last executing test programs: 6.372021528s ago: executing program 0 (id=312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000640)="a8d07cee6d4e9ce02c2029fb3501d07c23435d11405c4f89e83f5ae700b509defbafce9712c72082fc22b4c6291aeb006bf6223c8d5928b69473ad62aaae460674867a046ad5b510c29796eed953ae23f31730c1207cdfafd481c40ecfd47a8e147b03b6d01f0606192dc46af639f7509a25bea9a8345bd8e7be5d7260edf07a21f49073752f859ea9d6d6cbf7ded678a80259d2f62839fbb27be1e603c21a1688d66ffe429cd192c570540b67ad479b5365bd8adeb6d554", 0xb8}, {&(0x7f0000000700)="ec8bdaf53ab25402cfb5ee0ed9f8e04c474b3e5f085c1d724f0cd6c2257dcc5e8bc94e6cc40b157be24d2f08cb2536cd78d6fd236be167b18d721525af8309bc5a373b0f142cebb71c14c0b501d4cfddb07e528302593bbeaf5b6ff983d50992dbd39834369679a5fd6370ed26f1ef1d9ffbba6068b5d55c9123e1e3c13c009dfc5f8e57710f5b33cbfd225d966b440bf2b5f09300e5bc97a0f9e0e896", 0x9d}, {0x0}], 0x3, &(0x7f0000003540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 6.193154115s ago: executing program 0 (id=313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x2, 0x7, 0x0, 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 4.742588819s ago: executing program 0 (id=324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000640)="a8d07cee6d4e9ce02c2029fb3501d07c23435d11405c4f89e83f5ae700b509defbafce9712c72082fc22b4c6291aeb006bf6223c8d5928b69473ad62aaae460674867a046ad5b510c29796eed953ae23f31730c1207cdfafd481c40ecfd47a8e147b03b6d01f0606192dc46af639f7509a25bea9a8345bd8e7be5d7260edf07a21f49073752f859ea9d6d6cbf7ded678a80259d2f62839fbb27be1e603c21a1688d66ffe429cd192c570540b67ad479b5365bd8adeb6d554", 0xb8}, {&(0x7f0000000700)="ec8bdaf53ab25402cfb5ee0ed9f8e04c474b3e5f085c1d724f0cd6c2257dcc5e8bc94e6cc40b157be24d2f08cb2536cd78d6fd236be167b18d721525af8309bc5a373b0f142cebb71c14c0b501d4cfddb07e528302593bbeaf5b6ff983d50992dbd39834369679a5fd6370ed26f1ef1d9ffbba6068b5d55c9123e1e3c13c009dfc5f8e57710f5b33cbfd225d966b440bf2b5f09300e5bc97a0f9e0e896", 0x9d}, {&(0x7f0000002080)}], 0x3, &(0x7f0000003540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 4.479921397s ago: executing program 2 (id=327): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) 4.461108896s ago: executing program 0 (id=328): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x6, 0x80000, 0x5a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sdr={0x56544943, 0x8}}, 0x6b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r3, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f00000003c0)='./bus\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r5 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 4.037627805s ago: executing program 2 (id=330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 3.689550652s ago: executing program 1 (id=331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x724) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.3902367s ago: executing program 1 (id=332): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x5, 0x30}, 0xc) r0 = dup(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0x32600) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x5}}, 0x20) 3.100021445s ago: executing program 1 (id=333): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="1400060000000000"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4004}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.881918618s ago: executing program 1 (id=334): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xbc, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0xa8, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.870049072s ago: executing program 2 (id=335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x2, 0x7, 0x0, 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 2.426907917s ago: executing program 1 (id=336): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x64000600) 1.78376361s ago: executing program 4 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf254f00000008000300", @ANYBLOB='d\x00z'], 0x18c}, 0x1, 0x0, 0x0, 0x4c}, 0x4040) 1.651295393s ago: executing program 4 (id=340): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) 1.460041789s ago: executing program 4 (id=341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000640)="a8d07cee6d4e9ce02c2029fb3501d07c23435d11405c4f89e83f5ae700b509defbafce9712c72082fc22b4c6291aeb006bf6223c8d5928b69473ad62aaae460674867a046ad5b510c29796eed953ae23f31730c1207cdfafd481c40ecfd47a8e147b03b6d01f0606192dc46af639f7509a25bea9a8345bd8e7be5d7260edf07a21f49073752f859ea9d6d6cbf7ded678a80259d2f62839fbb27be1e603c21a1688d66ffe429cd192c570540b67ad479b5365bd8adeb6d554", 0xb8}, {&(0x7f0000000700)="ec8bdaf53ab25402cfb5ee0ed9f8e04c474b3e5f085c1d724f0cd6c2257dcc5e8bc94e6cc40b157be24d2f08cb2536cd78d6fd236be167b18d721525af8309bc5a373b0f142cebb71c14c0b501d4cfddb07e528302593bbeaf5b6ff983d50992dbd39834369679a5fd6370ed26f1ef1d9ffbba6068b5d55c9123e1e3c13c009dfc5f8e57710f5b33cbfd225d966b440bf2b5f09300e5bc97a0f9e0e896", 0x9d}, {&(0x7f0000002080)}], 0x3, &(0x7f0000003540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 1.343753031s ago: executing program 2 (id=342): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket(0x10, 0x803, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) socket(0x10, 0x3, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) 1.278691333s ago: executing program 4 (id=343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x724) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.116125118s ago: executing program 3 (id=344): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x5, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x5}}, 0x20) 1.115099869s ago: executing program 0 (id=345): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="1400060000000000"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4004}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.0449781s ago: executing program 