous mode [ 1135.341777][ T2931] veth0_vlan: left promiscuous mode [ 1136.094016][ T2931] bond2 (unregistering): Released all slaves [ 1136.561931][ T2931] bond1 (unregistering): (slave lo): Releasing active interface [ 1136.571993][ T2931] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1136.585448][ T2931] bond1 (unregistering): Released all slaves [ 1138.078136][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 1138.193206][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 1138.308919][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.410185][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.328095][ T2931] bond0 (unregistering): Released all slaves [ 1140.827838][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 1140.937941][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.039988][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.006682][ T2931] bond0 (unregistering): Released all slaves [ 1142.180639][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1143.002444][T22753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1143.033677][T22753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1143.154026][T22753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1143.228714][T22753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1146.162372][T22749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.280128][T22749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.719189][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.726532][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.811801][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.819157][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.433133][ T2931] IPVS: stop unused estimator thread 0... [ 1147.581628][T22753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.770512][T22753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.865786][T22751] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1147.908431][T22751] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1147.967870][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.975102][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.076943][T22751] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1148.114210][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.121517][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.176791][T22751] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1148.473041][T22753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1148.734036][T22749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.820051][T22751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.982535][T22751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.128668][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.135938][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.207971][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.216708][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.522977][T22751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.717356][T22753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.032522][T22753] veth0_vlan: entered promiscuous mode [ 1150.114158][T22753] veth1_vlan: entered promiscuous mode [ 1150.372141][T22753] veth0_macvtap: entered promiscuous mode [ 1150.427960][T22753] veth1_macvtap: entered promiscuous mode [ 1150.478436][T22749] veth0_vlan: entered promiscuous mode [ 1150.631298][T22751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.666201][T22753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.679499][T22753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.690998][T22753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.702702][T22753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.713506][T22753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.725251][T22753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.738388][T22753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.749658][T22753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.761285][T22753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.774012][T22753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.785936][T22753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.797236][T22753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.808633][T22753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.821493][T22753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.834100][T22753] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.843738][T22753] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.853331][T22753] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.862835][T22753] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.977900][T22749] veth1_vlan: entered promiscuous mode [ 1151.422163][T22749] veth0_macvtap: entered promiscuous mode [ 1151.641817][T22749] veth1_macvtap: entered promiscuous mode [ 1151.707003][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.754932][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.024398][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.055312][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.087202][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.142136][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.162602][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.183834][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.202280][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.216197][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.732016][T22749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.861451][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.914770][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.958814][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.142198][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.179114][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.226791][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.245855][T22749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.268198][T22749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.298350][T22749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.402039][T22749] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.411258][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.411357][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.445206][T22749] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.456073][T22749] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.466927][T22749] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.815768][T22751] veth0_vlan: entered promiscuous mode [ 1154.011250][T22751] veth1_vlan: entered promiscuous mode [ 1154.084035][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.167828][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.278658][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.320171][T22751] veth0_macvtap: entered promiscuous mode [ 1154.338171][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.644203][T22751] veth1_macvtap: entered promiscuous mode [ 1154.810092][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.387085][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.443712][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.483838][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.534741][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.568338][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.604588][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.662282][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.720241][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.762131][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.876430][T22751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.898393][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.912035][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.925164][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.938181][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.950456][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.963384][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.975465][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.988712][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.000754][T22751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.014167][T22751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.031434][T22751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.807554][T22751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.854861][T22751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.865615][T22751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.876281][T22751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.117868][T16206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.124941][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.139911][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.172840][T16206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.502325][T23149] loop3: detected capacity change from 0 to 1024 [ 1159.575959][T23149] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1160.717596][T23149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.477287][T22753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.552350][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1169.552367][ T28] audit: type=1326 audit(1783126757.601:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.658967][ T28] audit: type=1326 audit(1783126757.601:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.688447][ T28] audit: type=1326 audit(1783126757.601:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.717536][ T28] audit: type=1326 audit(1783126757.641:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.747677][ T28] audit: type=1326 audit(1783126757.641:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.777013][ T28] audit: type=1326 audit(1783126757.641:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.806540][ T28] audit: type=1326 audit(1783126757.641:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.837381][ T28] audit: type=1326 audit(1783126757.741:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.866815][ T28] audit: type=1326 audit(1783126757.741:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1169.896139][ T28] audit: type=1326 audit(1783126757.741:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23207 comm="syz.5.4454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25999de59 code=0x7ffc0000 [ 1172.150291][T23248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4463'. [ 1173.514010][T23256] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[23260] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[23256] [ 1176.188239][T23277] loop5: detected capacity change from 0 to 128 [ 1176.339911][T23277] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1176.775532][T23277] sysv_free_block: trying to free block not in datazone [ 1176.978197][T22751] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1179.560109][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.574465][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.171551][T23364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4489'. [ 1190.331810][T23367] macvlan2: entered promiscuous mode [ 1190.375039][T23367] macvlan2: entered allmulticast mode [ 1190.769441][ T2931] tipc: Disabling bearer [ 1190.806481][ T2931] tipc: Left network mode [ 1190.837700][T23383] vlan2: entered allmulticast mode [ 1190.884048][T23383] veth0_to_bond: entered allmulticast mode [ 1191.323664][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 1191.323723][ T28] audit: type=1326 audit(1783126779.371:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23389 comm="syz.3.4493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b4979de59 code=0x0 [ 1193.475446][T23420] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[22753] was attempted by " [ 1193.976938][ T2931] team0: Port device xfrm0 removed [ 1194.068830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.112402][T23426] loop8: detected capacity change from 0 to 