2 (id=346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 977.163167ms ago: executing program 4 (id=347): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xbc, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0xa8, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 858.791642ms ago: executing program 0 (id=348): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 831.862318ms ago: executing program 4 (id=349): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000001c0)={0x8, r6, 0x33, {0x81, 0x7fffffff}, 0x3}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1000, 0x9, 0x5, 0x2, 0x1, 0xffff8646, '\x00', 0x0, r5, 0x3, 0x0, 0x1}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r8, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)}], 0x2) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000006c0)="95", 0x1}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) 803.271294ms ago: executing program 3 (id=350): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 643.706422ms ago: executing program 3 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB='d\x00z'], 0x18c}, 0x1, 0x0, 0x0, 0x4c}, 0x4040) 411.591472ms ago: executing program 3 (id=352): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) 152.584733ms ago: executing program 3 (id=353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000640)="a8d07cee6d4e9ce02c2029fb3501d07c23435d11405c4f89e83f5ae700b509defbafce9712c72082fc22b4c6291aeb006bf6223c8d5928b69473ad62aaae460674867a046ad5b510c29796eed953ae23f31730c1207cdfafd481c40ecfd47a8e147b03b6d01f0606192dc46af639f7509a25bea9a8345bd8e7be5d7260edf07a21f49073752f859ea9d6d6cbf7ded678a80259d2f62839fbb27be1e603c21a1688d66ffe429cd192c570540b67ad479b5365bd8adeb6d554", 0xb8}, {&(0x7f0000000700)="ec8bdaf53ab25402cfb5ee0ed9f8e04c474b3e5f085c1d724f0cd6c2257dcc5e8bc94e6cc40b157be24d2f08cb2536cd78d6fd236be167b18d721525af8309bc5a373b0f142cebb71c14c0b501d4cfddb07e528302593bbeaf5b6ff983d50992dbd39834369679a5fd6370ed26f1ef1d9ffbba6068b5d55c9123e1e3c13c009dfc5f8e57710f5b33cbfd225d966b440bf2b5f09300e5bc97a0f9e0e896", 0x9d}, {&(0x7f0000002080)}], 0x3, &(0x7f0000003540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 11.073169ms ago: executing program 3 (id=354): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000001c0)={0x8, r6, 0x33, {0x81, 0x7fffffff}, 0x3}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1000, 0x9, 0x5, 0x2, 0x1, 0xffff8646, '\x00', 0x0, r5, 0x3, 0x0, 0x1}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) openat$fb0(0xffffff9c, 0x0, 0x4100c0, 0x0) writev(r9, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)}], 0x2) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000006c0)="95", 0x1}], 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000100)={0x8000, r8}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) 6.138438ms ago: executing program 1 (id=355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x2, 0x7, 0x0, 0x1}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 0s ago: executing program 2 (id=356): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x6, 0x80000, 0x5a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sdr={0x56544943, 0x8}}, 0x6b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r3, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f00000003c0)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c0001800600", @ANYRES16, @ANYBLOB="785454f63ace2532535fe458e26a717fb1f470cbce39657622847a083b06c05d7cca8ca7fd3ef37e"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 72.860908][ T5598] cgroup: Unknown subsys name 'net' [ 73.101321][ T5598] cgroup: Unknown subsys name 'cpuset' [ 73.157649][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.879618][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.276619][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.283470][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.290717][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.313118][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.313973][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.329520][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.339980][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.352583][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.354408][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.355364][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.361839][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.383680][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.394772][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.405361][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.413614][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.424325][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.424590][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.460862][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.462444][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.464494][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.489649][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.556448][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.557789][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.560102][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.561596][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.437759][ T5620] Bluetooth: hci2: command tx timeout [ 79.508085][ T5620] Bluetooth: hci1: command tx timeout [ 79.588535][ T5620] Bluetooth: hci4: command tx timeout [ 79.589660][ T60] Bluetooth: hci3: command tx timeout [ 79.589669][ T5620] Bluetooth: hci0: command tx timeout [ 79.908307][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.909925][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.910111][ T5611] bridge_slave_0: entered allmulticast mode [ 79.912013][ T5611] bridge_slave_0: entered promiscuous mode [ 79.945462][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.945616][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.945761][ T5612] bridge_slave_0: entered allmulticast mode [ 79.949424][ T5612] bridge_slave_0: entered promiscuous mode [ 79.952413][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.952674][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.956436][ T5613] bridge_slave_0: entered allmulticast mode [ 79.961879][ T5613] bridge_slave_0: entered promiscuous mode [ 79.991494][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.991759][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.992020][ T5611] bridge_slave_1: entered allmulticast mode [ 80.001140][ T5611] bridge_slave_1: entered promiscuous mode [ 80.026990][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.028599][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.028849][ T5612] bridge_slave_1: entered allmulticast mode [ 80.032150][ T5612] bridge_slave_1: entered promiscuous mode [ 80.033498][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.033758][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.034338][ T5613] bridge_slave_1: entered allmulticast mode [ 80.038901][ T5613] bridge_slave_1: entered promiscuous mode [ 80.089266][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.089432][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.089574][ T5615] bridge_slave_0: entered allmulticast mode [ 80.091321][ T5615] bridge_slave_0: entered promiscuous mode [ 80.139495][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.139650][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.140029][ T5614] bridge_slave_0: entered allmulticast mode [ 80.142649][ T5614] bridge_slave_0: entered promiscuous mode [ 80.165135][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.165402][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.165929][ T5615] bridge_slave_1: entered allmulticast mode [ 80.170487][ T5615] bridge_slave_1: entered promiscuous mode [ 80.212926][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.213105][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.213257][ T5614] bridge_slave_1: entered allmulticast mode [ 80.214969][ T5614] bridge_slave_1: entered promiscuous mode [ 80.222626][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.251211][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.258398][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.289287][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.414220][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.418192][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.460123][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.501578][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.523640][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.562456][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.565022][ T5611] team0: Port device team_slave_0 added [ 80.589559][ T5612] team0: Port device team_slave_0 added [ 80.592436][ T5613] team0: Port device team_slave_0 added [ 80.618721][ T5611] team0: Port device team_slave_1 added [ 80.639816][ T5612] team0: Port device team_slave_1 added [ 80.642645][ T5613] team0: Port device team_slave_1 added [ 80.682967][ T5615] team0: Port device team_slave_0 added [ 80.712695][ T5614] team0: Port device team_slave_0 added [ 80.736325][ T5615] team0: Port device team_slave_1 added [ 80.776950][ T5614] team0: Port device team_slave_1 added [ 80.781859][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.781876][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.781906][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.816226][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.816242][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.816266][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.820808][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.820822][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.820845][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.826911][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.826926][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.826949][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.855810][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.855826][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.855850][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.861554][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.861569][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.861593][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.906837][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.906854][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.906884][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.979337][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.979361][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.979384][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.994544][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.994559][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.994583][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.041007][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.041024][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.041047][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.196108][ T5611] hsr_slave_0: entered promiscuous mode [ 81.199085][ T5611] hsr_slave_1: entered promiscuous mode [ 81.234694][ T5612] hsr_slave_0: entered promiscuous mode [ 81.235858][ T5612] hsr_slave_1: entered promiscuous mode [ 81.236895][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 81.236979][ T5612] Cannot create hsr debugfs directory [ 81.250458][ T5613] hsr_slave_0: entered promiscuous mode [ 81.252410][ T5613] hsr_slave_1: entered promiscuous mode [ 