512 [ 1194.234710][T23426] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1194.286205][ T28] audit: type=1800 audit(1783126782.341:1304): pid=23410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4496" name="bus" dev="ramfs" ino=65829 res=0 errno=0 [ 1194.330084][T23426] EXT4-fs (loop8): ea_inode feature is not supported for Hurd [ 1197.051825][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.096235][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.401671][ T2931] hsr_slave_0: left promiscuous mode [ 1199.455509][ T2931] hsr_slave_1: left promiscuous mode [ 1199.546423][T23481] loop8: detected capacity change from 0 to 8192 [ 1200.013721][ T2931] bond0 (unregistering): (slave veth23): Releasing backup interface [ 1200.131931][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.954667][T22749] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 1201.005282][T22749] FAT-fs (loop8): Filesystem has been set read-only [ 1202.046950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.166845][ T3446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.727222][T16206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.944212][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.131028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.464440][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1305.471453][ C1] rcu: 0-...!: (1 GPs behind) idle=827c/1/0x4000000000000000 softirq=109954/109955 fqs=740 [ 1305.483916][ C1] rcu: (detected by 1, t=10502 jiffies, g=152741, q=1974 ncpus=2) [ 1305.491848][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1305.497091][ C0] NMI backtrace for cpu 0 [ 1305.497101][ C0] CPU: 0 PID: 7368 Comm: kworker/0:10 Not tainted syzkaller #0 [ 1305.497180][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1305.497190][ C0] Workqueue: rcu_gp process_srcu [ 1305.497298][ C0] RIP: 0010:lock_acquire+0xc1/0x420 [ 1305.497341][ C0] Code: f8 08 0f 83 a0 01 00 00 41 89 c6 c1 e8 06 48 8d 3c c5 68 6e 8c 8e be 08 00 00 00 e8 19 58 77 00 4c 0f a3 35 f9 6a 24 0d 73 0d 5a b3 08 00 84 c0 0f 84 2e 02 00 00 48 c7 c0 1c a3 8c 8e 48 c1 [ 1305.497373][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000057 [ 1305.497386][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81680367 [ 1305.497396][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8c6e68 [ 1305.497405][ C0] RBP: ffffc90000007c48 R08: ffffffff8e8c6e6f R09: 1ffffffff1d18dcd [ 1305.497416][ C0] R10: dffffc0000000000 R11: fffffbfff1d18dce R12: 1ffff92000000f74 [ 1305.497426][ C0] R13: ffffffff97564960 R14: 0000000000000000 R15: dffffc0000000000 [ 1305.497436][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1305.497449][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.497459][ C0] CR2: 0000001b32019ff8 CR3: 000000006620e000 CR4: 00000000003506f0 [ 1305.497474][ C0] Call Trace: [ 1305.497501][ C0] [ 1305.497527][ C0] ? debug_object_activate+0x307/0x500 [ 1305.497612][ C0] ? __rwlock_init+0x150/0x150 [ 1305.497630][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1305.497647][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1305.497667][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1305.497766][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1305.497784][ C0] ? debug_object_deactivate+0x67/0x380 [ 1305.497801][ C0] ? _raw_spin_lock+0x40/0x40 [ 1305.497824][ C0] debug_object_deactivate+0x67/0x380 [ 1305.497845][ C0] __hrtimer_run_queues+0x2cc/0xc10 [ 1305.497861][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1305.497879][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1305.497905][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1305.497921][ C0] ? read_tsc+0x9/0x20 [ 1305.497953][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1305.497975][ C0] hrtimer_interrupt+0x39d/0x980 [ 1305.498003][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1305.498023][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1305.498068][ C0] [ 1305.498073][ C0] [ 1305.498097][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1305.498168][ C0] RIP: 0010:preempt_count_sub+0x10/0x160 [ 1305.498195][ C0] Code: e8 45 f0 82 00 89 df e9 5b ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 55 53 48 bb 00 00 00 00 00 fc ff df <48> c7 c0 80 e4 2e 97 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 bd 00 00 [ 1305.498206][ C0] RSP: 0018:ffffc9000b58f9e8 EFLAGS: 00000287 [ 1305.498219][ C0] RAX: 000000002ce83b54 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1305.498230][ C0] RDX: 000000000000026b RSI: ffffffff8b1cf800 RDI: 0000000000000001 [ 1305.498239][ C0] RBP: 0000000000000000 R08: ffff8880b8f43e47 R09: 1ffff110171e87c8 [ 1305.498249][ C0] R10: dffffc0000000000 R11: ffffed10171e87c9 R12: 0000000000000002 [ 1305.498259][ C0] R13: ffff8880b8f43e40 R14: 0000026b2ce824f8 R15: 000000000000165c [ 1305.498279][ C0] delay_tsc+0x4e/0xc0 [ 1305.498307][ C0] try_check_zero+0x39c/0x3e0 [ 1305.498330][ C0] process_srcu+0x23b/0x1310 [ 1305.498349][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1305.498365][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1305.498382][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1305.498401][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1305.498418][ C0] ? process_scheduled_works+0x975/0x1600 [ 1305.498436][ C0] ? process_scheduled_works+0x975/0x1600 [ 1305.498456][ C0] process_scheduled_works+0xa60/0x1600 [ 1305.498487][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1305.498508][ C0] ? assign_work+0x3cc/0x5d0 [ 1305.498528][ C0] worker_thread+0xa5e/0xfe0 [ 1305.498558][ C0] kthread+0x2fa/0x390 [ 1305.498571][ C0] ? pr_cont_work+0x550/0x550 [ 1305.498589][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1305.498604][ C0] ret_from_fork+0x48/0x80 [ 1305.498621][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1305.498635][ C0] ret_from_fork_asm+0x11/0x20 [ 1305.498674][ C0] [ 1305.499085][ C1] rcu: rcu_preempt kthread starved for 9019 jiffies! g152741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1305.915684][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1305.925688][ C1] rcu: RCU grace-period kthread stack dump: [ 1305.931598][ C1] task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 [ 1305.942415][ C1] Call Trace: [ 1305.945717][ C1] [ 1305.948676][ C1] __schedule+0x15ae/0x4660 [ 1305.953313][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1305.958396][ C1] ? lock_chain_count+0x20/0x20 [ 1305.963303][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1305.968548][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1305.974477][ C1] ? asan.module_dtor+0x20/0x20 [ 1305.979353][ C1] ? rcu_is_watching+0x15/0xb0 [ 1305.984172][ C1] schedule+0xbd/0x170 [ 1305.988269][ C1] schedule_timeout+0x188/0x2d0 [ 1305.993148][ C1] ? console_conditional_schedule+0x40/0x40 [ 1305.999070][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1306.004993][ C1] ? update_process_times+0x1b0/0x1b0 [ 1306.010409][ C1] ? prepare_to_swait_event+0x344/0x360 [ 1306.016076][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 1306.020992][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1306.027190][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1306.032251][ C1] ? rcu_gp_init+0x1530/0x1530 [ 1306.037043][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 1306.041927][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1306.047165][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1306.052402][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 1306.057037][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1306.062177][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1306.067143][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 1306.072201][ C1] kthread+0x2fa/0x390 [ 1306.076298][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1306.081438][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1306.086224][ C1] ret_from_fork+0x48/0x80 [ 1306.090668][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1306.095286][ C1] ret_from_fork_asm+0x11/0x20 [ 1306.100102][ C1] [ 1306.103147][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1306.109664][ C1] CPU: 1 PID: 22751 Comm: syz-executor Not tainted syzkaller #0 [ 1306.117333][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1306.127427][ C1] RIP: 0010:smp_call_function_many_cond+0xd85/0x1190 [ 1306.134165][ C1] Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 34 f1 0a 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 6f ed 0a 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 53 ed [ 1306.154093][ C1] RSP: 0018:ffffc900039f74e0 EFLAGS: 00000293 [ 1306.160207][ C1] RAX: ffffffff817bf7fd RBX: 1ffff110171c87a9 RCX: ffff888024d35a00 [ 1306.168204][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1306.176206][ C1] RBP: ffffc900039f7660 R08: ffffc900039f7467 R09: 1ffff9200073ee8c [ 1306.184202][ C1] R10: dffffc0000000000 R11: fffff5200073ee8d R12: ffff8880b8e43d48 [ 1306.192201][ C1] R13: ffff8880b8f3d3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 1306.200217][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1306.209180][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1306.215812][ C1] CR2: 00007efe14826038 CR3: 000000007b0c7000 CR4: 00000000003506e0 [ 1306.223831][ C1] Call Trace: [ 1306.227159][ C1] [ 1306.230120][ C1] ? lock_chain_count+0x20/0x20 [ 1306.235040][ C1] ? arch_check_zapped_pmd+0xb0/0xb0 [ 1306.240358][ C1] ? smp_call_function_many+0x40/0x40 [ 1306.245772][ C1] ? __tlb_remove_page_size+0x1ec/0x490 [ 1306.251409][ C1] ? rcu_is_watching+0x15/0xb0 [ 1306.256229][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 1306.261720][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1306.266958][ C1] flush_tlb_mm_range+0x417/0x680 [ 1306.272052][ C1] ? flush_tlb_multi+0x50/0x50 [ 1306.276859][ C1] tlb_flush_mmu+0x1bd/0x510 [ 1306.281516][ C1] tlb_finish_mmu+0xf4/0x220 [ 1306.286374][ C1] exit_mmap+0x428/0xb90 [ 1306.290668][ C1] ? exit_mm_release+0x1a/0x30 [ 1306.295471][ C1] ? vm_brk+0x30/0x30 [ 1306.299483][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1306.305197][ C1] ? uprobe_clear_state+0x278/0x290 [ 1306.310470][ C1] __mmput+0x118/0x3a0 [ 1306.314608][ C1] exit_mm+0x23f/0x340 [ 1306.318713][ C1] ? do_exit+0x2530/0x2530 [ 1306.323169][ C1] ? taskstats_exit+0x359/0x9e0 [ 1306.328065][ C1] do_exit+0x909/0x2530 [ 1306.332269][ C1] ? put_task_struct+0xc0/0xc0 [ 1306.337074][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1306.343090][ C1] ? get_signal+0x100e/0x1390 [ 1306.347809][ C1] ? lock_chain_count+0x20/0x20 [ 1306.352709][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1306.358208][ C1] do_group_exit+0x22d/0x2f0 [ 1306.362837][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1306.368165][ C1] get_signal+0x12a6/0x1390 [ 1306.372720][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1306.378326][ C1] ? get_sigframe_size+0x20/0x20 [ 1306.383313][ C1] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1306.389101][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1306.394607][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1306.399924][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1306.405500][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1306.410985][ C1] do_syscall_64+0x61/0xb0 [ 1306.415446][ C1] ? clear_bhb_loop+0x40/0x90 [ 1306.420150][ C1] ? clear_bhb_loop+0x40/0x90 [ 1306.424855][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1306.430783][ C1] RIP: 0033:0x7ff25995e68e [ 1306.435223][ C1] Code: Unable to access opcode bytes at 0x7ff25995e664. [ 1306.442378][ C1] RSP: 002b:00007ffff1a19178 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1306.450824][ C1] RAX: fffffffffffffdfc RBX: 000055556cbba500 RCX: 00007ff25995e68e [ 1306.458906][ C1] RDX: 00007ffff1a191d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.466921][ C1] RBP: 00007ffff1a1923c R08: 0000000000000000 R09: 0000000000000000 [ 1306.474945][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1306.482959][ C1] R13: 00000000000927c0 R14: 0000000000125010 R15: 00007ffff1a19290 [ 1306.490988][ C1]