81.254395][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 81.254418][ T5613] Cannot create hsr debugfs directory [ 81.306426][ T5615] hsr_slave_0: entered promiscuous mode [ 81.308438][ T5615] hsr_slave_1: entered promiscuous mode [ 81.310140][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 81.310162][ T5615] Cannot create hsr debugfs directory [ 81.401002][ T5614] hsr_slave_0: entered promiscuous mode [ 81.402207][ T5614] hsr_slave_1: entered promiscuous mode [ 81.403155][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 81.403178][ T5614] Cannot create hsr debugfs directory [ 81.508035][ T60] Bluetooth: hci2: command tx timeout [ 81.587326][ T60] Bluetooth: hci1: command tx timeout [ 81.667152][ T60] Bluetooth: hci4: command tx timeout [ 81.668953][ T60] Bluetooth: hci0: command tx timeout [ 81.669003][ T60] Bluetooth: hci3: command tx timeout [ 82.680664][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.719134][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.732552][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.770414][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.782386][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.813001][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.842810][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.871302][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.050354][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.092611][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.101321][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.132172][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.145614][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.174127][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.204199][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.231811][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.349115][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.385688][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.403511][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.440304][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.443956][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.486857][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.517383][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.544806][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.587774][ T5618] Bluetooth: hci2: command tx timeout [ 83.667592][ T5618] Bluetooth: hci1: command tx timeout [ 83.704934][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.743327][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.757662][ T5618] Bluetooth: hci3: command tx timeout [ 83.757690][ T5618] Bluetooth: hci0: command tx timeout [ 83.757707][ T5618] Bluetooth: hci4: command tx timeout [ 83.764855][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.800181][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.804007][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.826222][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.853333][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.881829][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.036147][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.075141][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.096197][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.096857][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.144251][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.150107][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.183328][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.198165][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.224012][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.331910][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.370961][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.427926][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.428141][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.493070][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.493291][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.589160][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.660299][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.684316][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.684461][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.760569][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.760711][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.835556][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.881711][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.906623][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.906773][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.974249][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.974357][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.082125][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.175530][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.196442][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.196685][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.272880][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.273063][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.398479][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.474222][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.474379][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.560062][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.560221][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.668094][ T60] Bluetooth: hci2: command tx timeout [ 85.747878][ T60] Bluetooth: hci1: command tx timeout [ 85.829858][ T60] Bluetooth: hci4: command tx timeout [ 85.829889][ T60] Bluetooth: hci0: command tx timeout [ 85.829909][ T60] Bluetooth: hci3: command tx timeout [ 86.071204][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.360999][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.765959][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.784363][ T5611] veth0_vlan: entered promiscuous mode [ 86.848859][ T32] cfg80211: failed to load regulatory.db [ 86.970485][ T5611] veth1_vlan: entered promiscuous mode [ 86.994700][ T5613] veth0_vlan: entered promiscuous mode [ 87.115556][ T5613] veth1_vlan: entered promiscuous mode [ 87.134316][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.250985][ T5612] veth0_vlan: entered promiscuous mode [ 87.272952][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.281873][ T5611] veth0_macvtap: entered promiscuous mode [ 87.331403][ T5611] veth1_macvtap: entered promiscuous mode [ 87.381194][ T5612] veth1_vlan: entered promiscuous mode [ 87.451116][ T5613] veth0_macvtap: entered promiscuous mode [ 87.510772][ T5613] veth1_macvtap: entered promiscuous mode [ 87.536743][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.608192][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.610144][ T5615] veth0_vlan: entered promiscuous mode [ 87.674661][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.694418][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.719100][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.739659][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.745951][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.746916][ T5615] veth1_vlan: entered promiscuous mode [ 87.761866][ T5612] veth0_macvtap: entered promiscuous mode [ 87.860027][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.881223][ T5612] veth1_macvtap: entered promiscuous mode [ 88.019411][ T156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.052518][ T156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.109276][ T156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158707][ T156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.284438][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.452821][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.530033][ T5615] veth0_macvtap: entered promiscuous mode [ 88.544413][ T5614] veth0_vlan: entered promiscuous mode [ 88.603154][ T1312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.606738][ T1312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.608921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.608977][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.618850][ T5615] veth1_macvtap: entered promiscuous mode [ 88.640868][ T1312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.684783][ T1312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.721726][ T5614] veth1_vlan: entered promiscuous mode [ 88.935862][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.936768][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.936785][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.135515][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.140256][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.140274][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.233650][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.233669][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.342330][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.356032][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.366526][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417628][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.417644][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.443172][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.568659][ T5614] veth0_macvtap: entered promiscuous mode [ 89.765175][ T5614] veth1_macvtap: entered promiscuous mode [ 89.904860][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.904878][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.785867][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.907606][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.929622][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.937644][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.937662][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.030852][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.046532][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.073183][ T5830] loop2: detected capacity change from 0 to 256 [ 91.076608][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.132202][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.256973][ T5830] vfat: Deprecated parameter 'posix' [ 91.256993][ T5830] FAT-fs: "posix" option is obsolete, not supported now [ 91.483743][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.483763][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.964293][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 91.964316][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 91.964327][ T5837] netlink: 124 bytes leftover after parsing attributes in process `syz.1.13'. [ 92.011856][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.011874][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.029889][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 92.215999][ T5838] gretap0: entered promiscuous mode [ 92.224976][ T5838] macsec1: entered promiscuous mode [ 92.225536][ T5838] macsec1: entered allmulticast mode [ 92.225551][ T5838] gretap0: entered allmulticast mode [ 92.283900][ T5838] gretap0: left allmulticast mode [ 92.284148][ T5838] gretap0: left promiscuous mode [ 92.594044][ T5846] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 93.078036][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.078056][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.270192][ T5857] loop3: detected capacity change from 0 to 1764 [ 93.455561][ T5848] syz.0.16 (5848) used greatest stack depth: 16288 bytes left [ 94.129591][ T5863] syz_tun: entered allmulticast mode [ 94.130076][ T5864] tipc: Started in network mode [ 94.130097][ T5864] tipc: Node identity 4246, cluster identity 4711 [ 94.130109][ T5864] tipc: Node number set to 16966 [ 94.246575][ T5860] syz_tun: left allmulticast mode [ 94.532172][ T5873] netlink: 27 bytes leftover after parsing attributes in process `syz.2.24'. [ 96.875446][ T5898] netlink: 'syz.3.32': attribute type 12 has an invalid length. [ 97.001143][ T5898] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.345624][ T5904] syz_tun: entered allmulticast mode [ 97.428108][ T5901] syz_tun: left allmulticast mode [ 97.655951][ T5911] netlink: 27 bytes leftover after parsing attributes in process `syz.0.35'. [ 98.330483][ T5917] netlink: 76 bytes leftover after parsing attributes in process `syz.4.38'. [ 99.093139][ T5937] syz_tun: entered allmulticast mode [ 99.334633][ T5936] syz_tun: left allmulticast mode [ 99.645645][ T5943] netlink: 27 bytes leftover after parsing attributes in process `syz.1.49'. [ 99.809699][ T5948] netlink: 76 bytes leftover after parsing attributes in process `syz.3.52'. [ 99.902456][ T5947] netlink: 'syz.2.50': attribute type 12 has an invalid length. [ 99.923581][ T5947] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.225689][ T5955] netlink: 52 bytes leftover after parsing attributes in process `syz.1.53'. [ 101.017468][ T5970] syz_tun: entered allmulticast mode [ 101.216604][ T5969] syz_tun: left allmulticast mode [ 101.703940][ T5978] netlink: 27 bytes leftover after parsing attributes in process `syz.2.64'. [ 101.728245][ T5981] netlink: 76 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.229655][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.68'. [ 102.545563][ T5997] netlink: 'syz.1.74': attribute type 12 has an invalid length. [ 102.551746][ T6002] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.751322][ T6008] netlink: 27 bytes leftover after parsing attributes in process `syz.4.78'. [ 102.756412][ T6011] netlink: 76 bytes leftover after parsing attributes in process `syz.2.79'. [ 103.926940][ T6041] netlink: 76 bytes leftover after parsing attributes in process `syz.2.90'. [ 104.110238][ T6043] netlink: 'syz.1.92': attribute type 12 has an invalid length. [ 104.135308][ T6043] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.138570][ T6046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'. [ 104.316791][ T6051] netlink: 27 bytes leftover after parsing attributes in process `syz.2.93'. [ 105.622852][ T6070] Zero length message leads to an empty skb [ 106.030691][ T6076] netlink: 76 bytes leftover after parsing attributes in process `syz.2.105'. [ 106.248565][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.106'. [ 106.512770][ T6088] netlink: 27 bytes leftover after parsing attributes in process `syz.2.107'. [ 106.551244][ T6090] netlink: 'syz.1.111': attribute type 12 has an invalid length. [ 106.575932][ T6090] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.307170][ T6110] loop3: detected capacity change from 0 to 128 [ 107.789234][ T37] audit: type=1804 audit(1781044847.062:2): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.119" name="/newroot/25/file0/file1" dev="loop3" ino=1048606 res=1 errno=0 [ 107.848629][ T6104] netlink: 'syz.2.116': attribute type 12 has an invalid length. [ 107.853155][ T6108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.854610][ T6107] netlink: 'syz.0.118': attribute type 12 has an invalid length. [ 107.860836][ T6112] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.372066][ T6158] netlink: 27 bytes leftover after parsing attributes in process `syz.2.131'. [ 110.837709][ T6163] netlink: 'syz.0.134': attribute type 12 has an invalid length. [ 110.838259][ T6164] netlink: 'syz.2.133': attribute type 12 has an invalid length. [ 110.845068][ T6165] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.845705][ T6166] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.545980][ T6177] netlink: 'syz.2.138': attribute type 12 has an invalid length. [ 111.553219][ T6177] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.192525][ T6191] netlink: 27 bytes leftover after parsing attributes in process `syz.3.143'. [ 112.512972][ T6198] netlink: 'syz.3.146': attribute type 12 has an invalid length. [ 112.515663][ T6198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.024919][ T6208] netlink: 'syz.0.151': attribute type 12 has an invalid length. [ 113.047522][ T6208] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.722440][ T6233] netlink: 27 bytes leftover after parsing attributes in process `syz.3.157'. [ 114.763607][ T6237] netlink: 'syz.2.159': attribute type 12 has an invalid length. [ 114.788682][ T6237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.821501][ T6257] netlink: 'syz.1.167': attribute type 12 has an invalid length. [ 115.851492][ T6257] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.333988][ T6268] netlink: 'syz.0.170': attribute type 12 has an invalid length. [ 116.334434][ T6269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.601479][ T6274] netlink: 27 bytes leftover after parsing attributes in process `syz.2.171'. [ 117.040143][ T6279] netlink: 'syz.4.172': attribute type 12 has an invalid length. [ 117.042695][ T6279] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.410819][ T6299] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.937894][ T6307] netlink: 27 bytes leftover after parsing attributes in process `syz.1.183'. [ 119.093002][ T6312] netlink: 'syz.0.185': attribute type 12 has an invalid length. [ 119.124044][ T6312] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.573395][ T6324] netlink: 368 bytes leftover after parsing attributes in process `syz.2.190'. [ 119.802596][ T6329] netlink: 'syz.2.192': attribute type 12 has an invalid length. [ 119.830954][ T6329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.831657][ T6330] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.353954][ T6338] netlink: 'syz.1.194': attribute type 12 has an invalid length. [ 120.354968][ T6340] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.542120][ T6350] netlink: 'syz.3.198': attribute type 12 has an invalid length. [ 121.552817][ T6350] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.868467][ T6352] netlink: 27 bytes leftover after parsing attributes in process `syz.3.199'. [ 122.289618][ T6359] netlink: 368 bytes leftover after parsing attributes in process `syz.0.202'. [ 122.596439][ T6367] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.913125][ T6377] netlink: 'syz.2.209': attribute type 12 has an invalid length. [ 122.923747][ T6377] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.617417][ T6388] netlink: 27 bytes leftover after parsing attributes in process `syz.1.213'. [ 123.900788][ T6394] netlink: 368 bytes leftover after parsing attributes in process `syz.1.214'. [ 124.668069][ T6399] netlink: 'syz.1.216': attribute type 12 has an invalid length. [ 124.669377][ T6400] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.326592][ T6415] netlink: 'syz.4.221': attribute type 12 has an invalid length. [ 125.339234][ T6415] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.550363][ T6419] netlink: 'syz.0.223': attribute type 12 has an invalid length. [ 125.574277][ T6419] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.719250][ T6421] netlink: 27 bytes leftover after parsing attributes in process `syz.4.225'. [ 126.216032][ T6430] netlink: 368 bytes leftover after parsing attributes in process `syz.3.227'. [ 127.941974][ T6452] netlink: 'syz.1.236': attribute type 12 has an invalid length. [ 127.942692][ T6453] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.366888][ T6460] netlink: 7 bytes leftover after parsing attributes in process `syz.1.238'. [ 128.718986][ T6467] netlink: 368 bytes leftover after parsing attributes in process `syz.0.241'. [ 129.346469][ T6476] netlink: 'syz.0.246': attribute type 12 has an invalid length. [ 129.385639][ T6476] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.480321][ T6482] netlink: 'syz.1.248': attribute type 12 has an invalid length. [ 129.594843][ T6482] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.974762][ T6491] netlink: 7 bytes leftover after parsing attributes in process `syz.1.250'. [ 130.459680][ T6495] netlink: 'syz.4.252': attribute type 12 has an invalid length. [ 130.476397][ T6495] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.590102][ T6498] netlink: 368 bytes leftover after parsing attributes in process `syz.1.253'. [ 131.723394][ T6515] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.750481][ T6517] netlink: 'syz.2.260': attribute type 12 has an invalid length. [ 132.079291][ T6524] netlink: 268 bytes leftover after parsing attributes in process `syz.4.264'. [ 132.219789][ T6526] netlink: 7 bytes leftover after parsing attributes in process `syz.2.263'. [ 132.882980][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883114][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.874476][ T6546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.914275][ T6553] netlink: 'syz.3.273': attribute type 12 has an invalid length. [ 134.101259][ T6555] netlink: 'syz.0.274': attribute type 12 has an invalid length. [ 134.118695][ T6555] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.311867][ T6559] netlink: 268 bytes leftover after parsing attributes in process `syz.3.275'. [ 134.795833][ T6565] netlink: 7 bytes leftover after parsing attributes in process `syz.1.277'. [ 134.871295][ T6568] netlink: 'syz.2.279': attribute type 12 has an invalid length. [ 134.891961][ T6568] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.797146][ T6580] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.005108][ T6583] netlink: 'syz.4.285': attribute type 12 has an invalid length. [ 136.425023][ T6590] netlink: 268 bytes leftover after parsing attributes in process `syz.4.288'. [ 136.917693][ T6597] netlink: 7 bytes leftover after parsing attributes in process `syz.1.290'. [ 137.945424][ T6618] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.098285][ T6620] netlink: 'syz.2.299': attribute type 12 has an invalid length. [ 138.324366][ T6627] netlink: 268 bytes leftover after parsing attributes in process `syz.3.302'. [ 138.324473][ T6627] netlink: 96 bytes leftover after parsing attributes in process `syz.3.302'. [ 138.365949][ T6630] netlink: 'syz.4.304': attribute type 12 has an invalid length. [ 138.374933][ T6630] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.415045][ T6631] netlink: 7 bytes leftover after parsing attributes in process `syz.2.303'. [ 138.679681][ T6638] netlink: 'syz.2.306': attribute type 12 has an invalid length. [ 138.683892][ T6638] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.852993][ T6650] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.277690][ T6660] netlink: 'syz.4.314': attribute type 12 has an invalid length. [ 140.321921][ T6661] netlink: 368 bytes leftover after parsing attributes in process `syz.3.315'. [ 140.645610][ T6666] netlink: 7 bytes leftover after parsing attributes in process `syz.4.317'. [ 140.988149][ T6675] netlink: 'syz.4.322': attribute type 12 has an invalid length. [ 140.995756][ T6675] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.638382][ T6681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.963320][ T6687] netlink: 368 bytes leftover after parsing attributes in process `syz.1.326'. [ 142.140013][ T6691] netlink: 'syz.2.327': attribute type 12 has an invalid length. [ 143.271108][ T6709] netlink: 7 bytes leftover after parsing attributes in process `syz.1.333'. [ 144.328437][ T6718] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.423264][ T6720] netlink: 'syz.3.338': attribute type 12 has an invalid length. [ 144.425328][ T6720] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.569179][ T6723] netlink: 368 bytes leftover after parsing attributes in process `syz.4.339'. [ 144.719376][ T6725] netlink: 'syz.4.340': attribute type 12 has an invalid length. [ 145.345703][ T6739] netlink: 7 bytes leftover after parsing attributes in process `syz.0.345'. [ 145.582887][ T6747] netlink: 'syz.4.349': attribute type 12 has an invalid length. [ 145.584344][ T6748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.585140][ T6747] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.997428][ T6754] netlink: 'syz.3.352': attribute type 12 has an invalid length. [ 146.449848][ T6762] netlink: 'syz.3.354': attribute type 12 has an invalid length. [ 146.456093][ T6762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.076584][ T0] ------------[ cut here ]------------ [ 147.076596][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 147.076606][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#0: swapper/0/0 [ 147.076633][ T0] Modules linked in: [ 147.076664][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.076680][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.076691][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 147.076707][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 7a 88 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 70 [ 147.076719][ T0] RSP: 0018:ffffffff8dc07b98 EFLAGS: 00010097 [ 147.076730][ T0] RAX: 0000000000000000 RBX: ffff8880b863ba40 RCX: 0000000000000002 [ 147.076740][ T0] RDX: ffff888027350000 RSI: ffffffff8d8bb44d RDI: ffffffff8baa5680 [ 147.076750][ T0] RBP: ffffffff8dc07dd0 R08: ffff8880b873c91f R09: 0000000000000000 [ 147.076759][ T0] R10: ffff8880b873c910 R11: ffffffff8199a020 R12: dffffc0000000000 [ 147.076770][ T0] R13: ffffffff8d8f1018 R14: ffffffff8dcfef40 R15: ffff8880b863c620 [ 147.076780][ T0] FS: 0000000000000000(0000) GS:ffff888125ebb000(0000) knlGS:0000000000000000 [ 147.076791][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.076801][ T0] CR2: 000020000003d030 CR3: 000000003d5dc000 CR4: 00000000003526f0 [ 147.076813][ T0] Call Trace: [ 147.076822][ T0] [ 147.076830][ T0] put_prev_task_idle+0xd/0x20 [ 147.076844][ T0] __schedule+0x3da0/0x5550 [ 147.076879][ T0] ? __pfx___schedule+0x10/0x10 [ 147.076892][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.076915][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 147.076939][ T0] schedule_idle+0x51/0x90 [ 147.076954][ T0] do_idle+0x4a6/0x540 [ 147.076978][ T0] ? __pfx_do_idle+0x10/0x10 [ 147.077005][ T0] cpu_startup_entry+0x43/0x60 [ 147.077026][ T0] rest_init+0x2de/0x300 [ 147.077047][ T0] start_kernel+0x392/0x3e0 [ 147.077071][ T0] x86_64_start_reservations+0x24/0x30 [ 147.077088][ T0] x86_64_start_kernel+0x143/0x1c0 [ 147.077105][ T0] common_startup_64+0x13e/0x157 [ 147.077131][ T0] [ 147.077138][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.077149][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.077164][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.077171][ T0] Call Trace: [ 147.077177][ T0] [ 147.077182][ T0] vpanic+0x56c/0xa60 [ 147.077202][ T0] ? __pfx__printk+0x10/0x10 [ 147.077216][ T0] ? __pfx_vpanic+0x10/0x10 [ 147.077234][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 147.077256][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 147.077282][ T0] panic+0xc5/0xd0 [ 147.077301][ T0] ? __pfx_panic+0x10/0x10 [ 147.077324][ T0] ? common_startup_64+0x13e/0x157 [ 147.077336][ T0] __warn+0x315/0x4c0 [ 147.077350][ T0] ? update_curr_idle+0x1cf/0x260 [ 147.077360][ T0] ? update_curr_idle+0x1cf/0x260 [ 147.077370][ T0] __report_bug+0x339/0x540 [ 147.077386][ T0] ? update_curr_idle+0x1cf/0x260 [ 147.077396][ T0] ? __pfx___report_bug+0x10/0x10 [ 147.077413][ T0] ? pick_task_fair+0x21a/0x1410 [ 147.077425][ T0] ? update_curr_idle+0x1cf/0x260 [ 147.077434][ T0] report_bug+0x16a/0x220 [ 147.077447][ T0] ? update_curr_idle+0x1cf/0x260 [ 147.077456][ T0] ? update_curr_idle+0x1d1/0x260 [ 147.077465][ T0] handle_bug+0x9c/0x200 [ 147.077484][ T0] exc_invalid_op+0x1a/0x50 [ 147.077498][ T0] asm_exc_invalid_op+0x1a/0x20 [ 147.077509][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 147.077519][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 7a 88 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 70 [ 147.077527][ T0] RSP: 0018:ffffffff8dc07b98 EFLAGS: 00010097 [ 147.077536][ T0] RAX: 0000000000000000 RBX: ffff8880b863ba40 RCX: 0000000000000002 [ 147.077543][ T0] RDX: ffff888027350000 RSI: ffffffff8d8bb44d RDI: ffffffff8baa5680 [ 147.077550][ T0] RBP: ffffffff8dc07dd0 R08: ffff8880b873c91f R09: 0000000000000000 [ 147.077556][ T0] R10: ffff8880b873c910 R11: ffffffff8199a020 R12: dffffc0000000000 [ 147.077564][ T0] R13: ffffffff8d8f1018 R14: ffffffff8dcfef40 R15: ffff8880b863c620 [ 147.077573][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 147.077587][ T0] ? update_curr_idle+0xab/0x260 [ 147.077598][ T0] put_prev_task_idle+0xd/0x20 [ 147.077607][ T0] __schedule+0x3da0/0x5550 [ 147.077630][ T0] ? __pfx___schedule+0x10/0x10 [ 147.077640][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.077656][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 147.077673][ T0] schedule_idle+0x51/0x90 [ 147.077684][ T0] do_idle+0x4a6/0x540 [ 147.077700][ T0] ? __pfx_do_idle+0x10/0x10 [ 147.077720][ T0] cpu_startup_entry+0x43/0x60 [ 147.077735][ T0] rest_init+0x2de/0x300 [ 147.077751][ T0] start_kernel+0x392/0x3e0 [ 147.077766][ T0] x86_64_start_reservations+0x24/0x30 [ 147.077778][ T0] x86_64_start_kernel+0x143/0x1c0 [ 147.077790][ T0] common_startup_64+0x13e/0x157 [ 147.077807][ T0] [ 148.142815][ T0] Shutting down cpus with NMI [ 148.143123][ T0] Kernel Offset: disabled